$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a3a67c6-3f3c-398f-b990-a699687863a6.roa File: 4a3a67c6-3f3c-398f-b990-a699687863a6.roa (raw, json) Hash identifier: JuDYcM9/ADUtnmS8OejRWph1CLOVZlS4POasjbRaLIg= Subject key identifier: BF:22:7C:84:0D:96:DA:D7:EB:6D:64:A3:FF:E0:EF:E0:D3:DA:30:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3BCE9B12C0A3960B7480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a3a67c6-3f3c-398f-b990-a699687863a6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3b:ce:9b:12:c0:a3:96:0b:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7a5e1382-d57a-4bb6-a4d6-dddf09b110a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:b7:25:6d:2a:25:7a:76:1e:9f:bc:e8:28: a9:34:d9:2e:ea:dc:5a:26:91:b4:06:44:c9:57:72: 15:4a:08:4c:49:20:df:95:bc:11:de:81:41:fb:3f: f3:66:4a:5d:9f:e0:9c:60:90:a7:17:12:04:2a:63: 9f:0b:df:f3:14:36:dd:74:4e:e3:d6:b4:a5:62:c9: 0f:27:02:4a:b7:73:b3:97:4a:8a:6c:40:15:05:d5: 6d:bb:dd:1d:3d:ae:38:34:55:09:cd:a5:a2:f3:b4: c4:5a:53:24:8e:f8:e8:af:e3:0a:64:20:95:1c:b2: d0:55:6c:82:95:dc:c6:54:23:36:83:5a:76:36:6b: 7e:24:f1:f8:f2:70:26:1c:fa:4d:d3:8b:4f:34:12: bd:80:c5:03:32:76:09:fd:4d:95:ba:9f:14:9d:2c: a8:48:56:82:84:fd:48:67:54:dc:1f:1e:24:86:a3: 8b:e3:74:e7:cf:b6:7c:6c:6c:33:29:4e:ba:82:f8: 68:58:00:d0:5e:c4:b0:af:de:43:38:4c:95:5f:83: 4b:4d:45:b7:57:1b:81:c7:7b:61:83:ce:9b:09:3a: ce:11:35:b7:26:ff:3d:64:a0:41:cf:c7:ad:6d:e6: 29:88:74:36:e5:2f:92:c2:d9:4d:00:37:49:10:aa: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:22:7C:84:0D:96:DA:D7:EB:6D:64:A3:FF:E0:EF:E0:D3:DA:30:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a3a67c6-3f3c-398f-b990-a699687863a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:45:95:6e:15:2e:d3:e0:58:9d:93:39:b3:96:8f:fd:31:36: 43:20:86:bc:57:7d:71:01:15:5d:43:e4:75:85:fb:aa:d6:5b: 78:fd:05:80:55:03:6b:7d:21:57:6f:00:80:25:fd:64:28:fd: d0:a9:0f:73:25:ab:c9:9c:81:19:d4:85:c9:88:39:6a:ed:58: a3:5e:c1:86:ff:1c:77:0c:11:c8:65:6f:59:fc:0f:56:34:c0: 1a:d8:50:d3:1f:95:5e:bf:3b:78:0a:f1:6c:c3:a0:27:b4:f3: 03:c0:cc:50:88:72:ec:27:56:9b:f1:de:21:19:c9:f1:01:72: 98:d2:bd:ca:1e:b5:96:10:50:c3:09:51:0d:23:5c:a3:e8:ec: d5:ad:4a:b3:74:66:3f:36:07:17:c2:a6:e1:c1:a4:e0:72:a1: 9f:56:e5:55:3d:f2:2d:f2:3d:9c:ad:b4:b3:95:fc:9a:40:d2: 26:ae:95:71:d6:b4:98:b0:53:af:7b:0b:ca:f8:18:5f:2e:64: f4:d1:2c:2f:00:4a:69:7e:ac:69:05:78:ea:5e:3d:59:b5:9b: b1:b1:79:a9:e8:76:93:2d:54:cc:7b:fd:f0:2e:d3:1d:9b:74: 37:75:8c:c4:ae:8b:f2:0e:6e:d5:11:fe:b1:83:24:e1:d6:91: 9d:4b:44:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujvOmxLAo5YLdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2E1ZTEzODItZDU3YS00YmI2LWE0ZDYtZGRkZjA5YjExMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6+3JW0qJXp2Hp+86CipNNku6txaJpG0BkTJ V3IVSghMSSDflbwR3oFB+z/zZkpdn+CcYJCnFxIEKmOfC9/zFDbddE7j1rSlYskP JwJKt3Ozl0qKbEAVBdVtu90dPa44NFUJzaWi87TEWlMkjvjor+MKZCCVHLLQVWyC ldzGVCM2g1p2Nmt+JPH48nAmHPpN04tPNBK9gMUDMnYJ/U2Vup8UnSyoSFaChP1I Z1TcHx4khqOL43Tnz7Z8bGwzKU66gvhoWADQXsSwr95DOEyVX4NLTUW3VxuBx3th g86bCTrOETW3Jv89ZKBBz8etbeYpiHQ25S+SwtlNADdJEKoE9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8ifIQNltrX621ko//g7+DT2jD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGEzYTY3YzYtM2YzYy0z OThmLWI5OTAtYTY5OTY4Nzg2M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFFlW4VLtPgWJ2TObOWj/0xNkMghrxXfXEBFV1D5HWF+6rWW3j9BYBV A2t9IVdvAIAl/WQo/dCpD3Mlq8mcgRnUhcmIOWrtWKNewYb/HHcMEchlb1n8D1Y0 wBrYUNMflV6/O3gK8WzDoCe08wPAzFCIcuwnVpvx3iEZyfEBcpjSvcoetZYQUMMJ UQ0jXKPo7NWtSrN0Zj82BxfCpuHBpOByoZ9W5VU98i3yPZyttLOV/JpA0iaulXHW tJiwU697C8r4GF8uZPTRLC8ASml+rGkFeOpePVm1m7GxeanodpMtVMx7/fAu0x2b dDd1jMSui/IObtUR/rGDJOHWkZ1LRPE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:19 2025 by rpki-client