$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa File: b2a8b3f6-bded-3677-b401-499c1139fa37.roa (raw, json) Hash identifier: IzkdZzjWjbQgDleX5UcK41fp9NQU7Wa5YMAZfkow0gs= Subject key identifier: 31:BC:09:CC:2C:4F:C4:AD:20:37:4B:22:A6:9E:F9:76:D8:03:CD:0F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA419FC1308803F7221900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 150.195.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:41:9f:c1:30:88:03:f7:22:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a1d96206-3da4-46fb-9684-55429f6e0425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e3:71:42:a5:90:d9:68:a5:d5:86:ca:cf:1e: a0:31:b1:f4:57:5d:ea:92:77:22:7d:87:1f:15:4e: a5:1b:5f:f1:6a:5f:94:ff:a4:d7:50:81:4a:92:79: de:c9:e6:c7:00:7b:bb:0f:6a:d9:16:09:a4:c8:7a: fe:1e:31:bc:6d:3a:49:50:2b:bd:c9:f1:09:65:24: ce:d6:30:2c:b1:a2:ec:7d:0a:68:c4:73:fc:4f:60: 31:4f:8a:7a:17:69:46:48:ed:c7:7c:a2:d8:54:60: 59:46:b2:bd:12:c7:69:4c:37:20:9a:4e:c7:70:5b: 1f:cb:51:7e:34:e4:77:aa:17:e6:a9:3b:58:9a:ef: 3d:8c:5a:96:5e:eb:3a:ce:cd:c6:8c:3a:b5:41:f5: 95:30:8e:32:80:19:fe:4f:08:77:fa:8d:2f:2f:57: 30:c7:37:ed:5b:c2:63:75:73:ed:d2:e9:7e:58:61: cc:a8:27:10:6f:5e:c9:22:10:a7:6a:16:9b:fe:90: 37:2b:15:9c:76:34:c3:62:6c:f4:d6:a1:e3:d1:ff: 84:6a:b1:68:18:67:19:f4:9a:1f:c4:98:11:fb:b2: 98:c9:14:c5:a2:ce:25:6f:25:63:00:4a:f9:7b:10: fd:56:9e:bc:5c:13:b6:db:5e:e4:99:f3:5d:1e:7c: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BC:09:CC:2C:4F:C4:AD:20:37:4B:22:A6:9E:F9:76:D8:03:CD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bb:c7:f4:da:ff:38:88:ec:04:68:0e:13:08:03:39:70:39: 7f:ff:84:d8:1f:9c:97:6c:e3:1a:74:55:ee:e6:ee:55:ee:91: 48:34:88:f1:f6:25:73:68:ad:19:6f:a2:55:d4:dd:d3:0e:c6: cb:65:c1:43:87:5f:2e:88:51:b4:a2:09:86:c5:e5:e2:ee:20: e6:72:55:e6:2b:4c:a0:5f:01:bd:d8:f2:17:31:b1:06:88:8c: 30:ac:04:62:01:70:4d:82:26:7b:56:3c:31:ee:a2:ea:e0:58: a1:f6:e6:c7:8f:f1:d8:e7:23:43:ad:16:06:1f:16:94:d7:aa: 5b:e1:e5:a3:ac:e1:02:89:a6:eb:6b:37:fe:af:f3:7b:b3:1e: d4:e1:bd:69:51:86:58:24:41:fb:c6:7a:eb:a5:c7:13:52:fc: d2:4c:49:48:e5:24:3e:f7:b8:88:50:c7:50:a3:a6:9b:39:30: 5b:b0:84:d1:37:b0:11:8e:d4:9a:01:75:c6:65:7b:c6:2b:36: b1:a7:46:1b:85:11:f5:61:fe:cd:f7:e5:49:12:4f:e3:1b:4b: f3:c7:67:8b:22:82:34:18:7b:80:fa:3a:f0:2b:c2:82:bb:72: f3:e0:88:41:5f:94:be:8b:16:0a:30:5d:e8:55:41:3f:48:f2: c0:16:86:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukGfwTCIA/ciGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTFkOTYyMDYtM2RhNC00NmZiLTk2ODQtNTU0MjlmNmUwNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+NxQqWQ2Wil1YbKzx6gMbH0V13qkncifYcf FU6lG1/xal+U/6TXUIFKknneyebHAHu7D2rZFgmkyHr+HjG8bTpJUCu9yfEJZSTO 1jAssaLsfQpoxHP8T2AxT4p6F2lGSO3HfKLYVGBZRrK9EsdpTDcgmk7HcFsfy1F+ NOR3qhfmqTtYmu89jFqWXus6zs3GjDq1QfWVMI4ygBn+Twh3+o0vL1cwxzftW8Jj dXPt0ul+WGHMqCcQb17JIhCnahab/pA3KxWcdjTDYmz01qHj0f+EarFoGGcZ9Jof xJgR+7KYyRTFos4lbyVjAEr5exD9Vp68XBO2217kmfNdHnzw2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG8CcwsT8StIDdLIqae+XbYA80PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJhOGIzZjYtYmRlZC0z Njc3LWI0MDEtNDk5YzExMzlmYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+7x/Ta/ziI7ARoDhMIAzlwOX//hNgfnJds4xp0Ve7m7lXukUg0iPH2 JXNorRlvolXU3dMOxstlwUOHXy6IUbSiCYbF5eLuIOZyVeYrTKBfAb3Y8hcxsQaI jDCsBGIBcE2CJntWPDHuourgWKH25seP8djnI0OtFgYfFpTXqlvh5aOs4QKJputr N/6v83uzHtThvWlRhlgkQfvGeuulxxNS/NJMSUjlJD73uIhQx1Cjpps5MFuwhNE3 sBGO1JoBdcZle8YrNrGnRhuFEfVh/s335UkST+MbS/PHZ4sigjQYe4D6OvArwoK7 cvPgiEFflL6LFgowXehVQT9I8sAWhmo= -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:03 2025 by rpki-client