$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c70fa5f-bad8-3cde-8a40-857bee3706b6.roa File: 3c70fa5f-bad8-3cde-8a40-857bee3706b6.roa (raw, json) Hash identifier: ssDF+1loPkuAjtpUQqQsWw7wbb9mUXrwm2a3kgDg4yQ= Subject key identifier: E6:03:11:FB:3F:9C:29:2D:11:1C:C6:46:DE:91:DE:88:B0:90:8C:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA4059ECE0DEE869AB78E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c70fa5f-bad8-3cde-8a40-857bee3706b6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:40:59:ec:e0:de:e8:69:ab:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b2fe7e76-3962-41d3-af69-5906bfcae7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:1d:7d:fe:4c:62:91:f4:50:1f:28:a5:33: 81:18:ef:3e:7f:e9:06:76:95:ed:65:84:16:19:78: d1:ed:3d:f9:e4:66:b1:b8:5e:39:9a:d1:21:79:cf: 54:66:63:c3:57:ea:ff:39:4a:12:1e:0a:74:ba:ac: db:f1:ff:06:02:8d:6e:41:51:5e:80:7d:90:08:ba: 16:07:9b:11:4c:6a:3e:42:65:84:1a:c6:3f:2c:32: 29:e1:cb:71:29:91:e4:3c:51:67:c8:c1:87:d0:34: 53:59:ca:ee:59:99:c8:2d:a7:30:70:11:46:60:40: ce:a7:b4:2f:9f:54:15:ba:41:ce:96:39:2d:68:94: 42:c2:a4:85:93:81:45:27:a2:a5:e0:50:91:77:52: 55:b0:59:3d:c8:3f:49:47:21:29:f9:bb:86:cf:fb: 04:04:f7:ca:08:79:21:e9:f5:87:8c:1b:75:9e:16: 5c:0b:c2:30:a6:9c:c1:bd:ae:9d:9b:21:46:19:63: 91:5c:70:d8:dc:c7:42:68:ad:cb:82:6b:ea:2f:e8: 1c:01:c0:f3:3c:5d:72:df:cd:34:6e:ed:dc:9f:69: 84:5e:37:0d:f0:b8:6d:c1:e6:04:66:0a:6c:d6:47: f9:41:93:26:13:46:6f:45:7c:14:bf:67:df:93:0f: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:03:11:FB:3F:9C:29:2D:11:1C:C6:46:DE:91:DE:88:B0:90:8C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c70fa5f-bad8-3cde-8a40-857bee3706b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f3:79:fe:e9:cc:20:48:57:5a:48:ab:5f:2a:33:09:8e:a3: 8a:7b:89:30:23:ad:52:00:17:33:87:74:7f:43:c0:92:68:29: 8f:ad:36:8a:ba:2e:57:ef:06:99:03:53:37:d9:ed:ad:02:24: 34:98:15:09:a5:9b:84:8a:44:e0:ec:5f:af:60:32:d4:e3:4a: fd:49:08:6d:05:06:a5:5b:e0:2e:e5:5d:2d:cb:01:2d:08:69: fa:05:01:dc:06:e6:2e:52:56:19:9d:40:5e:6a:e5:a0:fa:b8: ce:ae:c8:0f:d6:cc:26:47:1e:12:42:a1:96:8b:27:91:b8:08: f4:74:1f:5a:d1:6a:d0:41:13:22:b4:9c:5a:9a:ff:3d:34:72: 97:e4:f5:db:4c:b1:b0:1a:ec:c7:c9:17:2d:af:a4:12:a1:72: 5a:c0:65:fc:f3:5c:ac:6b:97:24:2e:2e:df:8c:c5:e2:91:02: 6e:42:c2:09:de:38:31:d4:6f:86:04:1c:78:85:40:48:f0:fb: dd:1e:6e:ed:73:77:34:8c:eb:8a:ae:ce:a1:f2:3c:4e:48:d8: 09:b9:19:97:57:cc:2f:99:4c:14:03:0c:ab:df:d8:2c:b3:e4: b6:50:ff:a1:e8:55:f0:b4:d5:89:7a:f5:a5:35:9c:74:e2:c0: 72:cf:13:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukBZ7ODe6GmreOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjJmZTdlNzYtMzk2Mi00MWQzLWFmNjktNTkwNmJmY2FlN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8gdff5MYpH0UB8opTOBGO8+f+kGdpXtZYQW GXjR7T355GaxuF45mtEhec9UZmPDV+r/OUoSHgp0uqzb8f8GAo1uQVFegH2QCLoW B5sRTGo+QmWEGsY/LDIp4ctxKZHkPFFnyMGH0DRTWcruWZnILacwcBFGYEDOp7Qv n1QVukHOljktaJRCwqSFk4FFJ6Kl4FCRd1JVsFk9yD9JRyEp+buGz/sEBPfKCHkh 6fWHjBt1nhZcC8IwppzBva6dmyFGGWORXHDY3MdCaK3LgmvqL+gcAcDzPF1y3800 bu3cn2mEXjcN8LhtweYEZgps1kf5QZMmE0ZvRXwUv2ffkw/BqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYDEfs/nCktERzGRt6R3oiwkIxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2M3MGZhNWYtYmFkOC0z Y2RlLThhNDAtODU3YmVlMzcwNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrzef7pzCBIV1pIq18qMwmOo4p7iTAjrVIAFzOHdH9DwJJoKY+tNoq6 LlfvBpkDUzfZ7a0CJDSYFQmlm4SKRODsX69gMtTjSv1JCG0FBqVb4C7lXS3LAS0I afoFAdwG5i5SVhmdQF5q5aD6uM6uyA/WzCZHHhJCoZaLJ5G4CPR0H1rRatBBEyK0 nFqa/z00cpfk9dtMsbAa7MfJFy2vpBKhclrAZfzzXKxrlyQuLt+MxeKRAm5Cwgne ODHUb4YEHHiFQEjw+90ebu1zdzSM64quzqHyPE5I2Am5GZdXzC+ZTBQDDKvf2Cyz 5LZQ/6HoVfC01Yl69aU1nHTiwHLPE+0= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:50 2025 by rpki-client