$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa File: 85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa (raw, json) Hash identifier: JGNQ1eBONv6+eEwOVjEjFBYmrHd3Cx20d00aBSE63u8= Subject key identifier: 2D:20:7B:A2:B3:D1:5C:BB:22:68:21:84:B5:8B:5E:8A:E4:E1:68:21 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF509E136C9A9DD29D51280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa Signing time: Tue 22 Apr 2025 09:37:50 +0000 ROA not before: Tue 22 Apr 2025 09:37:50 +0000 ROA not after: Mon 21 Jul 2025 09:37:50 +0000 asID: 19905 IP address blocks: 173.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f5:09:e1:36:c9:a9:dd:29:d5:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:50 2025 GMT Not After : Jul 21 09:37:50 2025 GMT Subject: CN=971d30bf-a596-4404-9172-c49db77e342f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:ca:a0:70:7d:f5:35:e9:7a:f6:73:81:4d: 00:13:e4:da:58:30:b1:76:70:c2:89:2d:a6:49:ae: 77:12:2c:6e:8d:94:f5:9a:c3:81:78:13:8e:c2:0d: 4a:b7:6b:e7:6d:ba:4c:27:97:92:8e:1e:0f:7a:79: cf:0f:5c:f2:d2:f2:d5:16:d7:dd:75:af:8d:63:4d: d3:4a:4b:e5:82:93:b4:90:a4:72:f7:1a:0f:5a:28: 8c:47:ab:17:96:10:2d:9f:2c:1a:ff:4b:b6:8c:b3: 2b:9c:46:d0:c1:ce:59:be:31:dd:55:43:77:70:81: 77:8e:fc:65:6c:22:e9:2d:e8:8d:aa:05:86:f5:2b: 25:cb:a5:5d:78:65:4a:f5:ae:f6:31:f6:88:37:1c: 8b:d4:81:fd:fc:90:5d:18:20:4f:3c:12:88:16:5c: c0:08:cb:84:aa:6c:03:e3:31:e2:5f:fe:9e:68:4d: c9:76:b6:bf:bc:03:91:09:c2:c1:ba:9e:9f:44:97: 45:55:73:ca:00:ee:72:ff:d4:ec:c2:2a:9e:fb:12: 05:08:cd:f2:da:96:d0:95:6d:e0:3e:47:d2:05:39: f5:4c:28:57:40:51:33:d3:78:9e:03:29:0a:71:fa: e8:63:2a:bd:f3:dd:56:0d:62:2f:68:cf:61:01:2c: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:20:7B:A2:B3:D1:5C:BB:22:68:21:84:B5:8B:5E:8A:E4:E1:68:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:94:5c:78:3d:06:9b:29:a6:19:ad:af:cd:93:51:50:c1:7c: b0:5b:73:23:b7:4f:8e:29:dc:2d:07:21:67:28:90:04:6f:70: 55:9d:10:f5:12:9d:ff:7f:26:d8:56:40:aa:10:7f:63:03:15: f0:81:2c:df:2c:96:6c:c5:d6:c6:5a:d4:e0:15:c4:e6:a0:da: b6:b9:31:8b:07:bc:66:73:26:a1:82:fb:1a:30:31:c3:db:d5: f4:65:18:19:d9:39:8e:9f:84:7d:86:a8:a2:34:b1:c0:72:ad: 20:50:bc:4a:3e:63:56:7e:03:2d:a7:c2:e9:d6:19:81:c7:ae: ee:6b:a0:74:24:13:9d:36:30:f0:ff:44:5a:ee:06:0e:08:6d: d8:a0:c1:8d:2c:41:48:11:3a:68:02:94:99:57:33:2c:17:bd: b8:02:37:42:ba:4a:ab:0d:5a:f0:14:4f:3e:a6:3f:e6:5a:fe: f1:50:4a:5c:b5:37:f8:41:e5:35:d7:a2:e2:d0:77:c6:ed:09: a1:95:80:3c:50:2d:39:4e:68:2b:8f:ef:4f:b4:fa:f2:30:3e: ea:53:1b:8c:bc:d6:4c:59:0a:9f:35:e4:c3:ad:ab:5e:09:3c: fc:a7:d0:da:4c:e4:c0:de:4d:2c:a1:09:70:ef:a9:21:e3:b3: 48:7d:eb:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9QnhNsmp3SnVEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5Mzc1MFoXDTI1MDcyMTA5Mzc1MFowLzEtMCsGA1UEAxMk OTcxZDMwYmYtYTU5Ni00NDA0LTkxNzItYzQ5ZGI3N2UzNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHTKoHB99TXpevZzgU0AE+TaWDCxdnDCiS2m Sa53EixujZT1msOBeBOOwg1Kt2vnbbpMJ5eSjh4PennPD1zy0vLVFtfdda+NY03T SkvlgpO0kKRy9xoPWiiMR6sXlhAtnywa/0u2jLMrnEbQwc5ZvjHdVUN3cIF3jvxl bCLpLeiNqgWG9Ssly6VdeGVK9a72MfaINxyL1IH9/JBdGCBPPBKIFlzACMuEqmwD 4zHiX/6eaE3Jdra/vAORCcLBup6fRJdFVXPKAO5y/9Tswiqe+xIFCM3y2pbQlW3g PkfSBTn1TChXQFEz03ieAykKcfroYyq9891WDWIvaM9hASwdRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0ge6Kz0Vy7ImghhLWLXork4WghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVmYjI5ZGMtMTdlMi0z OGY3LTlhYTgtNmFkZmExMDk0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeUXHg9Bpspphmtr82TUVDBfLBbcyO3T44p3C0HIWcokARvcFWdEPUS nf9/JthWQKoQf2MDFfCBLN8slmzF1sZa1OAVxOag2ra5MYsHvGZzJqGC+xowMcPb 1fRlGBnZOY6fhH2GqKI0scByrSBQvEo+Y1Z+Ay2nwunWGYHHru5roHQkE502MPD/ RFruBg4IbdigwY0sQUgROmgClJlXMywXvbgCN0K6SqsNWvAUTz6mP+Za/vFQSly1 N/hB5TXXouLQd8btCaGVgDxQLTlOaCuP70+0+vIwPupTG4y81kxZCp815MOtq14J PPyn0NpM5MDeTSyhCXDvqSHjs0h964M= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:33 2025 by rpki-client