$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a62ba60-d708-3b53-b2da-2f292167d52e.roa File: 7a62ba60-d708-3b53-b2da-2f292167d52e.roa (raw, json) Hash identifier: Z68mLb5cBpYX3duGLCVIzYn9Md5+REXsTqU8c3F18eg= Subject key identifier: 47:F9:13:29:93:05:36:46:C7:0C:C2:53:4E:67:23:5E:F7:5C:C1:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4BDCE3BA84E39802F680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a62ba60-d708-3b53-b2da-2f292167d52e.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4b:dc:e3:ba:84:e3:98:02:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=d60bac7b-6905-4e05-b81a-f08fd950e9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:9b:ab:2e:de:e3:7b:79:82:df:fd:55:97: 42:2a:98:e9:53:7c:c3:bb:31:f9:a3:ae:cd:13:da: 90:f5:e4:a6:3e:b5:52:e6:14:6d:2f:14:cc:99:dd: a7:de:22:c3:0e:24:66:e8:df:b9:c6:fd:6f:af:17: 81:49:5b:aa:c6:e3:1e:b2:9e:13:25:98:b4:41:e0: 9c:09:31:8b:dd:3c:fa:d4:2e:49:bb:3d:88:00:50: f2:31:7a:cc:75:28:74:91:1e:8a:39:93:2b:d0:9e: d6:b0:50:9a:ff:a2:ab:9d:26:13:df:0b:22:be:d6: 49:08:b7:98:05:d6:1c:09:38:5f:96:f3:0e:87:a9: 3d:3c:a4:c0:39:f8:46:78:5f:61:dc:30:45:af:f6: 7e:3b:b9:38:9d:4e:e1:3b:da:05:2a:79:71:20:35: 2b:8e:75:6f:81:b1:06:06:f6:3c:29:3a:88:1a:3b: 95:df:e8:27:e7:c6:01:ff:37:ac:86:bd:2c:99:c9: 18:c2:8c:56:44:d2:44:f8:7b:d7:84:da:5c:0b:4c: ab:5b:ca:81:a6:10:88:1a:c1:09:28:55:a4:ff:58: 01:a9:a9:40:ce:b0:12:5b:f5:33:e5:21:cb:4c:c7: 19:c4:ca:86:08:3c:79:a5:78:68:98:2c:24:fa:1a: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F9:13:29:93:05:36:46:C7:0C:C2:53:4E:67:23:5E:F7:5C:C1:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a62ba60-d708-3b53-b2da-2f292167d52e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:23:d8:ba:ff:9c:6c:19:a1:86:33:ec:07:0e:af:5b:4f:19: f6:fc:c4:03:07:71:6f:e8:97:1e:a0:bd:32:4f:f8:a4:fb:ad: fb:0a:af:8e:3e:34:25:e3:0c:21:d6:1b:74:e8:a2:87:b6:33: 69:24:8a:4d:6c:5b:01:f7:23:31:48:bc:98:56:3d:da:a4:3b: b2:34:49:37:31:86:ff:c2:ae:35:d1:ad:8e:31:43:1a:e6:0f: 7e:5c:be:40:c5:a1:59:36:08:30:82:be:ae:9a:ed:18:45:22: 56:b6:e6:6b:8e:a6:92:05:c8:69:de:93:09:07:f7:4e:31:1f: e8:f7:47:99:a6:c1:2b:56:f0:89:1a:4a:d4:8a:e3:69:e4:50: 74:e2:67:90:37:0b:ce:b5:f8:84:71:a8:2e:21:47:48:9a:08: 02:5a:69:f9:53:be:97:9c:72:66:6e:73:25:4b:d2:89:75:ea: fb:25:32:63:77:e5:ad:35:26:c5:09:a6:70:24:77:d6:02:55: d6:7b:e4:01:d3:21:3a:b2:a5:41:ab:dc:02:ec:f8:bf:df:93: 19:b3:36:96:73:9c:85:94:19:15:fc:50:0c:09:c6:fd:de:22: d7:12:da:f8:f1:66:6b:3e:8e:c7:4a:a7:8e:a1:b2:0c:ce:58: 9a:57:0f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70vc47qE45gC9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDYwYmFjN2ItNjkwNS00ZTA1LWI4MWEtZjA4ZmQ5NTBlOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Sbqy7e43t5gt/9VZdCKpjpU3zDuzH5o67N E9qQ9eSmPrVS5hRtLxTMmd2n3iLDDiRm6N+5xv1vrxeBSVuqxuMesp4TJZi0QeCc CTGL3Tz61C5Juz2IAFDyMXrMdSh0kR6KOZMr0J7WsFCa/6KrnSYT3wsivtZJCLeY BdYcCThflvMOh6k9PKTAOfhGeF9h3DBFr/Z+O7k4nU7hO9oFKnlxIDUrjnVvgbEG BvY8KTqIGjuV3+gn58YB/zeshr0smckYwoxWRNJE+HvXhNpcC0yrW8qBphCIGsEJ KFWk/1gBqalAzrASW/Uz5SHLTMcZxMqGCDx5pXhomCwk+hoZrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf5EymTBTZGxwzCU05nI173XMEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2E2MmJhNjAtZDcwOC0z YjUzLWIyZGEtMmYyOTIxNjdkNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIj2Lr/nGwZoYYz7AcOr1tPGfb8xAMHcW/olx6gvTJP+KT7rfsKr44+ NCXjDCHWG3Toooe2M2kkik1sWwH3IzFIvJhWPdqkO7I0STcxhv/CrjXRrY4xQxrm D35cvkDFoVk2CDCCvq6a7RhFIla25muOppIFyGnekwkH904xH+j3R5mmwStW8Ika StSK42nkUHTiZ5A3C861+IRxqC4hR0iaCAJaaflTvpeccmZucyVL0ol16vslMmN3 5a01JsUJpnAkd9YCVdZ75AHTITqypUGr3ALs+L/fkxmzNpZznIWUGRX8UAwJxv3e ItcS2vjxZms+jsdKp46hsgzOWJpXD5g= -----END CERTIFICATE-----Generated at Sun Apr 27 10:19:17 2025 by rpki-client