$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bff1198-c75e-3494-80a5-0361e989699b.roa File: 4bff1198-c75e-3494-80a5-0361e989699b.roa (raw, json) Hash identifier: TswCtS8DT3igmpfZC2hNVwL/yENbqj0XzT02lHyOh34= Subject key identifier: B6:5F:DA:3C:A9:36:F2:0A:0C:E4:9B:9A:FB:E8:48:BC:76:3C:8C:DB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3B867D06CF20CE607040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bff1198-c75e-3494-80a5-0361e989699b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.26.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3b:86:7d:06:cf:20:ce:60:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8b969b41-40ae-4cba-8039-fd03c0cced84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:ec:d3:d5:23:78:b7:72:a4:e4:ec:50:60: eb:af:4e:4b:e0:43:92:50:2f:e1:64:e1:3e:a4:07: a7:31:1f:a7:bf:53:ed:b4:20:da:9a:09:4d:77:27: da:6a:2f:05:7b:07:85:fb:f2:a3:a9:aa:95:c4:8a: cd:c1:e4:04:07:e3:f2:36:54:3c:5e:d8:af:05:d9: 24:92:01:a8:8b:74:c7:05:e7:13:23:bb:12:42:21: ca:71:ef:61:03:b8:e8:b7:0b:e0:b9:7f:5e:ff:65: 3e:a4:14:28:14:01:23:21:23:c7:71:80:75:72:63: 8c:d0:15:f9:b4:e3:bb:58:7c:7e:8b:01:3b:10:3e: e3:e5:34:02:a1:c4:9d:e3:e4:a5:fe:14:6f:be:07: 8c:6b:cc:55:a4:7c:17:ea:26:e3:2c:3b:b7:a1:a3: 0c:bf:02:f9:ce:0b:ef:88:d8:f2:c5:77:7d:3d:58: 0b:80:03:d0:9a:1d:79:df:91:e2:66:62:2f:27:e2: 65:aa:eb:56:18:0e:6c:ab:02:be:13:ba:54:03:8c: 86:f2:c3:5e:9b:f5:99:a6:28:c6:d6:71:73:ae:37: 14:18:dd:c2:e9:86:f2:1d:5f:88:c1:1c:8a:f8:83: 1d:ad:1f:11:0d:f9:13:ca:23:94:c3:b4:f5:0a:98: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5F:DA:3C:A9:36:F2:0A:0C:E4:9B:9A:FB:E8:48:BC:76:3C:8C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bff1198-c75e-3494-80a5-0361e989699b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8d:4a:06:f3:37:51:2c:a8:e7:a6:0c:5a:6a:d8:4e:f8:fd: a2:3b:b6:dc:90:dd:d9:e0:31:da:26:bc:6d:7b:fd:6c:fb:21: ca:54:7e:8f:c0:c7:dd:ca:31:5b:8a:8d:b7:f7:e2:0a:32:59: 35:74:7f:d2:73:dd:b9:08:c8:2e:41:bb:ff:3d:f2:df:01:23: e9:b3:ff:53:0e:f3:ee:53:35:16:e8:a5:7f:7f:81:03:82:82: ea:5b:b6:4a:cf:e9:08:9e:0d:de:49:11:c1:48:22:aa:01:95: d3:d7:1f:e5:d2:bf:ff:b6:f3:96:3d:2d:e4:26:33:cc:5a:4b: b7:d4:8a:1f:5d:b1:9d:d5:c6:e5:86:b3:19:0a:05:c8:e3:34: c9:13:73:95:61:08:5c:02:7a:88:36:08:49:d0:75:32:5e:7d: ba:b5:65:e2:07:36:f8:e8:3a:1d:08:f3:2b:08:be:c0:79:2d: 02:c0:ec:0f:0c:12:69:cf:c8:c0:5b:45:50:15:cc:83:52:9a: ae:8d:c2:70:0f:3f:82:31:9e:a5:00:c9:9a:4a:42:ef:0e:a4: 67:ad:97:72:42:2f:6a:cb:a9:26:8f:0b:5d:0e:f1:9e:cd:85: 47:d0:04:2c:81:31:b2:cb:84:a8:cc:2d:d5:87:39:b6:5c:b5: 48:ae:ed:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujuGfQbPIM5gcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGI5NjliNDEtNDBhZS00Y2JhLTgwMzktZmQwM2MwY2NlZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Ps09UjeLdypOTsUGDrr05L4EOSUC/hZOE+ pAenMR+nv1PttCDamglNdyfaai8FeweF+/KjqaqVxIrNweQEB+PyNlQ8XtivBdkk kgGoi3THBecTI7sSQiHKce9hA7jotwvguX9e/2U+pBQoFAEjISPHcYB1cmOM0BX5 tOO7WHx+iwE7ED7j5TQCocSd4+Sl/hRvvgeMa8xVpHwX6ibjLDu3oaMMvwL5zgvv iNjyxXd9PVgLgAPQmh1535HiZmIvJ+JlqutWGA5sqwK+E7pUA4yG8sNem/WZpijG 1nFzrjcUGN3C6YbyHV+IwRyK+IMdrR8RDfkTyiOUw7T1CphASQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZf2jypNvIKDOSbmvvoSLx2PIzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGJmZjExOTgtYzc1ZS0z NDk0LTgwYTUtMDM2MWU5ODk2OTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeNSgbzN1EsqOemDFpq2E74/aI7ttyQ3dngMdomvG17/Wz7IcpUfo/A x93KMVuKjbf34goyWTV0f9Jz3bkIyC5Bu/898t8BI+mz/1MO8+5TNRbopX9/gQOC gupbtkrP6QieDd5JEcFIIqoBldPXH+XSv/+285Y9LeQmM8xaS7fUih9dsZ3VxuWG sxkKBcjjNMkTc5VhCFwCeog2CEnQdTJefbq1ZeIHNvjoOh0I8ysIvsB5LQLA7A8M EmnPyMBbRVAVzINSmq6NwnAPP4IxnqUAyZpKQu8OpGetl3JCL2rLqSaPC10O8Z7N hUfQBCyBMbLLhKjMLdWHObZctUiu7WI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:08 2025 by rpki-client