$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d162d2e-f6cf-3993-bd30-8f6aa1afb477.roa File: 8d162d2e-f6cf-3993-bd30-8f6aa1afb477.roa (raw, json) Hash identifier: PWgkkA4ZM4hS9m4mUdTRV4BDJSUHI4lrx00C8Hrn9vM= Subject key identifier: 40:6B:78:A1:24:E8:73:F3:AE:77:77:5B:68:BD:48:6C:55:59:5D:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3E9AB0C900C721D21390 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d162d2e-f6cf-3993-bd30-8f6aa1afb477.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 150.195.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3e:9a:b0:c9:00:c7:21:d2:13:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6000ea6b-b114-4b6b-8f5b-9d9c968c102b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:b1:fe:07:5d:54:f9:d2:1c:f2:d3:9a:33: e6:11:3a:54:f2:9c:20:6a:c5:79:ce:aa:fa:82:16: dd:9c:ce:15:1a:d9:e6:a9:76:8a:c3:13:fd:09:a0: 97:94:47:86:84:b6:cd:5d:ae:64:9c:da:57:ac:a8: 9c:4b:e0:ac:36:cb:c5:0d:cb:98:d8:cd:e3:a6:27: 41:2a:b2:72:13:21:67:bd:57:54:15:e3:4a:fa:4b: 27:48:c7:17:0c:c9:18:cd:3d:b4:28:86:0e:cb:fb: 7e:39:3b:31:de:c2:2f:d8:16:2b:48:68:ba:9c:f7: 31:00:5b:2e:65:a1:92:52:77:28:69:84:52:ce:7a: 77:15:3f:0a:01:b4:80:18:4d:36:89:c1:5d:be:77: a1:4a:18:bb:0a:f7:ef:0b:39:bd:08:51:e5:ee:ab: 01:b8:b0:10:5a:9f:c9:5f:37:a5:59:97:61:ea:cb: f7:21:db:84:ea:39:b6:b3:d3:c7:28:82:90:2d:25: cf:19:9b:d8:8c:a9:3b:4f:df:1b:23:3f:55:47:ee: 14:35:3a:35:e8:a4:57:d1:83:a0:02:5c:39:e2:f7: 53:ce:06:3b:f4:54:74:3b:5a:37:42:92:0a:33:be: c9:30:d9:91:aa:42:87:e1:68:f6:cb:ec:31:c8:9b: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6B:78:A1:24:E8:73:F3:AE:77:77:5B:68:BD:48:6C:55:59:5D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d162d2e-f6cf-3993-bd30-8f6aa1afb477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:31:7a:8c:8a:2a:7f:da:99:12:a4:cf:6c:22:b8:92:fe:df: 2f:67:f0:96:ae:df:47:bc:c0:8f:4f:bf:d7:61:b7:82:57:44: 82:fa:1f:4a:8c:a4:88:28:cc:e6:36:99:1c:d3:ea:7c:e0:81: 95:81:11:91:48:d1:af:db:28:e6:0f:a7:9f:2b:ba:f7:bc:58: 30:51:34:3d:2d:fc:ec:58:fc:bc:7a:d1:36:af:af:82:f9:a4: 6c:8c:0c:67:52:54:8b:fb:af:21:8c:b6:59:cd:67:d0:20:10: 70:6a:f2:7e:3f:5d:30:e3:67:0b:70:7e:6b:e2:ad:9a:8b:a3: 56:15:78:cd:13:7e:55:8f:f7:5d:58:b2:e0:ef:8c:bf:7a:c7: 5c:92:c6:d4:ec:59:89:19:26:77:bf:85:b0:03:21:6e:95:a8: f3:b7:84:3a:41:59:93:21:f0:36:49:5b:f6:34:f6:fc:2a:2f: 39:62:b2:c7:f1:94:5e:52:4e:68:87:e1:ce:d6:c7:03:68:c1: e2:dc:e7:79:c9:e1:cf:ed:9b:a8:1e:f0:9c:1c:3b:21:1a:d1: 19:58:8a:79:95:59:12:63:3c:dd:3c:25:ef:5d:86:ea:e0:dd: 45:84:92:aa:3c:e1:24:b2:80:57:0a:5e:c4:1a:e3:01:1f:d6: fe:e0:6a:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj6asMkAxyHSE5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjAwMGVhNmItYjExNC00YjZiLThmNWItOWQ5Yzk2OGMxMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhWx/gddVPnSHPLTmjPmETpU8pwgasV5zqr6 ghbdnM4VGtnmqXaKwxP9CaCXlEeGhLbNXa5knNpXrKicS+CsNsvFDcuY2M3jpidB KrJyEyFnvVdUFeNK+ksnSMcXDMkYzT20KIYOy/t+OTsx3sIv2BYrSGi6nPcxAFsu ZaGSUncoaYRSznp3FT8KAbSAGE02icFdvnehShi7CvfvCzm9CFHl7qsBuLAQWp/J XzelWZdh6sv3IduE6jm2s9PHKIKQLSXPGZvYjKk7T98bIz9VR+4UNTo16KRX0YOg Alw54vdTzgY79FR0O1o3QpIKM77JMNmRqkKH4Wj2y+wxyJsFkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBreKEk6HPzrnd3W2i9SGxVWV2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGQxNjJkMmUtZjZjZi0z OTkzLWJkMzAtOGY2YWExYWZiNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIxeoyKKn/amRKkz2wiuJL+3y9n8Jau30e8wI9Pv9dht4JXRIL6H0qM pIgozOY2mRzT6nzggZWBEZFI0a/bKOYPp58ruve8WDBRND0t/OxY/Lx60Tavr4L5 pGyMDGdSVIv7ryGMtlnNZ9AgEHBq8n4/XTDjZwtwfmvirZqLo1YVeM0TflWP911Y suDvjL96x1ySxtTsWYkZJne/hbADIW6VqPO3hDpBWZMh8DZJW/Y09vwqLzlissfx lF5STmiH4c7WxwNoweLc53nJ4c/tm6ge8JwcOyEa0RlYinmVWRJjPN08Je9dhurg 3UWEkqo84SSygFcKXsQa4wEf1v7garM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:39 2025 by rpki-client