$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ea5b6ea-014e-344d-b971-447a04f125ae.roa File: 3ea5b6ea-014e-344d-b971-447a04f125ae.roa (raw, json) Hash identifier: 7ctip/edg6atRUiV0yE+X2QzwOxo/McIwQvBDbmVAXc= Subject key identifier: 24:25:72:8F:90:B0:FE:E1:F8:C6:B5:15:18:33:6A:2B:4D:73:47:DD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA41CDD8EFEE4F97DFDF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ea5b6ea-014e-344d-b971-447a04f125ae.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 150.195.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:41:cd:d8:ef:ee:4f:97:df:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9f775822-604f-4810-acf1-736361b2641e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:d8:e9:d9:67:9f:8b:e7:c0:b7:ca:f6:24: f5:02:9f:06:15:ee:b9:02:77:75:0c:7d:6c:df:e5: 7c:8b:27:ea:53:d5:2a:85:57:ba:d3:16:28:08:7d: 6e:ce:9b:21:d5:8a:98:4f:0f:1e:63:bc:41:f7:bd: b3:e1:d9:64:fb:22:85:07:65:6f:42:20:2c:99:05: 13:37:83:1e:06:b3:5c:2f:5b:bd:2b:fb:41:f8:43: 42:2a:36:98:70:46:1a:f2:89:2c:62:6d:e0:17:00: 7b:9f:08:fd:30:46:9b:93:74:ed:ba:41:18:ec:29: f3:0a:c5:56:85:ae:c1:a4:e9:c0:f3:b1:47:ae:a0: f3:4f:21:3e:10:05:a5:79:33:1e:6f:6d:14:38:5f: bd:9f:71:20:70:bd:02:c1:61:af:a9:7d:32:1c:64: a5:60:2f:88:c3:82:74:da:53:75:a4:41:6a:d4:74: 7a:22:dd:f8:18:0d:df:b2:3d:6d:40:c7:3a:ec:31: ac:c7:66:60:6a:61:8c:8d:2b:df:b8:33:70:79:60: 4b:69:77:21:f2:5d:8d:7d:62:b9:78:ea:b1:3c:53: 12:39:b5:5c:62:67:11:83:8a:62:76:f4:96:d5:e2: b0:eb:1c:f2:cc:c2:ba:f5:57:42:e6:98:e5:99:f8: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:25:72:8F:90:B0:FE:E1:F8:C6:B5:15:18:33:6A:2B:4D:73:47:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ea5b6ea-014e-344d-b971-447a04f125ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:82:5e:ce:68:30:e3:af:c8:38:73:59:13:00:1d:61:4b:dc: 12:90:54:52:33:6a:6f:cd:f0:45:b9:b1:79:d5:a7:81:de:3b: 5b:aa:9b:9f:63:82:8a:8c:fa:5d:be:c5:4f:ad:8f:6c:26:03: 38:84:ee:14:3c:fc:b2:43:e8:de:6d:a9:22:10:76:8b:b3:6f: e2:46:88:7a:e6:9e:06:aa:8d:50:b6:1b:2f:96:16:bd:2f:a8: 07:7e:b7:0c:10:de:5e:58:fe:17:f5:90:9b:d3:d5:be:99:b1: 59:70:ea:fd:d0:d3:ee:34:f0:9a:a1:3d:f1:9f:97:4e:2d:ff: 83:34:73:b5:e8:08:32:ab:fc:e5:70:de:dc:94:83:45:ac:37: ef:8e:20:d5:9d:da:78:25:37:75:73:2a:2c:85:f9:d4:f7:fc: 76:b8:b7:39:86:5b:0c:1e:73:94:9a:a1:a2:c9:13:49:a9:0e: c8:76:6c:9e:d4:38:37:bf:0d:62:13:a7:5d:a3:58:6d:2d:0d: 90:71:3c:64:9d:db:73:8c:13:2d:c7:11:26:bc:c3:0b:6e:63: 2d:01:e9:22:22:63:6e:d3:3c:ec:d1:67:26:46:a8:84:0b:1d: 81:04:a4:6c:f7:a9:68:1d:57:98:55:ac:6b:f5:ce:f7:7c:8a: 3b:0c:99:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukHN2O/uT5ff34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWY3NzU4MjItNjA0Zi00ODEwLWFjZjEtNzM2MzYxYjI2NDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHjY6dlnn4vnwLfK9iT1Ap8GFe65And1DH1s 3+V8iyfqU9UqhVe60xYoCH1uzpsh1YqYTw8eY7xB972z4dlk+yKFB2VvQiAsmQUT N4MeBrNcL1u9K/tB+ENCKjaYcEYa8oksYm3gFwB7nwj9MEabk3TtukEY7CnzCsVW ha7BpOnA87FHrqDzTyE+EAWleTMeb20UOF+9n3EgcL0CwWGvqX0yHGSlYC+Iw4J0 2lN1pEFq1HR6It34GA3fsj1tQMc67DGsx2ZgamGMjSvfuDNweWBLaXch8l2NfWK5 eOqxPFMSObVcYmcRg4pidvSW1eKw6xzyzMK69VdC5pjlmfhkLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQlco+QsP7h+Ma1FRgzaitNc0fdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2VhNWI2ZWEtMDE0ZS0z NDRkLWI5NzEtNDQ3YTA0ZjEyNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOCXs5oMOOvyDhzWRMAHWFL3BKQVFIzam/N8EW5sXnVp4HeO1uqm59j goqM+l2+xU+tj2wmAziE7hQ8/LJD6N5tqSIQdouzb+JGiHrmngaqjVC2Gy+WFr0v qAd+twwQ3l5Y/hf1kJvT1b6ZsVlw6v3Q0+408JqhPfGfl04t/4M0c7XoCDKr/OVw 3tyUg0WsN++OINWd2nglN3VzKiyF+dT3/Ha4tzmGWwwec5SaoaLJE0mpDsh2bJ7U ODe/DWITp12jWG0tDZBxPGSd23OMEy3HESa8wwtuYy0B6SIiY27TPOzRZyZGqIQL HYEEpGz3qWgdV5hVrGv1zvd8ijsMmZw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:27 2025 by rpki-client