$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6571c6de-d050-38cd-884d-26690e864931.roa File: 6571c6de-d050-38cd-884d-26690e864931.roa (raw, json) Hash identifier: /+tg/Q06X2ApFEMHeKUdxb3urHI1Pr2h5PwJNMeqSLM= Subject key identifier: 00:E1:78:E2:E2:2D:34:EB:7B:60:8B:0D:15:0D:82:1F:86:4F:06:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C498079C1C67C6EA34DD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6571c6de-d050-38cd-884d-26690e864931.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.30.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:98:07:9c:1c:67:c6:ea:34:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=fdf82434-47f3-44bf-a844-cfa9c1a221fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:83:24:e9:f9:7d:ee:d7:07:26:87:01:fa: 4a:b3:7c:ac:19:26:9e:ab:12:87:fc:f5:3e:6b:05: 32:1c:ed:af:9c:a4:77:bf:9e:43:76:1b:cb:db:c3: 26:45:8b:0e:09:a6:cf:2e:70:e8:94:0f:49:ef:cb: 21:87:7c:7f:59:0a:58:91:f7:3f:d8:0b:0c:02:a5: 5b:05:4c:72:9c:ef:a2:cd:93:cf:9e:d8:db:58:78: 9e:b5:c4:96:fd:d5:fb:d0:54:3b:a9:04:6d:c6:e3: af:e9:b9:64:9a:ae:69:49:7c:21:1b:21:ca:8f:fd: 33:f0:28:10:c0:1d:dd:5b:fc:73:fd:f6:1d:60:7a: 6f:07:d9:13:d7:c7:1c:96:da:a5:f7:a5:cf:2b:04: ba:31:8c:e8:34:e6:b3:23:a3:86:42:18:b2:ce:cc: b5:b3:b1:3c:8c:94:70:82:e3:31:e1:3d:5b:7e:d5: 9d:2d:6b:a0:a3:a2:25:19:27:9a:34:38:4f:96:f4: b6:b5:1a:2b:aa:5f:27:eb:9b:38:53:83:b7:db:0e: 09:a9:e8:d8:79:90:b1:9b:f3:9a:11:c8:c4:6c:9b: 82:d1:52:ac:f2:ea:fe:30:70:57:71:cd:77:35:de: c3:25:c2:9d:34:21:0a:a5:14:f0:a6:18:e1:df:60: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:78:E2:E2:2D:34:EB:7B:60:8B:0D:15:0D:82:1F:86:4F:06:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6571c6de-d050-38cd-884d-26690e864931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5e:07:22:ce:32:78:80:5b:7a:2a:64:ce:61:a1:e3:e1:8e: 13:24:63:d4:76:7c:db:17:30:3a:1c:01:7b:58:1c:48:52:a0: ed:c9:77:9e:75:ce:cd:3d:57:93:ca:ce:ad:c3:4f:9b:97:fd: c5:dd:9c:b2:04:b3:c0:45:6f:e9:c3:f0:9f:a9:f8:65:db:59: 68:22:15:c1:7d:86:83:c0:4b:b9:69:e9:c1:1d:ae:e1:3e:96: 1a:dd:af:27:ad:15:66:9d:d8:09:68:55:a7:03:b3:4c:bc:50: bb:69:ca:2d:5a:85:f3:d5:8c:18:29:24:35:c7:1c:ef:12:ba: 51:57:02:bf:d7:81:a6:86:3e:31:25:b9:6c:dc:00:da:d5:11: 05:1c:09:9f:f8:c6:67:3d:6c:2e:13:9c:42:6c:96:67:20:85: 05:42:1d:af:a7:c2:27:18:6c:1b:9e:ea:1b:cc:19:8e:d2:0a: de:a8:9a:fd:31:39:96:97:4f:62:99:26:63:49:9d:f9:ce:4b: 36:18:f1:bd:9b:92:bd:6f:d3:9a:52:26:7b:5b:c7:40:c6:af: cc:91:cf:1e:12:83:0c:d8:b9:22:ae:75:b6:ff:96:11:2b:8f: cf:94:57:01:5b:a7:57:55:f4:57:fa:ce:4d:63:bd:d9:f5:21: 7b:9f:cf:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJgHnBxnxuo03QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZmRmODI0MzQtNDdmMy00NGJmLWE4NDQtY2ZhOWMxYTIyMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCKDJOn5fe7XByaHAfpKs3ysGSaeqxKH/PU+ awUyHO2vnKR3v55DdhvL28MmRYsOCabPLnDolA9J78shh3x/WQpYkfc/2AsMAqVb BUxynO+izZPPntjbWHietcSW/dX70FQ7qQRtxuOv6blkmq5pSXwhGyHKj/0z8CgQ wB3dW/xz/fYdYHpvB9kT18ccltql96XPKwS6MYzoNOazI6OGQhiyzsy1s7E8jJRw guMx4T1bftWdLWugo6IlGSeaNDhPlvS2tRorql8n65s4U4O32w4JqejYeZCxm/Oa EcjEbJuC0VKs8ur+MHBXcc13Nd7DJcKdNCEKpRTwphjh32AkbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADheOLiLTTre2CLDRUNgh+GTwaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjU3MWM2ZGUtZDA1MC0z OGNkLTg4NGQtMjY2OTBlODY0OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR5vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGReByLOMniAW3oqZM5hoePhjhMkY9R2fNsXMDocAXtYHEhSoO3Jd551 zs09V5PKzq3DT5uX/cXdnLIEs8BFb+nD8J+p+GXbWWgiFcF9hoPAS7lp6cEdruE+ lhrdryetFWad2AloVacDs0y8ULtpyi1ahfPVjBgpJDXHHO8SulFXAr/XgaaGPjEl uWzcANrVEQUcCZ/4xmc9bC4TnEJslmcghQVCHa+nwicYbBue6hvMGY7SCt6omv0x OZaXT2KZJmNJnfnOSzYY8b2bkr1v05pSJntbx0DGr8yRzx4SgwzYuSKudbb/lhEr j8+UVwFbp1dV9Ff6zk1jvdn1IXufz5Q= -----END CERTIFICATE-----Generated at Sat Apr 26 22:48:26 2025 by rpki-client