$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa File: 29f2a17c-513f-314f-bffe-5b39b0ff383e.roa (raw, json) Hash identifier: 4HAeyPcMMxLm5V3RLspGvMssT0u7mOksOdaaHdBogxI= Subject key identifier: A1:EA:42:75:66:8E:ED:27:C6:11:DD:4F:23:2D:F7:00:8A:9C:96:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3559B6CF16C48B3D3CA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:35:59:b6:cf:16:c4:8b:3d:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8cf3982c-2976-475b-9b66-d641a265290c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:05:39:0e:dd:42:37:74:4d:ab:b9:92:c5: 10:24:72:43:06:fc:c9:cf:c0:2f:79:ad:9f:b0:41: e4:5b:33:6d:e3:bf:4e:18:3f:57:97:25:28:6f:b0: 43:ec:4c:c3:24:7a:f0:9b:ac:b9:22:e6:39:24:4b: 48:c2:37:b2:45:e2:d7:a0:aa:81:26:2e:7f:10:ac: b5:89:76:19:ad:6c:de:6c:7c:fa:c2:ef:3d:ee:8f: de:ad:ef:37:c5:3f:b9:bb:fb:b4:dc:62:70:5d:88: bb:8e:df:96:e2:6f:fd:b5:7b:d1:9d:9e:d2:99:8d: 01:a8:5c:78:75:9f:14:4c:71:dd:78:a6:62:75:7b: 3c:17:f3:4b:75:34:88:eb:cb:9d:7c:94:d6:dc:0e: 41:89:74:a5:ec:82:ab:de:34:87:ad:ed:4e:a1:db: 74:13:e2:a2:9f:86:21:9a:8f:11:19:ed:8a:fa:62: 9a:75:a1:60:f2:07:03:14:41:b7:fb:3a:30:7e:dc: e2:8f:03:f7:21:98:e1:05:e2:6e:2d:44:db:69:4d: 93:5a:b3:f6:81:c8:7a:2a:14:07:4d:74:e0:c0:3c: db:95:a8:79:b1:21:11:2c:56:1b:07:9d:0c:f4:c0: f8:a4:1a:54:bf:83:fe:70:9e:af:e1:f8:58:3f:32: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EA:42:75:66:8E:ED:27:C6:11:DD:4F:23:2D:F7:00:8A:9C:96:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d8:1e:a0:1b:ad:89:b3:5c:6f:d4:ea:2a:aa:af:23:14:d7: 44:bc:b5:dc:17:9f:7f:16:db:8b:08:22:c9:42:22:15:d0:7a: dc:fc:84:60:c2:e0:7c:60:de:fa:fc:00:28:09:ee:c9:ac:20: 21:2c:d6:6a:68:f6:42:b9:d1:45:5c:66:84:c0:cc:2f:73:f5: f1:02:fd:e5:16:f4:37:42:29:12:a3:83:06:de:cd:18:40:fb: 62:3e:4c:ee:41:e3:4c:e0:f0:b1:6b:59:8b:b0:62:7d:f5:93: 07:7a:0d:cc:23:70:09:22:49:7f:37:6d:93:f4:93:ae:55:27: f3:63:66:4a:65:bb:78:b6:bf:91:77:64:5e:3a:f3:e9:76:ff: a6:23:6c:8c:3b:aa:68:0e:ee:d7:1f:c9:17:20:a2:f1:95:5a: a5:e9:dd:df:53:50:70:98:d7:54:ac:9a:a7:86:5d:b2:11:72: 55:2e:ba:41:d1:b7:0d:c0:f3:69:d1:28:0d:19:96:92:a5:b0: 5f:9f:ce:e6:df:2e:96:1e:32:92:69:4c:f1:a6:25:ef:8f:47: 97:e1:82:1b:18:82:68:b0:63:eb:30:dc:09:c4:1f:ac:4d:39: 69:38:bd:98:6b:2d:e7:ba:57:2d:cf:eb:b9:b7:b7:ea:0e:9d: 43:d2:ef:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujVZts8WxIs9PKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGNmMzk4MmMtMjk3Ni00NzViLTliNjYtZDY0MWEyNjUyOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL4FOQ7dQjd0Tau5ksUQJHJDBvzJz8Avea2f sEHkWzNt479OGD9XlyUob7BD7EzDJHrwm6y5IuY5JEtIwjeyReLXoKqBJi5/EKy1 iXYZrWzebHz6wu897o/ere83xT+5u/u03GJwXYi7jt+W4m/9tXvRnZ7SmY0BqFx4 dZ8UTHHdeKZidXs8F/NLdTSI68udfJTW3A5BiXSl7IKr3jSHre1Oodt0E+Kin4Yh mo8RGe2K+mKadaFg8gcDFEG3+zowftzijwP3IZjhBeJuLUTbaU2TWrP2gch6KhQH TXTgwDzblah5sSERLFYbB50M9MD4pBpUv4P+cJ6v4fhYPzKPKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHqQnVmju0nxhHdTyMt9wCKnJbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjlmMmExN2MtNTEzZi0z MTRmLWJmZmUtNWIzOWIwZmYzODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjYHqAbrYmzXG/U6iqqryMU10S8tdwXn38W24sIIslCIhXQetz8hGDC 4Hxg3vr8ACgJ7smsICEs1mpo9kK50UVcZoTAzC9z9fEC/eUW9DdCKRKjgwbezRhA +2I+TO5B40zg8LFrWYuwYn31kwd6DcwjcAkiSX83bZP0k65VJ/NjZkplu3i2v5F3 ZF468+l2/6YjbIw7qmgO7tcfyRcgovGVWqXp3d9TUHCY11SsmqeGXbIRclUuukHR tw3A82nRKA0ZlpKlsF+fzubfLpYeMpJpTPGmJe+PR5fhghsYgmiwY+sw3AnEH6xN OWk4vZhrLee6Vy3P67m3t+oOnUPS7/g= -----END CERTIFICATE-----Generated at Sun Apr 27 23:49:37 2025 by rpki-client