$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa1ad4bd-370a-34c6-b7b9-a70cf3cc27da.roa File: aa1ad4bd-370a-34c6-b7b9-a70cf3cc27da.roa (raw, json) Hash identifier: KfigKC5oAic1/BTcPDo8F8qZ31DAVF9BCh8VbeGZfgU= Subject key identifier: 3A:F6:FE:DC:6C:54:FC:9F:D4:75:D4:04:65:03:21:72:17:9B:DE:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F32EB02D5971A555CE580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa1ad4bd-370a-34c6-b7b9-a70cf3cc27da.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.27.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:32:eb:02:d5:97:1a:55:5c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=98c55f11-87db-4e25-a9d7-b412265ec6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:ff:22:e2:7f:f9:09:87:05:06:43:8c:d3: c4:2b:4d:46:a9:b3:6b:aa:77:17:9a:fb:e7:e8:f4: 27:eb:6c:12:49:5c:0e:8d:9f:a9:d5:10:58:87:81: a6:97:6d:ec:0e:99:a8:1c:e9:e4:cc:79:2c:97:31: 6b:a4:2e:92:3c:b5:d6:3b:82:7b:50:3b:b6:83:7d: 7d:86:0f:92:94:b1:01:6c:f0:08:42:78:f3:a7:42: 04:69:26:41:2a:40:2a:05:24:73:05:97:1e:bd:98: 93:6d:e5:19:a1:61:af:08:60:6f:2d:2c:63:50:4a: e6:65:ce:fe:31:20:98:94:e5:f5:2e:ac:93:40:36: 87:b6:10:ef:68:b4:a4:b5:78:c7:d6:7a:65:67:9b: 89:6b:57:61:14:c0:62:83:33:2f:15:cb:29:95:ad: a3:0d:8a:33:cc:a9:ee:7c:44:9c:71:f5:10:bd:d8: 62:66:ac:7c:46:fa:91:6d:9c:25:e4:a6:32:90:85: 78:38:aa:55:e3:b1:4c:51:91:20:b7:e3:0d:3e:fd: 93:ca:4b:02:95:ea:da:76:22:1b:21:44:ab:b8:c4: dd:ea:de:9e:0a:2a:5e:b1:27:3a:89:6d:83:58:4f: 85:96:00:cc:25:a3:96:95:15:b9:20:c6:ac:f7:7d: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:FE:DC:6C:54:FC:9F:D4:75:D4:04:65:03:21:72:17:9B:DE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa1ad4bd-370a-34c6-b7b9-a70cf3cc27da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2f:69:f8:84:1c:05:b3:a5:f0:30:bc:21:91:30:f7:98:a3: 42:39:f6:53:68:3b:23:4b:5f:fc:56:bb:29:92:70:57:68:54: 3d:d8:63:4f:d4:61:e1:b9:6c:17:20:bc:b0:41:4c:77:fc:b4: ec:0b:aa:6b:d8:4d:12:77:cd:d7:fa:3b:95:75:d8:22:45:c9: 1c:8f:3d:bc:8e:18:33:cf:ce:aa:79:1d:15:c6:42:3b:67:91: 75:89:a3:e4:0a:4e:3f:8e:6e:40:ae:fa:90:6e:00:06:dd:86: 8b:4a:5f:7a:e2:a5:79:c1:3c:c2:2f:af:6a:d1:df:f9:eb:24: 63:c5:74:e2:ca:55:33:b6:63:69:10:64:8b:3b:a9:52:75:eb: 10:bb:03:39:bc:58:09:0a:3f:87:61:2a:e6:7f:34:b1:9f:05: ad:b6:e2:77:51:99:70:23:2c:fe:d0:8c:3f:2f:f9:5c:00:f5: d7:1c:64:39:a2:83:fa:44:f5:16:ab:2c:ed:2e:85:0e:28:39: 46:d6:81:b0:e0:ea:45:19:74:1a:a9:63:47:56:35:50:0e:f3: 2b:29:e3:2b:39:0d:52:0b:50:fe:76:6f:de:35:ec:fe:43:1a: a1:00:47:e1:b5:5b:5b:65:05:2b:21:ff:89:80:a4:b5:65:36: 1f:e9:67:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzLrAtWXGlVc5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk OThjNTVmMTEtODdkYi00ZTI1LWE5ZDctYjQxMjI2NWVjNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmj/IuJ/+QmHBQZDjNPEK01GqbNrqncXmvvn 6PQn62wSSVwOjZ+p1RBYh4Gml23sDpmoHOnkzHkslzFrpC6SPLXWO4J7UDu2g319 hg+SlLEBbPAIQnjzp0IEaSZBKkAqBSRzBZcevZiTbeUZoWGvCGBvLSxjUErmZc7+ MSCYlOX1LqyTQDaHthDvaLSktXjH1nplZ5uJa1dhFMBigzMvFcspla2jDYozzKnu fESccfUQvdhiZqx8RvqRbZwl5KYykIV4OKpV47FMUZEgt+MNPv2TyksCleradiIb IUSruMTd6t6eCipesSc6iW2DWE+FlgDMJaOWlRW5IMas931yRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr2/txsVPyf1HXUBGUDIXIXm942MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWExYWQ0YmQtMzcwYS0z NGM2LWI3YjktYTcwY2YzY2MyN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8vafiEHAWzpfAwvCGRMPeYo0I59lNoOyNLX/xWuymScFdoVD3YY0/U YeG5bBcgvLBBTHf8tOwLqmvYTRJ3zdf6O5V12CJFyRyPPbyOGDPPzqp5HRXGQjtn kXWJo+QKTj+ObkCu+pBuAAbdhotKX3ripXnBPMIvr2rR3/nrJGPFdOLKVTO2Y2kQ ZIs7qVJ16xC7Azm8WAkKP4dhKuZ/NLGfBa224ndRmXAjLP7QjD8v+VwA9dccZDmi g/pE9RarLO0uhQ4oOUbWgbDg6kUZdBqpY0dWNVAO8ysp4ys5DVILUP52b9417P5D GqEAR+G1W1tlBSsh/4mApLVlNh/pZzw= -----END CERTIFICATE-----Generated at Sat Apr 26 23:42:54 2025 by rpki-client