$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27f4800a-abb8-3101-a8ab-4334bf97d119.roa File: 27f4800a-abb8-3101-a8ab-4334bf97d119.roa (raw, json) Hash identifier: nzg9kGCOLMIiIam4eHVMaPTH1035sUJPTWEZ9ZeZYK8= Subject key identifier: 3B:9F:4F:AE:D1:57:09:44:24:0D:74:B9:2A:13:37:D0:AA:C5:39:CC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A1FD6081D86B0EFE4D78 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27f4800a-abb8-3101-a8ab-4334bf97d119.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.17.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a1:fd:60:81:d8:6b:0e:fe:4d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5da094fd-0013-4c78-b8c5-9848788eb3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:a7:f5:b9:52:9b:49:7b:43:fc:ce:5a:ea: a8:a5:71:51:b8:99:51:01:eb:f4:03:8c:3a:32:db: 46:74:da:76:58:6a:cd:f4:79:1c:ec:5d:36:af:38: 66:1a:46:24:90:f9:cd:a5:67:4a:d3:53:c8:2b:86: bd:bc:e8:1a:45:91:2d:c7:68:de:2a:e5:a9:40:37: 4b:e7:61:b8:d6:6b:6b:c9:0f:92:e6:62:3f:5d:7a: 10:f1:43:db:dd:e0:b5:e6:2d:43:5e:fe:c6:15:f0: 50:39:09:94:cc:cf:82:7e:35:73:f7:85:c8:b5:d3: 59:e4:4e:a8:49:f7:0f:4e:24:85:99:69:a5:a2:a2: 6d:53:b0:89:39:99:16:ac:16:2c:5e:b7:52:03:02: 71:11:cc:d1:14:65:6d:f1:80:8f:2a:ca:ea:3c:08: 72:b4:ab:4c:87:db:0f:96:f9:d6:5f:71:34:c0:f5: 65:2c:80:d5:ab:39:e7:2b:4f:1d:68:e8:22:70:c6: 2a:1c:0f:66:c3:98:2b:41:94:f3:8b:84:a7:a0:4e: 82:4f:ce:0a:6b:48:25:65:1f:ed:b7:af:07:1b:23: 3c:3b:85:96:b5:84:d9:15:a9:1b:12:c1:ae:6e:94: 33:09:88:0a:53:ed:c3:6a:bd:79:81:d4:fa:09:36: 81:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9F:4F:AE:D1:57:09:44:24:0D:74:B9:2A:13:37:D0:AA:C5:39:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27f4800a-abb8-3101-a8ab-4334bf97d119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ac:cd:dd:27:7f:a2:75:12:51:1e:24:48:ae:fd:1b:50:40: 17:ee:db:b8:bc:b7:9e:ce:c4:4e:7d:1e:e5:72:c3:68:aa:13: bb:78:9d:5f:a7:b9:dd:50:c6:ec:71:21:52:4e:57:b4:d0:49: 06:51:f6:8f:f9:dc:db:50:fd:4b:76:c0:03:f2:55:06:bd:cf: 48:71:54:c2:49:68:c9:0d:93:33:b1:02:68:bc:d8:ed:de:e2: d0:d2:97:fb:83:33:6b:4c:f4:1d:0b:91:8b:96:28:f5:33:7a: b9:d3:14:63:59:95:0b:e5:68:6d:7e:5f:77:3c:48:b2:19:14: 65:a6:8f:00:91:5d:7f:5c:d9:1f:c0:d6:91:22:72:64:52:3e: 1e:31:08:00:b7:77:c5:91:56:85:35:85:ab:f7:05:6e:ce:65: 40:9f:b3:48:4e:ce:1c:12:a6:8f:61:1e:13:13:4d:b0:43:e3: 7a:3b:3e:89:fd:58:0f:2a:0f:1b:90:5d:2b:e3:78:dd:54:ec: c5:a6:57:2a:b5:26:dd:1a:ef:61:94:c2:8b:63:6c:e8:7c:03: 6d:a7:3a:18:8a:db:0a:66:fb:e0:30:c8:07:2f:80:f3:94:9d: ed:84:a1:ea:ea:1e:05:6d:1c:49:17:b1:2b:48:b7:e6:83:ef: a1:33:ae:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKH9YIHYaw7+TXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWRhMDk0ZmQtMDAxMy00Yzc4LWI4YzUtOTg0ODc4OGViM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidSn9blSm0l7Q/zOWuqopXFRuJlRAev0A4w6 MttGdNp2WGrN9Hkc7F02rzhmGkYkkPnNpWdK01PIK4a9vOgaRZEtx2jeKuWpQDdL 52G41mtryQ+S5mI/XXoQ8UPb3eC15i1DXv7GFfBQOQmUzM+CfjVz94XItdNZ5E6o SfcPTiSFmWmloqJtU7CJOZkWrBYsXrdSAwJxEczRFGVt8YCPKsrqPAhytKtMh9sP lvnWX3E0wPVlLIDVqznnK08daOgicMYqHA9mw5grQZTzi4SnoE6CT84Ka0glZR/t t68HGyM8O4WWtYTZFakbEsGubpQzCYgKU+3Dar15gdT6CTaBhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDufT67RVwlEJA10uSoTN9CqxTnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjdmNDgwMGEtYWJiOC0z MTAxLWE4YWItNDMzNGJmOTdkMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiszd0nf6J1ElEeJEiu/RtQQBfu27i8t57OxE59HuVyw2iqE7t4nV+n ud1QxuxxIVJOV7TQSQZR9o/53NtQ/Ut2wAPyVQa9z0hxVMJJaMkNkzOxAmi82O3e 4tDSl/uDM2tM9B0LkYuWKPUzernTFGNZlQvlaG1+X3c8SLIZFGWmjwCRXX9c2R/A 1pEicmRSPh4xCAC3d8WRVoU1hav3BW7OZUCfs0hOzhwSpo9hHhMTTbBD43o7Pon9 WA8qDxuQXSvjeN1U7MWmVyq1Jt0a72GUwotjbOh8A22nOhiK2wpm++AwyAcvgPOU ne2EoerqHgVtHEkXsStIt+aD76Ezrkg= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:15 2025 by rpki-client