$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa File: aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa (raw, json) Hash identifier: jKMcCk8QL5fQhYgS8MlYV6NChQwEdX0K+qqP2spsuBY= Subject key identifier: 88:63:2D:7D:A1:FA:B7:5F:68:CD:EF:02:8D:5A:52:09:B1:FD:AA:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858498A345D2867522DD42762E9C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 30036 IP address blocks: 173.27.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5d:28:67:52:2d:d4:27:62:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=2fb398a8-2e1d-4a80-bd10-a800d1bde524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:44:b8:c5:94:3b:76:94:10:39:0c:ee:28:73: 1d:78:b4:d3:ac:57:fb:45:d5:84:6f:7b:94:b8:62: 45:7d:72:75:40:93:26:08:0f:1a:fb:d4:c1:5e:24: 30:5e:99:c2:31:db:ac:6f:52:1a:d7:7f:23:c1:4c: e2:fc:e7:9e:81:a0:ac:af:f5:56:83:46:7c:b3:be: 4d:02:6d:10:8c:ac:e3:a1:d7:d5:63:31:9b:32:c7: 05:f2:bf:cb:7f:7d:26:14:70:57:4c:bc:98:47:79: f8:7c:98:ab:f1:ee:78:78:aa:7f:64:33:95:cb:04: 5a:f6:31:ae:98:bb:0e:2a:fd:e7:3b:2c:97:cf:bb: c4:8d:c8:f4:10:6d:12:92:62:f6:b0:91:1f:d8:1f: 1a:b3:51:c7:c3:00:94:70:3a:0e:3e:51:17:8b:51: f8:82:cf:75:67:72:a9:82:b7:36:70:96:a3:24:ef: 50:1b:04:54:b5:fb:f9:c6:c0:2e:be:47:dc:ed:39: 9f:ce:f0:2a:d5:95:81:22:94:9d:6b:0e:70:1d:0a: 91:00:80:db:c1:a2:85:6b:e8:19:d7:59:2b:da:03: 44:c6:51:df:b2:38:f6:b3:23:ac:ab:dd:44:73:39: bb:e3:9f:db:2e:68:69:62:11:7b:1f:65:e8:8d:c4: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:63:2D:7D:A1:FA:B7:5F:68:CD:EF:02:8D:5A:52:09:B1:FD:AA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:06:b9:b2:69:cf:90:d7:34:6f:37:71:d8:bf:9a:68:bc:5c: 15:67:75:ee:e4:f8:e5:ee:34:fe:87:a0:f6:db:3e:d5:fd:4a: 9d:fa:c6:2b:bd:66:14:5f:cd:34:10:72:3b:da:99:79:b2:5f: ad:ea:6c:6c:4e:cd:b8:e8:6d:f5:e3:61:65:9b:60:ff:4e:14: c8:61:9d:1f:cb:0c:13:d6:35:d9:14:70:44:96:d0:99:34:ab: 2d:e1:3b:42:66:91:be:9d:20:53:02:90:6d:b2:0f:35:bd:52: e1:d6:52:20:aa:0a:22:ee:78:d1:4c:2d:77:61:b2:c6:13:59: bd:0c:4f:28:4d:3e:8f:8a:f2:fa:fc:43:0f:80:53:ad:c4:e9: ca:99:aa:40:ad:04:d5:50:a2:79:9c:67:53:f7:f6:d5:0e:54: 9b:36:b6:59:28:a4:8a:06:f9:d4:4c:bb:3b:d3:b8:ee:85:97: 5c:28:ba:a1:3e:f8:77:f1:48:c3:d9:3c:20:b2:28:5e:0e:e2: e8:c5:ab:72:55:51:e8:4b:98:10:0b:24:71:36:43:98:8a:71: b0:b2:f8:71:8d:41:d4:1c:e4:43:c7:7e:19:d1:88:0c:48:82: b7:63:b0:55:48:49:43:90:b5:8b:61:22:19:ef:a3:c2:cc:64: 97:4e:b9:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF0oZ1It1Cdi6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk MmZiMzk4YTgtMmUxZC00YTgwLWJkMTAtYTgwMGQxYmRlNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0S4xZQ7dpQQOQzuKHMdeLTTrFf7RdWEb3uU uGJFfXJ1QJMmCA8a+9TBXiQwXpnCMdusb1Ia138jwUzi/OeegaCsr/VWg0Z8s75N Am0QjKzjodfVYzGbMscF8r/Lf30mFHBXTLyYR3n4fJir8e54eKp/ZDOVywRa9jGu mLsOKv3nOyyXz7vEjcj0EG0SkmL2sJEf2B8as1HHwwCUcDoOPlEXi1H4gs91Z3Kp grc2cJajJO9QGwRUtfv5xsAuvkfc7TmfzvAq1ZWBIpSdaw5wHQqRAIDbwaKFa+gZ 11kr2gNExlHfsjj2syOsq91Eczm745/bLmhpYhF7H2XojcTHywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhjLX2h+rdfaM3vAo1aUgmx/aosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWFhODliZjctY2MzMC0z ZTc1LTg0NjAtNWVlMDQ4NTg0NGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEGubJpz5DXNG83cdi/mmi8XBVnde7k+OXuNP6HoPbbPtX9Sp36xiu9 ZhRfzTQQcjvamXmyX63qbGxOzbjobfXjYWWbYP9OFMhhnR/LDBPWNdkUcESW0Jk0 qy3hO0Jmkb6dIFMCkG2yDzW9UuHWUiCqCiLueNFMLXdhssYTWb0MTyhNPo+K8vr8 Qw+AU63E6cqZqkCtBNVQonmcZ1P39tUOVJs2tlkopIoG+dRMuzvTuO6Fl1wouqE+ +HfxSMPZPCCyKF4O4ujFq3JVUehLmBALJHE2Q5iKcbCy+HGNQdQc5EPHfhnRiAxI grdjsFVISUOQtYthIhnvo8LMZJdOuQM= -----END CERTIFICATE-----Generated at Sat Apr 26 21:00:24 2025 by rpki-client