$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3a2d50-7dd4-3cf7-b587-99b9f23eae8d.roa File: 8c3a2d50-7dd4-3cf7-b587-99b9f23eae8d.roa (raw, json) Hash identifier: aEsAmnhEqEDXxchwr19khKF6dV9dQwKBmGIydRSrXbg= Subject key identifier: 8D:35:1A:60:26:AC:03:02:C9:7B:82:24:79:E9:AC:A2:E5:F8:6A:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA422CAB5F2E962A051CA4 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3a2d50-7dd4-3cf7-b587-99b9f23eae8d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:42:2c:ab:5f:2e:96:2a:05:1c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7cd7214a-f1f5-4bd3-afa7-4ac4669e9ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:1c:04:22:18:33:d2:ea:91:36:f5:e7:4f: 10:f7:7e:a2:09:63:17:d1:68:4d:1a:40:a2:02:a0: 8d:e4:54:b6:e6:e8:b0:d0:7e:07:9c:9f:5d:6d:4a: 5f:d9:56:6e:8c:02:70:da:d1:82:4d:d5:84:90:da: ce:20:f0:aa:ee:b8:79:90:9d:fd:1d:ed:b4:58:40: 49:9e:ac:b1:be:17:f9:70:e0:5f:58:11:cf:bc:dd: ed:f0:c9:9c:18:aa:26:e5:95:84:99:0b:56:bf:ae: 2b:cb:49:a0:fd:6d:8e:e5:53:2d:82:e8:5a:d7:7c: 5b:11:9a:bc:d6:c5:4b:9b:6f:31:e9:2d:55:bf:91: e7:db:17:53:76:83:14:33:2a:91:fe:52:1e:f8:9b: f3:14:0e:5f:3c:f2:ab:f2:af:b6:39:71:5b:0f:a5: f2:3a:74:97:89:a5:4e:5d:cc:0d:c7:12:d2:8d:6e: 7a:59:05:ee:32:18:a6:49:2d:c3:c8:0f:8a:61:aa: 59:f7:21:e5:6f:bb:db:04:62:23:87:bd:f4:4b:bb: 89:05:ea:21:09:98:56:6d:50:a3:48:74:0d:32:b7: 0a:da:b1:cc:3d:11:11:1c:ad:c8:95:17:a0:d7:80: 90:87:00:f7:60:f3:13:45:01:2d:fd:2d:2d:51:09: 5b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:35:1A:60:26:AC:03:02:C9:7B:82:24:79:E9:AC:A2:E5:F8:6A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3a2d50-7dd4-3cf7-b587-99b9f23eae8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:50:ee:08:d8:70:f2:64:51:a5:b9:da:0c:2f:b1:68:c2:95: 0f:73:af:91:71:72:1e:a5:b8:dc:5f:94:4d:cb:8e:e6:23:3d: 6b:75:1b:9c:1e:66:b6:55:d3:33:2f:54:31:d8:93:4a:49:a9: e1:3c:95:6f:70:5e:c5:6f:df:53:d3:d1:2c:33:f8:59:14:54: 80:3a:41:cc:ac:7d:0b:0f:34:c5:4e:90:fa:17:74:51:d3:70: a0:82:a1:41:1c:2d:7a:45:72:0f:cc:a4:ba:c2:5a:30:0f:65: 59:5e:7a:3f:b0:26:69:3e:98:c9:a2:ea:46:df:b9:36:cb:a1: c8:0d:ac:b7:de:fd:77:f2:0e:cb:ea:12:aa:de:59:6d:22:5e: 35:70:ff:9c:e3:68:db:d0:87:02:f9:1b:54:be:92:27:fa:fa: c4:44:d7:3b:71:0c:1d:27:63:c2:b6:6c:5f:a9:10:a7:2d:b2: ab:a0:b5:8a:21:43:5a:46:6d:a2:25:61:96:84:9c:70:42:5a: c1:09:be:50:46:bb:ea:08:fa:f1:27:80:d2:69:1c:01:0a:cb: 88:ff:3d:4a:4a:7b:77:75:6d:ec:33:bc:24:8f:63:3d:66:f7: f5:5d:1e:f8:c9:05:73:e7:40:92:d2:95:6b:9f:39:5b:27:97: ba:e4:38:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukIsq18ulioFHKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2NkNzIxNGEtZjFmNS00YmQzLWFmYTctNGFjNDY2OWU5ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjscBCIYM9LqkTb1508Q936iCWMX0WhNGkCi AqCN5FS25uiw0H4HnJ9dbUpf2VZujAJw2tGCTdWEkNrOIPCq7rh5kJ39He20WEBJ nqyxvhf5cOBfWBHPvN3t8MmcGKom5ZWEmQtWv64ry0mg/W2O5VMtguha13xbEZq8 1sVLm28x6S1Vv5Hn2xdTdoMUMyqR/lIe+JvzFA5fPPKr8q+2OXFbD6XyOnSXiaVO XcwNxxLSjW56WQXuMhimSS3DyA+KYapZ9yHlb7vbBGIjh730S7uJBeohCZhWbVCj SHQNMrcK2rHMPRERHK3IlReg14CQhwD3YPMTRQEt/S0tUQlbgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI01GmAmrAMCyXuCJHnprKLl+GoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGMzYTJkNTAtN2RkNC0z Y2Y3LWI1ODctOTliOWYyM2VhZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNQ7gjYcPJkUaW52gwvsWjClQ9zr5Fxch6luNxflE3LjuYjPWt1G5we ZrZV0zMvVDHYk0pJqeE8lW9wXsVv31PT0Swz+FkUVIA6QcysfQsPNMVOkPoXdFHT cKCCoUEcLXpFcg/MpLrCWjAPZVleej+wJmk+mMmi6kbfuTbLocgNrLfe/XfyDsvq EqreWW0iXjVw/5zjaNvQhwL5G1S+kif6+sRE1ztxDB0nY8K2bF+pEKctsqugtYoh Q1pGbaIlYZaEnHBCWsEJvlBGu+oI+vEngNJpHAEKy4j/PUpKe3d1bewzvCSPYz1m 9/VdHvjJBXPnQJLSlWufOVsnl7rkOKY= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:08 2025 by rpki-client