$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78301d3e-6023-3ad8-a572-de45b8745ae3.roa File: 78301d3e-6023-3ad8-a572-de45b8745ae3.roa (raw, json) Hash identifier: oczG5W8n67lajMDnkNtKR3+4xdrSRP7u5B9pnBOxKJE= Subject key identifier: BC:E8:05:46:C9:C3:50:BD:AA:21:BF:2B:0F:9D:53:7B:C1:C5:56:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3D8BB03F47CE63C73A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78301d3e-6023-3ad8-a572-de45b8745ae3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3d:8b:b0:3f:47:ce:63:c7:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=23a55109-419e-4509-96f9-edc8ffcd3c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:7a:1d:9e:2b:e6:b8:bb:1e:e6:81:27:61: cf:ce:f6:ce:92:47:71:ab:4c:90:c0:9a:af:cd:48: 9c:e7:a6:24:4b:9c:41:85:6e:3f:a8:24:29:fc:98: 20:3c:59:df:60:3a:ea:2a:ee:56:0b:b7:dc:17:a1: f5:84:37:b4:d0:c8:9c:be:49:1e:d5:53:32:50:12: 66:63:80:e5:18:de:5a:91:3e:df:b7:0c:56:b0:c7: c5:30:c9:1e:21:06:f9:0e:f4:e7:84:22:e9:60:0f: 3b:b5:70:83:4d:cb:e3:62:b4:25:bf:0a:24:a3:2c: 01:1f:e8:c6:07:59:b0:62:9b:08:17:9d:06:92:fd: 13:af:19:37:f2:66:a3:9e:ee:e2:52:87:96:d8:09: 4c:fb:d3:6d:53:8b:d3:c1:94:c4:11:49:fb:0c:97: 47:94:ec:8e:c1:65:46:d7:83:a7:4d:91:5c:3e:dd: 79:ae:eb:64:10:ed:1c:5c:13:55:10:a2:5b:e2:98: 5b:19:a9:19:de:7a:b1:66:51:b9:f9:a0:35:db:41: b6:f3:27:3b:21:59:96:7e:82:a9:1c:ee:b9:30:42: 3a:9b:c1:bd:c0:a1:4d:94:46:b2:25:4a:27:38:66: 5d:e5:56:f3:95:a4:3f:ee:4d:3f:8a:f5:c7:5a:a5: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:05:46:C9:C3:50:BD:AA:21:BF:2B:0F:9D:53:7B:C1:C5:56:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78301d3e-6023-3ad8-a572-de45b8745ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7f:b6:ad:bf:c3:ec:8e:b8:bf:e7:1a:1b:5a:ec:26:fe:1f: ba:4a:bf:82:ea:dc:b4:5c:be:b1:26:4a:ab:f6:23:1b:3a:cc: b3:38:f6:dd:89:32:85:6c:aa:1b:67:db:d1:aa:2f:74:d3:22: 3d:b5:c5:0a:fe:5c:26:6c:59:1b:18:fd:b1:e3:37:03:eb:be: 45:d3:77:60:d3:2c:c6:9a:f5:63:a0:0f:3c:51:8f:fc:ef:35: 31:08:64:64:98:50:75:2f:ac:e6:c5:48:bc:da:0f:74:5d:60: f9:6c:25:e2:90:bb:9b:bd:3b:2e:1b:a1:94:cc:ec:70:91:c4: 7d:b6:39:57:95:7f:51:03:d9:f7:3f:a6:74:32:a0:7a:72:de: 5d:4f:ea:a6:45:00:9a:6a:df:a0:93:49:4d:fb:52:21:ff:43: 1e:3b:5a:7e:bc:0f:e1:f0:e0:84:55:86:a6:76:e7:a7:28:e8: b7:7b:71:77:00:56:cd:8b:41:e5:52:bd:42:57:27:90:90:53: 35:f2:b2:64:d8:c5:bc:0c:4b:97:bf:df:43:e8:13:d9:74:3f: 7a:dc:9d:36:b1:58:1f:4d:d7:16:8f:59:98:71:f5:90:62:22: df:ce:5a:7f:cf:49:9e:0a:a7:81:c6:a0:3a:69:95:03:be:d0: 82:6f:8a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj2LsD9HzmPHOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjNhNTUxMDktNDE5ZS00NTA5LTk2ZjktZWRjOGZmY2QzYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcp6HZ4r5ri7HuaBJ2HPzvbOkkdxq0yQwJqv zUic56YkS5xBhW4/qCQp/JggPFnfYDrqKu5WC7fcF6H1hDe00Micvkke1VMyUBJm Y4DlGN5akT7ftwxWsMfFMMkeIQb5DvTnhCLpYA87tXCDTcvjYrQlvwokoywBH+jG B1mwYpsIF50Gkv0Trxk38majnu7iUoeW2AlM+9NtU4vTwZTEEUn7DJdHlOyOwWVG 14OnTZFcPt15rutkEO0cXBNVEKJb4phbGakZ3nqxZlG5+aA120G28yc7IVmWfoKp HO65MEI6m8G9wKFNlEayJUonOGZd5VbzlaQ/7k0/ivXHWqXq0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzoBUbJw1C9qiG/Kw+dU3vBxVbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzgzMDFkM2UtNjAyMy0z YWQ4LWE1NzItZGU0NWI4NzQ1YWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd/tq2/w+yOuL/nGhta7Cb+H7pKv4Lq3LRcvrEmSqv2Ixs6zLM49t2J MoVsqhtn29GqL3TTIj21xQr+XCZsWRsY/bHjNwPrvkXTd2DTLMaa9WOgDzxRj/zv NTEIZGSYUHUvrObFSLzaD3RdYPlsJeKQu5u9Oy4boZTM7HCRxH22OVeVf1ED2fc/ pnQyoHpy3l1P6qZFAJpq36CTSU37UiH/Qx47Wn68D+Hw4IRVhqZ256co6Ld7cXcA Vs2LQeVSvUJXJ5CQUzXysmTYxbwMS5e/30PoE9l0P3rcnTaxWB9N1xaPWZhx9ZBi It/OWn/PSZ4Kp4HGoDpplQO+0IJvil0= -----END CERTIFICATE-----Generated at Sun Apr 27 00:53:25 2025 by rpki-client