$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fc35d57-ca3a-3623-a700-c6c79e1fe0f3.roa File: 3fc35d57-ca3a-3623-a700-c6c79e1fe0f3.roa (raw, json) Hash identifier: q3CmFi4Oiyci0Oej3WRuPyQHYKtqmA4fD02StSd25Kg= Subject key identifier: 76:CC:1E:1B:23:E9:27:6D:B4:EE:85:75:E0:E5:F4:BE:80:EE:02:F3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA0675FBA0AE12892E57C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fc35d57-ca3a-3623-a700-c6c79e1fe0f3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:06:75:fb:a0:ae:12:89:2e:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b150a86b-6425-4abf-8f70-fa3feca51f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:65:91:59:3e:d3:b6:1e:c2:6c:5b:3c:cd:0a: e1:31:ae:ed:20:a9:8e:60:0f:de:3b:cd:a2:18:15: 16:e3:aa:ba:47:89:fc:10:24:b5:24:83:52:ec:b7: 1c:24:1e:37:9a:a4:97:43:b4:58:11:f1:c9:d9:f4: 39:f0:42:08:86:be:47:69:36:50:d6:e3:b6:72:c4: fc:02:a8:31:47:e8:38:39:5e:a8:24:b3:d2:71:50: 00:e2:79:d5:60:f6:09:dc:58:13:4e:fc:62:37:66: 90:59:ef:44:9b:94:54:e3:06:32:1d:66:59:d4:97: 89:7a:90:db:75:0c:bb:c7:c3:f1:bb:94:9b:21:be: 98:6d:37:8f:1a:08:03:24:84:ba:f8:cf:b3:9b:bf: 19:08:f9:f6:f3:a9:50:f3:39:96:50:4b:c6:d6:52: b3:4c:39:de:e1:cc:af:7d:02:c4:9d:80:89:0a:8e: dc:91:fa:08:8b:02:3f:29:bf:ea:fb:49:90:53:4a: e7:af:1e:4a:28:96:3f:e3:f8:e3:4c:22:6b:6a:fa: 41:74:23:5f:82:04:0a:85:0e:8e:6a:ae:ec:0c:37: 29:fe:1f:b8:23:ba:05:70:fc:cb:90:65:26:82:f3: 95:e7:7b:7c:ae:07:ac:15:64:f7:54:62:d6:bb:97: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CC:1E:1B:23:E9:27:6D:B4:EE:85:75:E0:E5:F4:BE:80:EE:02:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fc35d57-ca3a-3623-a700-c6c79e1fe0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:48:a2:09:48:70:8d:50:74:91:23:26:0e:81:ed:80:52:82: f2:53:f9:aa:5b:53:08:2f:fb:cf:da:b4:6d:31:f4:25:1d:aa: f6:84:b4:de:cd:8d:de:2a:51:63:7d:80:bc:71:7f:63:4d:40: f4:45:e8:37:a2:ef:57:58:5e:e1:54:5b:24:7d:33:9e:cc:11: da:46:59:41:75:72:dd:d6:15:31:6d:b1:8b:9d:4f:c5:dc:e2: 9f:b5:9d:80:09:b9:24:e5:8f:70:3d:4a:a6:40:34:22:17:a6: b7:28:da:08:4d:ff:c9:ba:7b:45:d9:e9:38:a0:17:c3:1b:99: 69:96:d7:28:88:fa:3b:70:de:94:5c:65:84:aa:d1:c3:36:92: d7:eb:ae:d1:04:ed:dd:e4:d1:62:35:e7:8f:8e:47:26:15:3c: f9:1a:d7:a9:3b:a6:c2:e2:16:c9:2b:07:c7:c5:c5:30:0e:df: 49:32:34:00:f0:0e:86:b6:90:69:77:53:41:b0:84:c7:d7:39: ab:73:20:79:4c:3b:02:bd:c5:04:b6:50:92:d6:dd:c9:50:8b: 82:92:c7:28:21:df:d4:76:bd:4f:57:b2:15:83:9e:57:fa:9f: 7b:29:90:dd:70:15:63:0c:54:d6:54:99:9c:cd:3a:70:5d:3b: 82:1a:72:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugZ1+6CuEokuV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjE1MGE4NmItNjQyNS00YWJmLThmNzAtZmEzZmVjYTUxZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmWRWT7Tth7CbFs8zQrhMa7tIKmOYA/eO82i GBUW46q6R4n8ECS1JINS7LccJB43mqSXQ7RYEfHJ2fQ58EIIhr5HaTZQ1uO2csT8 AqgxR+g4OV6oJLPScVAA4nnVYPYJ3FgTTvxiN2aQWe9Em5RU4wYyHWZZ1JeJepDb dQy7x8Pxu5SbIb6YbTePGggDJIS6+M+zm78ZCPn286lQ8zmWUEvG1lKzTDne4cyv fQLEnYCJCo7ckfoIiwI/Kb/q+0mQU0rnrx5KKJY/4/jjTCJravpBdCNfggQKhQ6O aq7sDDcp/h+4I7oFcPzLkGUmgvOV53t8rgesFWT3VGLWu5d3VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbMHhsj6SdttO6FdeDl9L6A7gLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZjMzVkNTctY2EzYS0z NjIzLWE3MDAtYzZjNzllMWZlMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRIyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRIoglIcI1QdJEjJg6B7YBSgvJT+apbUwgv+8/atG0x9CUdqvaEtN7N jd4qUWN9gLxxf2NNQPRF6Dei71dYXuFUWyR9M57MEdpGWUF1ct3WFTFtsYudT8Xc 4p+1nYAJuSTlj3A9SqZANCIXprco2ghN/8m6e0XZ6TigF8MbmWmW1yiI+jtw3pRc ZYSq0cM2ktfrrtEE7d3k0WI154+ORyYVPPka16k7psLiFskrB8fFxTAO30kyNADw Doa2kGl3U0GwhMfXOatzIHlMOwK9xQS2UJLW3clQi4KSxygh39R2vU9XshWDnlf6 n3spkN1wFWMMVNZUmZzNOnBdO4IacrA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:43 2025 by rpki-client