$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6694f24f-301a-3542-9435-1d85f56645c0.roa File: 6694f24f-301a-3542-9435-1d85f56645c0.roa (raw, json) Hash identifier: YKB8YgRTzcE5l3se5NV7rPXovDo7f4lLvFKdczG/7To= Subject key identifier: FD:1C:8A:1E:36:9D:28:E1:F1:72:46:98:1A:2C:C4:7C:E4:72:07:B5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4A03A16F2855B529A600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6694f24f-301a-3542-9435-1d85f56645c0.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 150.195.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4a:03:a1:6f:28:55:b5:29:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=a9a7ecbb-f944-4f67-b85e-1d27ebf93acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0e:32:f4:44:0c:62:cb:39:41:0f:59:68:c1: 81:63:a1:d6:31:f5:60:c0:de:dd:e1:ee:d1:a4:18: 98:b5:5c:02:f7:f7:3d:9d:de:a9:45:a8:27:d5:d0: a3:8a:42:f3:be:8a:a3:33:21:b8:66:1e:ca:4c:eb: f9:cd:67:64:fc:09:59:17:fd:c0:68:d5:39:4d:3e: ee:0b:00:89:cf:93:e7:ae:96:69:19:18:0f:c5:7d: 6a:f9:bf:62:7f:d7:46:82:99:02:0f:81:f4:d8:6b: 43:b0:de:22:60:fd:23:16:bc:77:28:78:42:ad:43: e4:84:7a:7f:38:35:a1:0e:9c:5a:db:57:40:4d:b7: 33:87:f0:b5:89:1c:12:09:90:85:74:14:f2:88:87: 1c:16:b1:4b:a0:92:60:f7:bc:4f:c3:0d:0e:42:70: d7:7e:ed:ca:78:0e:4c:db:78:f8:07:2f:51:dc:c8: 77:fe:aa:94:cc:77:00:18:18:07:9d:ff:3c:3e:1c: 66:bc:4f:6a:91:0c:76:ff:61:2c:ac:af:3b:30:da: 5a:6c:70:70:d2:d2:35:e8:59:91:f3:a6:ca:78:40: 60:af:fb:10:72:28:c8:a8:c0:12:43:70:49:9f:97: c0:74:0c:6d:da:a3:f0:0b:85:0d:7c:f6:86:93:90: bb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1C:8A:1E:36:9D:28:E1:F1:72:46:98:1A:2C:C4:7C:E4:72:07:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6694f24f-301a-3542-9435-1d85f56645c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:60:2b:3a:6c:b8:8a:c8:cd:f2:35:bb:da:87:0a:78:76:82: 83:80:76:d2:df:fb:7f:b1:ec:c3:d0:8e:70:45:9b:f3:92:c1: 5e:11:8f:e5:fa:b6:e8:8a:9e:cb:c8:f5:c1:b1:b1:44:c1:4a: 1a:e2:6b:40:71:ec:b4:8c:22:8d:63:1e:fb:43:be:53:8c:0d: 3a:d2:af:1f:68:0b:6b:65:e3:63:e2:d4:0b:37:44:9f:c2:b4: 91:e8:55:69:7a:b1:9f:e7:ee:21:d7:0f:c6:44:31:bf:53:eb: e9:ec:82:8e:7e:d4:ff:57:c6:cf:4f:86:72:4d:2e:9b:27:5b: b2:97:d3:cc:d5:9e:8d:12:83:75:21:99:62:6a:bf:7d:ac:5f: f8:b8:f9:52:f1:95:ba:6c:8e:53:c0:5e:e6:0f:d5:77:28:e8: 2e:05:73:58:ed:63:44:0e:d8:a4:a1:6c:d7:82:53:23:8f:4e: 3e:b8:75:0a:e3:3d:61:30:df:1c:d2:3b:34:13:5c:96:81:b1: 13:1c:38:43:d2:c9:36:a2:95:41:eb:3b:cc:12:23:b0:1f:d7: 0a:3b:78:f4:8d:27:68:d7:1d:b7:5e:6e:57:f8:d0:91:06:7c: 91:2e:f4:de:d7:3d:b7:48:c8:99:2d:38:72:8e:78:20:96:e1: cb:f4:a0:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70oDoW8oVbUppgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YTlhN2VjYmItZjk0NC00ZjY3LWI4NWUtMWQyN2ViZjkzYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ4y9EQMYss5QQ9ZaMGBY6HWMfVgwN7d4e7R pBiYtVwC9/c9nd6pRagn1dCjikLzvoqjMyG4Zh7KTOv5zWdk/AlZF/3AaNU5TT7u CwCJz5PnrpZpGRgPxX1q+b9if9dGgpkCD4H02GtDsN4iYP0jFrx3KHhCrUPkhHp/ ODWhDpxa21dATbczh/C1iRwSCZCFdBTyiIccFrFLoJJg97xPww0OQnDXfu3KeA5M 23j4By9R3Mh3/qqUzHcAGBgHnf88PhxmvE9qkQx2/2EsrK87MNpabHBw0tI16FmR 86bKeEBgr/sQcijIqMASQ3BJn5fAdAxt2qPwC4UNfPaGk5C78QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0cih42nSjh8XJGmBosxHzkcge1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjY5NGYyNGYtMzAxYS0z NTQyLTk0MzUtMWQ4NWY1NjY0NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClsMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdgKzpsuIrIzfI1u9qHCnh2goOAdtLf+3+x7MPQjnBFm/OSwV4Rj+X6 tuiKnsvI9cGxsUTBShria0Bx7LSMIo1jHvtDvlOMDTrSrx9oC2tl42Pi1As3RJ/C tJHoVWl6sZ/n7iHXD8ZEMb9T6+nsgo5+1P9Xxs9PhnJNLpsnW7KX08zVno0Sg3Uh mWJqv32sX/i4+VLxlbpsjlPAXuYP1Xco6C4Fc1jtY0QO2KShbNeCUyOPTj64dQrj PWEw3xzSOzQTXJaBsRMcOEPSyTailUHrO8wSI7Af1wo7ePSNJ2jXHbdeblf40JEG fJEu9N7XPbdIyJktOHKOeCCW4cv0oNU= -----END CERTIFICATE-----Generated at Sun Apr 27 21:34:23 2025 by rpki-client