$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98999eb2-e00a-309e-807b-61367529f34b.roa File: 98999eb2-e00a-309e-807b-61367529f34b.roa (raw, json) Hash identifier: C4ZzVbwCUvGFUQEq3mHInHfgNgGY0oL4wC68aMaSXB0= Subject key identifier: 2C:11:7A:01:77:58:59:C4:2D:9B:B6:A9:6A:CC:94:EA:E9:3D:3F:E9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BDA3A0130EA1991CBF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98999eb2-e00a-309e-807b-61367529f34b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.30.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bd:a3:a0:13:0e:a1:99:1c:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3d2a0ed7-28a9-45eb-bca6-7681d0cb8e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:0f:f0:64:68:a8:9c:b5:c0:c6:d4:8c:8b: 02:11:a0:a5:e6:c0:ab:dd:74:79:fa:17:a2:16:4b: cb:c1:16:27:e8:64:73:8d:e9:d9:5d:a6:d4:13:d0: 0a:c3:11:9e:6d:8f:9e:63:f8:b0:be:3e:78:56:cc: ae:4d:5c:76:2a:70:59:b1:4a:b2:2c:33:aa:ce:5a: a7:79:8d:06:5d:06:b3:ce:f6:56:32:35:30:fa:63: cc:e2:e7:26:8c:e8:4d:f6:4f:1e:60:ac:0a:90:63: 08:af:7a:5a:b6:da:91:7c:af:4d:91:ca:1e:e2:03: cf:77:18:75:56:10:ef:ba:5f:f9:77:90:3d:c4:c2: 57:5e:5c:d5:a5:9f:b0:35:00:41:21:fc:4a:74:ca: ce:93:d1:ed:ad:bc:09:d7:37:ff:ed:dd:54:0a:7b: 8c:4f:dd:4b:23:18:4f:07:bd:0f:97:d8:32:40:42: 9c:9e:11:15:46:43:ea:e7:1c:0a:67:94:59:0e:ad: 48:b9:4b:c0:2c:b2:a9:54:d1:8a:53:2f:b6:58:f7: 47:8b:c8:19:eb:9d:79:13:3f:21:f9:54:b7:95:45: f5:41:62:34:b2:1c:2d:ca:2e:4d:4b:ef:cd:ca:09: 2a:2d:f7:55:23:73:5b:33:94:ca:08:7f:9b:7c:c1: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:11:7A:01:77:58:59:C4:2D:9B:B6:A9:6A:CC:94:EA:E9:3D:3F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98999eb2-e00a-309e-807b-61367529f34b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5b:e5:99:43:81:a1:d6:19:87:ba:a7:90:1c:e5:ed:01:e7: 30:12:c0:29:e3:9e:11:02:e5:8c:38:34:3b:e3:91:30:bc:e1: 25:75:2a:7b:f5:12:35:36:a8:e7:76:78:ee:01:e3:1a:77:69: 0a:cf:cb:9c:c2:c2:38:bb:18:76:88:41:03:9d:79:d3:c8:e8: 58:ba:f1:20:bd:25:e1:74:49:71:be:e7:aa:f7:a8:f1:cc:13: 2f:43:e7:67:9d:0c:1c:87:7d:f0:a6:3d:5a:ad:0c:80:07:20: b0:01:23:4b:6f:72:55:c8:df:7e:0a:c1:df:fe:3e:05:d5:1f: 3d:b6:28:6e:58:02:10:21:c6:6d:1d:14:14:44:13:fa:a3:04: 83:9b:a2:eb:b5:75:ec:04:e2:c3:bf:6c:4c:65:ad:c4:c6:7d: bb:7f:20:9a:98:7c:d0:8e:d4:14:d7:d7:6c:c5:e5:b8:4d:47: 56:e3:aa:96:a7:b0:ed:ff:18:c3:68:f6:95:af:24:82:b6:5a: bf:fc:7f:e5:90:95:41:1d:b8:59:3e:fd:cf:ec:24:af:21:e1: 14:4b:89:27:ec:de:eb:a1:dd:73:64:b4:85:8e:f4:33:7b:0c: 8c:c2:55:f8:07:4a:1b:ce:7c:02:f9:ad:69:20:b2:b8:7e:2d: f3:4d:eb:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhL2joBMOoZkcv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2QyYTBlZDctMjhhOS00NWViLWJjYTYtNzY4MWQwY2I4ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvgP8GRoqJy1wMbUjIsCEaCl5sCr3XR5+hei FkvLwRYn6GRzjenZXabUE9AKwxGebY+eY/iwvj54VsyuTVx2KnBZsUqyLDOqzlqn eY0GXQazzvZWMjUw+mPM4ucmjOhN9k8eYKwKkGMIr3pattqRfK9Nkcoe4gPPdxh1 VhDvul/5d5A9xMJXXlzVpZ+wNQBBIfxKdMrOk9HtrbwJ1zf/7d1UCnuMT91LIxhP B70Pl9gyQEKcnhEVRkPq5xwKZ5RZDq1IuUvALLKpVNGKUy+2WPdHi8gZ6515Ez8h +VS3lUX1QWI0shwtyi5NS+/NygkqLfdVI3NbM5TKCH+bfMGVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwRegF3WFnELZu2qWrMlOrpPT/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTg5OTllYjItZTAwYS0z MDllLTgwN2ItNjEzNjc1MjlmMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxb5ZlDgaHWGYe6p5Ac5e0B5zASwCnjnhEC5Yw4NDvjkTC84SV1Knv1 EjU2qOd2eO4B4xp3aQrPy5zCwji7GHaIQQOdedPI6Fi68SC9JeF0SXG+56r3qPHM Ey9D52edDByHffCmPVqtDIAHILABI0tvclXI334Kwd/+PgXVHz22KG5YAhAhxm0d FBREE/qjBIObouu1dewE4sO/bExlrcTGfbt/IJqYfNCO1BTX12zF5bhNR1bjqpan sO3/GMNo9pWvJIK2Wr/8f+WQlUEduFk+/c/sJK8h4RRLiSfs3uuh3XNktIWO9DN7 DIzCVfgHShvOfAL5rWkgsrh+LfNN6zI= -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:03 2025 by rpki-client