$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa File: 3de5534a-75b8-33c8-b248-1f421d36a669.roa (raw, json) Hash identifier: tHOrR5W62DIoFoVm+TjIWI6peSyqpUPEeKCu3gjVyYU= Subject key identifier: BA:34:3F:19:42:37:F0:A2:B9:0D:F4:34:49:48:96:50:71:3C:20:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BB06A4E8680EB452B3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.16.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:06:a4:e8:68:0e:b4:52:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c9fb438b-0748-4727-8d7d-6c92c27b50b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:55:cd:90:99:de:49:61:1b:74:fe:56:7e: 24:0a:5d:2e:38:17:2e:43:17:78:7b:60:aa:3c:c2: 29:9b:8d:9b:8a:66:6a:ab:2a:79:4b:0e:bb:46:3b: 0a:ca:11:46:18:03:16:ba:aa:af:89:9a:2c:9c:c0: d4:b2:86:c0:84:8f:fe:8a:21:91:a4:27:e5:6f:e6: 68:d6:69:0f:f2:11:03:71:66:d9:8c:6a:0f:cc:cf: c5:2f:07:5f:91:4a:ec:04:7f:c9:8d:b5:a7:ec:1f: 8f:82:91:94:6d:40:bd:2d:7f:27:88:ce:2e:40:80: 9a:ae:02:20:28:c6:ec:1f:40:d2:de:b4:ae:22:e1: e3:64:ca:13:c7:24:a5:c6:c3:56:a4:a0:d2:a7:3a: 24:8a:7c:ff:ad:97:bc:c8:b7:24:0e:e1:aa:88:27: af:2d:44:eb:6b:91:d2:e1:42:54:e4:0d:eb:4e:8b: 73:76:96:64:6d:16:be:a3:01:26:84:6d:2c:06:4d: 78:e1:f7:13:66:7b:0a:5b:8f:9a:88:28:d9:c1:cf: c9:8f:24:54:9a:4c:94:56:bd:25:22:8d:31:5c:58: e2:68:14:2c:3a:b7:bf:fc:9d:10:bd:a0:54:ca:02: a5:22:08:4d:1a:86:09:4b:60:43:53:a8:c5:23:ac: 74:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:3F:19:42:37:F0:A2:B9:0D:F4:34:49:48:96:50:71:3C:20:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1a:6d:4b:a5:94:06:7b:54:45:8d:32:11:52:bd:db:ca:a6: 86:3a:ad:39:7d:bd:15:d4:fa:3d:5f:6a:71:cb:0b:9c:a3:79: df:fd:c6:3f:da:03:08:58:64:ed:d3:ef:e5:90:98:06:0d:fb: 2d:67:83:21:ac:58:31:bb:a6:6f:28:bc:f9:f9:dc:e1:9d:eb: e9:b6:68:0d:6f:55:dc:e6:1c:e5:ec:4e:67:97:03:a8:f3:70: 1d:cc:c0:3d:5c:24:ef:19:c9:e0:62:c7:b7:d5:c8:48:f3:63: bd:23:a8:ec:0b:ec:19:4c:35:b1:dc:72:bd:cd:39:b4:ec:cb: f0:b7:0c:28:c5:0e:f7:10:13:81:16:fe:30:f4:33:73:eb:03: 65:71:48:43:00:d1:b8:d7:01:29:2b:9a:2d:88:27:21:06:e7: b6:cd:fd:98:5d:55:e5:81:ed:3e:4d:03:ef:93:ab:3c:e8:1c: 37:54:4d:0f:01:48:21:7a:c2:95:84:52:d2:3d:31:54:f5:b0: ed:34:b9:a3:f2:52:88:71:bc:28:ea:1e:9b:d1:de:e9:df:74: a5:90:7e:cb:31:e9:7e:45:81:37:19:cd:24:a8:fb:64:90:ee: 27:41:9c:65:cf:52:7c:42:2a:5c:2f:6b:fb:d2:8b:46:95:6b: a4:6c:8f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLsGpOhoDrRSs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzlmYjQzOGItMDc0OC00NzI3LThkN2QtNmM5MmMyN2I1MGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApidVzZCZ3klhG3T+Vn4kCl0uOBcuQxd4e2Cq PMIpm42bimZqqyp5Sw67RjsKyhFGGAMWuqqviZosnMDUsobAhI/+iiGRpCflb+Zo 1mkP8hEDcWbZjGoPzM/FLwdfkUrsBH/JjbWn7B+PgpGUbUC9LX8niM4uQICargIg KMbsH0DS3rSuIuHjZMoTxySlxsNWpKDSpzokinz/rZe8yLckDuGqiCevLUTra5HS 4UJU5A3rTotzdpZkbRa+owEmhG0sBk144fcTZnsKW4+aiCjZwc/JjyRUmkyUVr0l Io0xXFjiaBQsOre//J0QvaBUygKlIghNGoYJS2BDU6jFI6x0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo0PxlCN/CiuQ30NElIllBxPCDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RlNTUzNGEtNzViOC0z M2M4LWIyNDgtMWY0MjFkMzZhNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8abUullAZ7VEWNMhFSvdvKpoY6rTl9vRXU+j1fanHLC5yjed/9xj/a AwhYZO3T7+WQmAYN+y1ngyGsWDG7pm8ovPn53OGd6+m2aA1vVdzmHOXsTmeXA6jz cB3MwD1cJO8ZyeBix7fVyEjzY70jqOwL7BlMNbHccr3NObTsy/C3DCjFDvcQE4EW /jD0M3PrA2VxSEMA0bjXASkrmi2IJyEG57bN/ZhdVeWB7T5NA++TqzzoHDdUTQ8B SCF6wpWEUtI9MVT1sO00uaPyUohxvCjqHpvR3unfdKWQfssx6X5FgTcZzSSo+2SQ 7idBnGXPUnxCKlwva/vSi0aVa6Rsj/o= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:52 2025 by rpki-client