$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fa56e62-b9fd-376b-8291-0094b80006f8.roa File: 0fa56e62-b9fd-376b-8291-0094b80006f8.roa (raw, json) Hash identifier: IsN6nhT5BhCFKw2lCuPp5RpPSn5TerAR+nyyHHvQfBs= Subject key identifier: 85:1D:52:41:5D:9C:97:FF:6B:73:8C:BC:A8:1B:9F:28:DB:AA:29:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA18777A8C553427EADE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fa56e62-b9fd-376b-8291-0094b80006f8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:18:77:7a:8c:55:34:27:ea:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=27374adc-af10-4022-b821-cc6e64b98d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:a5:8f:a5:6f:c9:0c:e2:22:00:fd:74:d4: 66:9a:2a:84:ee:2b:72:44:d1:d8:c7:be:ea:10:08: 60:46:b8:6d:89:9e:4d:c7:b9:94:1a:f5:1d:7f:8d: 8d:57:c7:22:43:ea:29:f7:fa:60:c1:9b:8f:f9:03: a6:0e:84:91:13:8f:e0:ab:75:3c:88:d5:a5:e8:6d: 36:df:5d:e1:e5:27:51:bd:23:3d:4a:44:03:21:80: e5:55:29:cc:36:4b:18:71:73:6d:f8:92:9d:5e:6d: 63:1d:10:bd:0f:03:f0:33:0d:03:66:c6:56:75:84: 57:ba:03:dd:d4:0a:99:96:62:d1:bb:94:31:d0:24: ee:3a:49:47:39:2b:6d:8e:3c:1a:8d:41:c0:32:94: 3a:40:c1:a6:57:b6:34:28:d0:c1:28:46:64:c2:66: 00:6f:13:b9:3e:27:ae:b8:c3:a1:64:15:51:47:a0: bf:f6:d3:24:c4:0e:d5:58:15:96:1a:03:d4:32:51: 65:61:d2:d0:ec:e6:43:ff:50:aa:16:e0:18:22:10: 17:ce:7c:a2:84:29:ea:b9:e9:9a:26:f3:56:9a:26: ee:85:dc:cf:59:c0:99:b3:ea:0f:d3:4a:f1:dd:b7: 46:8e:cf:e3:73:69:08:83:e6:34:63:33:09:17:a1: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1D:52:41:5D:9C:97:FF:6B:73:8C:BC:A8:1B:9F:28:DB:AA:29:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fa56e62-b9fd-376b-8291-0094b80006f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cc:b5:66:68:af:59:f0:39:90:9a:47:82:0d:0b:07:e8:ee: 59:18:c7:9a:74:40:0e:3f:74:02:82:a7:57:8f:50:01:a0:8b: f0:6b:5e:42:71:f1:18:4b:81:c5:53:1c:9e:66:54:0d:61:5b: 64:95:ca:1c:f0:d9:87:e0:8a:2f:5f:63:b1:8d:c2:36:63:b6: 89:b9:c7:eb:11:5c:54:61:20:f8:6d:3d:c6:f7:50:eb:a7:62: 65:bb:aa:2d:9c:7a:80:87:1b:82:cf:e3:a3:b3:49:27:41:63: 1b:40:bd:95:60:76:d7:52:72:48:9d:60:b9:e6:40:ed:94:ea: fe:61:ba:e0:fd:cd:9c:62:a6:90:57:b0:49:2c:28:8a:7f:49: e1:7a:ef:cb:b9:e2:0d:2c:a1:09:04:62:1b:94:a5:2f:ff:07: 63:b6:41:dc:13:47:78:0e:f8:37:2e:72:ba:5c:18:8c:07:5b: f3:89:57:fc:7e:47:22:01:87:02:76:9b:db:c8:0b:69:75:a8: 60:ca:f6:97:8e:fb:62:44:bc:d7:33:64:43:e3:58:a2:5e:8f: dc:91:7a:12:a8:57:41:fc:33:db:55:9f:8a:03:90:2a:8a:c6: 4d:9e:5d:33:69:08:c4:ca:5b:51:de:76:a4:1d:0d:08:e0:d8: 37:6f:a6:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhh3eoxVNCfq3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjczNzRhZGMtYWYxMC00MDIyLWI4MjEtY2M2ZTY0Yjk4ZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGOlj6VvyQziIgD9dNRmmiqE7ityRNHYx77q EAhgRrhtiZ5Nx7mUGvUdf42NV8ciQ+op9/pgwZuP+QOmDoSRE4/gq3U8iNWl6G02 313h5SdRvSM9SkQDIYDlVSnMNksYcXNt+JKdXm1jHRC9DwPwMw0DZsZWdYRXugPd 1AqZlmLRu5Qx0CTuOklHOSttjjwajUHAMpQ6QMGmV7Y0KNDBKEZkwmYAbxO5Pieu uMOhZBVRR6C/9tMkxA7VWBWWGgPUMlFlYdLQ7OZD/1CqFuAYIhAXznyihCnquema JvNWmibuhdzPWcCZs+oP00rx3bdGjs/jc2kIg+Y0YzMJF6GOGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUdUkFdnJf/a3OMvKgbnyjbqilHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZhNTZlNjItYjlmZC0z NzZiLTgyOTEtMDA5NGI4MDAwNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELMtWZor1nwOZCaR4INCwfo7lkYx5p0QA4/dAKCp1ePUAGgi/BrXkJx 8RhLgcVTHJ5mVA1hW2SVyhzw2Yfgii9fY7GNwjZjtom5x+sRXFRhIPhtPcb3UOun YmW7qi2ceoCHG4LP46OzSSdBYxtAvZVgdtdSckidYLnmQO2U6v5huuD9zZxippBX sEksKIp/SeF678u54g0soQkEYhuUpS//B2O2QdwTR3gO+DcucrpcGIwHW/OJV/x+ RyIBhwJ2m9vIC2l1qGDK9peO+2JEvNczZEPjWKJej9yRehKoV0H8M9tVn4oDkCqK xk2eXTNpCMTKW1HedqQdDQjg2Ddvpv4= -----END CERTIFICATE-----Generated at Sat Apr 26 22:30:02 2025 by rpki-client