$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829764cf-3738-30e5-93e1-768795997e26.roa File: 829764cf-3738-30e5-93e1-768795997e26.roa (raw, json) Hash identifier: RyQkwjKuFTk0OqNKVLBIbEaE3r6bLjb768Ol6CC2yrg= Subject key identifier: 16:9B:FA:93:0D:56:1A:ED:25:98:99:C1:6F:CD:21:16:BE:5A:A1:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA450912F520D119542E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829764cf-3738-30e5-93e1-768795997e26.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:45:09:12:f5:20:d1:19:54:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9d4bf90d-81d3-4316-95cd-9310de1b6aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cd:e4:fc:0d:31:43:fb:0e:e6:f3:c2:0d:92: e0:15:1a:cf:d2:bd:81:00:4e:68:85:bc:8b:55:07: 31:20:c6:fa:02:d8:c4:84:a1:4e:5d:6d:13:b1:ee: ff:63:e5:c1:f4:ad:4f:f4:da:01:17:b6:d9:65:7a: 10:ca:9b:55:40:0b:ba:c9:5b:8a:59:e6:07:f5:4e: b0:a1:3e:20:53:02:92:3d:e0:07:e3:01:46:8c:21: ca:00:69:ca:b5:7c:72:60:7e:b6:70:f2:e0:1a:38: 9a:b4:e7:e2:94:d8:96:1a:9c:96:c7:e4:2f:d2:1f: e2:3d:08:45:fa:a3:b3:e9:c9:fb:db:7e:4a:05:8a: b5:61:2d:e0:8e:7e:b8:f8:e0:52:46:04:4d:7d:93: 84:68:ef:cf:b7:53:4f:02:75:36:60:09:4f:18:71: c2:84:12:26:bc:2c:d5:b7:00:a6:36:4c:be:76:8c: 4e:9d:f0:d3:04:6e:18:b7:70:72:18:1c:ed:cf:10: 49:79:9b:5e:e5:5b:6d:d2:dd:e3:1a:b6:be:ad:2c: c4:f4:69:9a:f9:83:cf:8a:a8:66:7a:cb:ba:72:ab: 48:a0:d6:c6:a5:49:9a:d2:91:ba:a9:fe:b5:8d:a8: 12:f1:e8:d8:9e:f5:6b:af:3c:91:62:97:9e:15:dd: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9B:FA:93:0D:56:1A:ED:25:98:99:C1:6F:CD:21:16:BE:5A:A1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829764cf-3738-30e5-93e1-768795997e26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a4:1e:a8:56:b3:13:49:b6:6a:7b:ad:74:53:5e:bb:14:3f: 0f:97:91:c8:65:1c:fe:68:43:07:92:ad:15:75:fb:24:27:ea: 53:02:89:13:1c:28:74:6c:3b:ff:7d:de:22:a5:90:72:ad:9c: a7:72:4b:79:19:c0:03:78:d5:12:3b:8f:bd:32:bd:04:c6:63: fa:c2:53:9c:83:3c:aa:14:18:0e:fb:13:b6:52:9e:85:fb:e6: f6:37:ad:3f:f0:ec:1f:26:ac:b8:60:c6:81:ee:ef:f3:26:ab: 12:b2:ae:d4:0d:36:3a:ef:94:c4:7d:05:76:a8:9e:b2:35:01: c2:c5:7b:1b:83:c4:83:29:0b:2f:1f:43:53:15:84:62:dc:ce: 9d:c1:8a:7b:82:79:65:2d:05:00:cc:47:10:83:a7:54:6a:aa: dd:85:53:0a:51:96:16:53:cf:f8:75:aa:cb:66:47:a6:c2:2c: 3c:ac:97:a9:58:13:22:02:78:6b:79:e5:f3:dd:08:8d:e3:1b: f4:17:bf:a1:be:86:3e:5e:d7:d3:a2:e9:f8:c4:a7:0a:44:bc: e6:50:5d:17:a7:41:f1:fe:c9:53:f3:e3:6d:2c:fd:33:fc:0f: 2e:8c:f2:30:cb:53:71:3d:21:06:63:bf:9b:f2:ec:72:ba:bf: 06:f2:92:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukUJEvUg0RlULgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWQ0YmY5MGQtODFkMy00MzE2LTk1Y2QtOTMxMGRlMWI2YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns3k/A0xQ/sO5vPCDZLgFRrP0r2BAE5ohbyL VQcxIMb6AtjEhKFOXW0Tse7/Y+XB9K1P9NoBF7bZZXoQyptVQAu6yVuKWeYH9U6w oT4gUwKSPeAH4wFGjCHKAGnKtXxyYH62cPLgGjiatOfilNiWGpyWx+Qv0h/iPQhF +qOz6cn7235KBYq1YS3gjn64+OBSRgRNfZOEaO/Pt1NPAnU2YAlPGHHChBImvCzV twCmNky+doxOnfDTBG4Yt3ByGBztzxBJeZte5Vtt0t3jGra+rSzE9Gma+YPPiqhm esu6cqtIoNbGpUma0pG6qf61jagS8ejYnvVrrzyRYpeeFd3f0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBab+pMNVhrtJZiZwW/NIRa+WqHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODI5NzY0Y2YtMzczOC0z MGU1LTkzZTEtNzY4Nzk1OTk3ZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFikHqhWsxNJtmp7rXRTXrsUPw+XkchlHP5oQweSrRV1+yQn6lMCiRMc KHRsO/993iKlkHKtnKdyS3kZwAN41RI7j70yvQTGY/rCU5yDPKoUGA77E7ZSnoX7 5vY3rT/w7B8mrLhgxoHu7/MmqxKyrtQNNjrvlMR9BXaonrI1AcLFexuDxIMpCy8f Q1MVhGLczp3BinuCeWUtBQDMRxCDp1Rqqt2FUwpRlhZTz/h1qstmR6bCLDysl6lY EyICeGt55fPdCI3jG/QXv6G+hj5e19Oi6fjEpwpEvOZQXRenQfH+yVPz420s/TP8 Dy6M8jDLU3E9IQZjv5vy7HK6vwbykvU= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:47 2025 by rpki-client