$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e81d4bf-27b8-356e-a636-901f06388e78.roa File: 4e81d4bf-27b8-356e-a636-901f06388e78.roa (raw, json) Hash identifier: eKsj8FxXdLMCLIMmbc5GVmffLoF+EaWnuOiik0DBmdE= Subject key identifier: 99:E8:19:08:54:69:ED:55:9B:8B:04:EB:A5:3D:98:95:80:A7:25:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C496955D0FCB8012799700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e81d4bf-27b8-356e-a636-901f06388e78.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.25.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:96:95:5d:0f:cb:80:12:79:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=4c663cb1-7246-42fe-b8e8-89c7a920286e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:42:17:bb:4d:3f:d7:f9:7f:16:91:2b:22: d6:3f:00:4e:01:93:f8:20:a5:60:9a:29:c1:9e:f5: 40:b5:25:9e:cb:84:e9:01:8a:f9:41:ca:e1:67:f3: b1:f3:08:7f:95:7d:28:a8:48:e4:e8:0d:92:43:73: a5:d5:2b:b6:db:96:59:a7:47:bf:ed:37:e4:b9:c8: 42:2f:ad:af:54:c5:4b:82:34:f7:89:31:8a:2b:73: 5c:f9:b9:c6:65:00:72:5d:b6:62:df:df:c8:1a:29: 38:1d:6e:e1:19:b1:31:36:2c:09:e9:aa:cd:4c:20: 69:00:2c:34:ec:5e:04:a5:cd:9a:2c:13:94:5b:a6: 70:6a:cc:36:54:8a:24:e1:53:7e:90:60:74:49:48: ff:65:f1:95:3b:6d:ad:20:d1:b3:6c:19:24:a9:ae: f2:f2:d7:1e:1b:12:3b:58:9a:97:75:43:83:ab:db: d9:db:48:ff:09:ab:94:b3:d0:0a:3f:db:d5:28:e1: c1:22:cc:15:ca:6b:c2:8d:87:da:e7:1c:31:5a:09: 3f:56:66:57:31:75:69:e0:4f:94:26:64:b2:ce:6c: bd:8c:1e:1f:1f:0a:38:0d:42:d4:af:c5:ce:bf:fd: ff:1a:0f:6d:35:11:5d:6c:9b:91:36:5a:9b:b2:e5: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E8:19:08:54:69:ED:55:9B:8B:04:EB:A5:3D:98:95:80:A7:25:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e81d4bf-27b8-356e-a636-901f06388e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:97:f5:06:b0:7f:d4:ae:b0:8b:ed:7f:7b:54:e3:06:a5:a8: 1a:4b:87:6c:ad:df:d0:b2:88:49:47:ab:89:af:d6:2f:e5:1d: 82:a6:79:0b:68:03:08:48:2b:f1:86:e6:1a:bd:36:c5:58:c4: 70:99:b5:f1:11:f4:3b:e5:5d:fc:69:cd:bb:d4:d3:9d:ca:1a: 41:c2:49:8a:f9:53:66:66:ae:62:bd:cf:08:f2:58:95:a2:6c: 74:63:50:a8:c4:fc:bd:9b:35:cb:ff:55:e3:94:c3:f7:f1:15: 43:8a:67:7f:88:4d:ff:09:eb:d3:a9:c7:29:b4:1e:cd:fa:97: d2:5e:fe:c3:10:75:ae:4a:01:38:3c:be:68:7b:ef:af:68:ac: 98:fe:5d:2a:a5:5c:b0:ae:75:e5:6f:0a:58:e2:f4:4a:45:5a: 75:1e:dc:fd:7f:40:5d:49:28:6a:2c:70:9a:7e:3a:79:c3:c2: 60:29:c9:fd:82:fd:2b:d0:f0:3b:ae:bd:25:ed:72:00:c2:02: 51:90:b5:09:82:c2:95:fe:c7:c9:14:1b:b3:ca:91:ad:46:49: db:f7:8f:bd:b6:43:fa:1a:12:c1:f8:26:e6:45:f4:fa:1b:9e: 01:33:5b:33:a0:63:1a:b2:41:7e:46:1c:d3:d8:72:87:d2:f5: 90:90:55:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJaVXQ/LgBJ5lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NGM2NjNjYjEtNzI0Ni00MmZlLWI4ZTgtODljN2E5MjAyODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKFCF7tNP9f5fxaRKyLWPwBOAZP4IKVgminB nvVAtSWey4TpAYr5QcrhZ/Ox8wh/lX0oqEjk6A2SQ3Ol1Su225ZZp0e/7TfkuchC L62vVMVLgjT3iTGKK3Nc+bnGZQByXbZi39/IGik4HW7hGbExNiwJ6arNTCBpACw0 7F4Epc2aLBOUW6Zwasw2VIok4VN+kGB0SUj/ZfGVO22tINGzbBkkqa7y8tceGxI7 WJqXdUODq9vZ20j/CauUs9AKP9vVKOHBIswVymvCjYfa5xwxWgk/VmZXMXVp4E+U JmSyzmy9jB4fHwo4DULUr8XOv/3/Gg9tNRFdbJuRNlqbsuV1/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnoGQhUae1Vm4sE66U9mJWApyXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGU4MWQ0YmYtMjdiOC0z NTZlLWE2MzYtOTAxZjA2Mzg4ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRlrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOX9Qawf9SusIvtf3tU4walqBpLh2yt39CyiElHq4mv1i/lHYKmeQto AwhIK/GG5hq9NsVYxHCZtfER9DvlXfxpzbvU053KGkHCSYr5U2ZmrmK9zwjyWJWi bHRjUKjE/L2bNcv/VeOUw/fxFUOKZ3+ITf8J69Opxym0Hs36l9Je/sMQda5KATg8 vmh7769orJj+XSqlXLCudeVvClji9EpFWnUe3P1/QF1JKGoscJp+OnnDwmApyf2C /SvQ8DuuvSXtcgDCAlGQtQmCwpX+x8kUG7PKka1GSdv3j722Q/oaEsH4JuZF9Pob ngEzWzOgYxqyQX5GHNPYcofS9ZCQVcA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:11 2025 by rpki-client