$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932a3ff1-8cee-328e-9f80-c417a0463043.roa File: 932a3ff1-8cee-328e-9f80-c417a0463043.roa (raw, json) Hash identifier: pEUHzP5PcG7XgQDAuO+mBrKXMRm3KPt1VBLmB20t1PE= Subject key identifier: 37:B1:E2:A7:B9:14:A2:A4:EA:3B:49:94:45:1C:C2:62:92:B1:B8:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF484C7CBB426F3547B370 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932a3ff1-8cee-328e-9f80-c417a0463043.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.26.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:48:4c:7c:bb:42:6f:35:47:b3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=406a6035-f42b-4586-8000-f79b31615db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:e4:1c:13:a2:78:a7:ab:a3:02:42:38:39: e6:f4:92:d5:9e:20:e2:bd:ae:c5:ec:c8:41:33:ac: ac:a6:f5:c1:5e:e4:8c:59:ea:d4:c4:b3:6b:31:12: 6c:43:06:dc:40:99:9f:d9:c0:72:a9:76:88:ee:23: 2a:02:bb:eb:0d:60:de:fa:e7:1f:84:61:1b:44:97: bd:14:fe:06:39:e1:0f:9d:96:8f:e3:8c:b5:48:9a: 08:c7:43:07:ab:a5:41:bc:aa:fd:53:f1:2d:19:1a: 17:39:6a:b8:24:75:46:bc:6a:33:7e:0d:fa:91:c2: ed:5d:64:dd:fb:08:b4:91:ec:16:07:ba:2d:4d:a2: 5c:17:88:d2:75:dc:af:1b:c1:32:28:af:b2:e7:e1: da:e4:03:11:b5:0d:71:3e:c5:59:42:bb:b5:53:5d: 76:2a:83:9e:56:ae:60:c5:fe:0c:23:2d:50:49:98: 13:56:e0:d4:a0:57:0a:81:79:a9:1c:48:6d:33:ca: ff:56:4b:68:f1:30:de:9b:d6:ed:3c:3c:7c:05:f9: 3a:32:73:04:41:f0:fb:db:7c:e9:e5:fc:36:3f:38: ae:7f:77:6b:11:6a:c0:5c:c8:3a:bc:80:6a:64:28: 86:9d:c1:30:77:42:d9:af:b7:26:33:e4:8d:52:1a: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B1:E2:A7:B9:14:A2:A4:EA:3B:49:94:45:1C:C2:62:92:B1:B8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932a3ff1-8cee-328e-9f80-c417a0463043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ee:af:9c:c9:cf:44:5d:46:cb:47:37:f8:74:d3:d4:df:a7: 66:e1:d1:7f:23:0b:80:10:38:50:51:c2:94:21:28:23:a3:36: c2:36:66:2d:45:69:b0:dc:43:02:5d:a6:95:55:b2:01:cb:ae: d9:ac:44:3d:b0:45:fc:07:d1:f7:84:72:41:b2:45:30:1d:19: c3:0c:86:4b:78:21:1b:2c:bd:9a:fb:47:09:27:bb:c9:17:1b: 6d:ec:6e:50:4e:fa:94:3c:fb:44:63:24:ee:72:2b:31:2f:71: 38:51:cb:e7:2a:e6:f0:7c:f7:64:26:0d:5d:be:27:11:80:f1: c9:d8:49:52:2f:ad:db:d7:20:1b:a4:09:13:91:c5:20:74:4f: 0e:2c:93:a6:bf:a9:7c:eb:3f:b6:ef:b0:80:66:07:21:25:d8: 01:3e:d3:47:a2:e7:ab:e0:4c:1f:2a:c6:11:cd:82:7c:fd:f1: a3:a6:70:0d:a2:92:2b:bf:15:3b:c8:a3:75:3e:a4:8b:6a:8f: 3a:bd:7e:87:13:ab:82:d1:c2:c6:a3:87:cc:f9:b8:e9:6f:1d: 5c:26:83:9d:9d:ac:20:ef:53:a4:11:2f:71:64:ce:5b:72:18: 8e:66:14:db:41:28:24:0a:fa:8b:a4:f4:8f:2b:09:0a:0d:df: 34:db:2e:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70hMfLtCbzVHs3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDA2YTYwMzUtZjQyYi00NTg2LTgwMDAtZjc5YjMxNjE1ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp7kHBOieKerowJCODnm9JLVniDiva7F7MhB M6yspvXBXuSMWerUxLNrMRJsQwbcQJmf2cByqXaI7iMqArvrDWDe+ucfhGEbRJe9 FP4GOeEPnZaP44y1SJoIx0MHq6VBvKr9U/EtGRoXOWq4JHVGvGozfg36kcLtXWTd +wi0kewWB7otTaJcF4jSddyvG8EyKK+y5+Ha5AMRtQ1xPsVZQru1U112KoOeVq5g xf4MIy1QSZgTVuDUoFcKgXmpHEhtM8r/Vkto8TDem9btPDx8Bfk6MnMEQfD723zp 5fw2Pziuf3drEWrAXMg6vIBqZCiGncEwd0LZr7cmM+SNUhplywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDex4qe5FKKk6jtJlEUcwmKSsbjwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTMyYTNmZjEtOGNlZS0z MjhlLTlmODAtYzQxN2EwNDYzMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3ur5zJz0RdRstHN/h009Tfp2bh0X8jC4AQOFBRwpQhKCOjNsI2Zi1F abDcQwJdppVVsgHLrtmsRD2wRfwH0feEckGyRTAdGcMMhkt4IRssvZr7Rwknu8kX G23sblBO+pQ8+0RjJO5yKzEvcThRy+cq5vB892QmDV2+JxGA8cnYSVIvrdvXIBuk CRORxSB0Tw4sk6a/qXzrP7bvsIBmByEl2AE+00ei56vgTB8qxhHNgnz98aOmcA2i kiu/FTvIo3U+pItqjzq9focTq4LRwsajh8z5uOlvHVwmg52drCDvU6QRL3Fkzlty GI5mFNtBKCQK+ouk9I8rCQoN3zTbLnU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:02 2025 by rpki-client