$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa File: 86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa (raw, json) Hash identifier: ITw9/6xxPIxRPCI093MQhBFhywE6PGvXqIauTp3kD7E= Subject key identifier: 35:D1:3C:88:9A:F6:34:76:5C:2E:B5:B8:AD:90:36:82:33:4A:B7:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA133FB6AE8A4C96598E70 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 150.195.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:13:3f:b6:ae:8a:4c:96:59:8e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=17646efb-915f-48ab-bb1b-9ca31855f3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:21:33:a8:ba:6d:51:a1:2b:04:45:af:b5: c9:20:c0:fc:48:2f:65:23:82:1e:23:79:85:2a:83: b4:50:5f:f6:ee:ee:a4:a9:76:e1:b0:59:63:76:08: 32:e4:72:39:bd:c2:3d:6f:eb:de:a7:8e:75:19:71: 24:73:99:21:fe:d0:46:26:11:19:e9:b4:6e:d9:fa: 1b:70:e4:86:6b:54:35:7d:58:cc:b8:35:9b:55:a0: 58:1b:2c:d4:36:ff:f0:aa:5d:b6:06:2a:16:07:17: 84:ae:b6:e5:19:1d:e0:d1:91:d7:8e:ba:ff:05:30: c7:99:dc:f8:e5:35:ca:1d:35:8e:41:52:70:4e:b4: 58:5c:7e:b4:86:c5:4f:d5:16:75:9c:71:79:47:bb: 25:54:c1:e3:d1:ad:b1:8b:b9:59:bd:4a:51:c0:86: 83:87:c3:db:0e:9a:52:cb:02:85:1e:75:28:31:a6: 0b:a7:49:4d:b5:f8:4c:21:75:b6:3a:13:31:52:3a: a3:ca:40:0c:26:48:e7:12:eb:56:15:a4:19:97:5a: a3:9e:0e:5a:2c:a3:f0:53:0f:56:1e:05:67:89:ff: a8:03:dc:aa:20:78:ba:3e:ba:0a:80:6b:48:fc:3d: c9:d1:53:ec:32:f2:51:bf:a8:d3:50:35:af:04:ff: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D1:3C:88:9A:F6:34:76:5C:2E:B5:B8:AD:90:36:82:33:4A:B7:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d6:15:28:57:e7:be:91:08:1a:68:f5:85:9a:ba:fc:d0:86: 3c:ef:32:b8:dc:b2:a4:7b:47:ce:9e:91:be:af:06:97:90:77: 8e:7c:e7:cd:2b:85:39:69:50:62:8c:1e:8d:b8:12:5d:d9:4a: 5a:6b:85:b2:de:1e:6c:33:3b:e3:b1:5a:ef:0f:44:b8:ab:7e: f0:64:01:6e:37:de:3e:e1:17:fe:73:9d:1a:2e:b1:e9:f8:fe: ea:9d:fb:0d:6f:37:79:ac:59:bf:76:cc:64:f7:64:1e:a1:8e: 00:ec:f8:13:d6:b4:65:9d:8a:4d:13:55:d6:60:dd:96:e5:34: 4a:4d:3e:e1:c2:26:d3:ef:8b:de:19:64:04:56:0e:76:20:65: 00:56:55:83:80:85:56:4e:0e:e8:bf:b6:30:c0:b5:90:c5:ce: bc:f8:44:fb:d3:82:67:70:bb:97:3c:9e:31:f5:fe:bf:61:90: 3d:24:db:45:cf:78:e2:f4:a4:3c:c7:8a:96:d1:45:18:2e:bf: e2:6b:5d:91:01:3e:0a:03:d9:74:58:54:de:1b:c1:7a:d1:6b: 73:78:28:a6:24:2c:a9:8b:02:c2:2c:dc:09:ba:2a:e9:3a:3a: 4b:66:95:27:38:33:f8:7c:d4:1e:2b:01:0d:33:48:83:74:5c: d3:ea:82:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhM/tq6KTJZZjnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTc2NDZlZmItOTE1Zi00OGFiLWJiMWItOWNhMzE4NTVmM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nchM6i6bVGhKwRFr7XJIMD8SC9lI4IeI3mF KoO0UF/27u6kqXbhsFljdggy5HI5vcI9b+vep451GXEkc5kh/tBGJhEZ6bRu2fob cOSGa1Q1fVjMuDWbVaBYGyzUNv/wql22BioWBxeErrblGR3g0ZHXjrr/BTDHmdz4 5TXKHTWOQVJwTrRYXH60hsVP1RZ1nHF5R7slVMHj0a2xi7lZvUpRwIaDh8PbDppS ywKFHnUoMaYLp0lNtfhMIXW2OhMxUjqjykAMJkjnEutWFaQZl1qjng5aLKPwUw9W HgVnif+oA9yqIHi6ProKgGtI/D3J0VPsMvJRv6jTUDWvBP8HHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXRPIia9jR2XC61uK2QNoIzSrd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODZkNmM0MzEtZjRjZi0z OGNlLWJmM2ItYTEzMzE1Y2E1YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvWFShX576RCBpo9YWauvzQhjzvMrjcsqR7R86ekb6vBpeQd458580r hTlpUGKMHo24El3ZSlprhbLeHmwzO+OxWu8PRLirfvBkAW433j7hF/5znRousen4 /uqd+w1vN3msWb92zGT3ZB6hjgDs+BPWtGWdik0TVdZg3ZblNEpNPuHCJtPvi94Z ZARWDnYgZQBWVYOAhVZODui/tjDAtZDFzrz4RPvTgmdwu5c8njH1/r9hkD0k20XP eOL0pDzHipbRRRguv+JrXZEBPgoD2XRYVN4bwXrRa3N4KKYkLKmLAsIs3Am6Kuk6 OktmlSc4M/h81B4rAQ0zSIN0XNPqglw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:54:27 2025 by rpki-client