$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b759afaa-be62-3795-96ee-44c19adb2351.roa File: b759afaa-be62-3795-96ee-44c19adb2351.roa (raw, json) Hash identifier: 2MZN6d0QGMx1B1tscki6/ciTA0M2CGMxToIgdbgfvc4= Subject key identifier: 6E:22:03:D9:E9:B2:89:DE:41:5A:80:D0:32:9C:84:F1:41:F3:62:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA05F0A3C7D5ABD9F29500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b759afaa-be62-3795-96ee-44c19adb2351.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:05:f0:a3:c7:d5:ab:d9:f2:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3aaffc5f-ac2c-4422-98da-dbd0085977ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a6:27:b7:20:76:d5:c5:df:3e:93:f6:6c:70: cb:48:af:e1:5b:fa:74:c7:4b:9e:05:bd:ac:71:ea: 4e:5a:10:ca:6c:ac:d6:c9:56:82:d9:02:29:ca:83: 86:50:21:b7:86:44:a6:af:a1:5e:e5:5b:c1:30:bd: c0:fa:e6:05:e1:0d:58:f5:a6:ad:4b:2e:90:54:33: e2:d9:1e:9f:8c:52:39:81:cc:6e:76:f2:66:86:aa: 0c:d3:81:95:2a:8a:5e:b1:4d:db:7e:ba:a9:5a:02: 93:fe:f1:bd:24:a3:a7:96:56:1b:1c:43:7b:47:cc: f1:54:18:ae:5c:e4:e7:15:79:a9:30:2b:c1:3e:61: 1c:b4:85:29:95:f9:80:d6:9d:66:bb:a7:ae:ba:00: 2f:90:4c:7c:2c:b3:a6:73:f0:63:b9:eb:74:97:2d: b8:6b:92:e2:be:ad:3a:c4:e5:89:ac:22:81:77:5c: 62:66:17:d2:69:96:7e:b5:e9:04:60:1d:e7:3f:6d: 8d:70:78:17:9f:3e:8b:59:2e:90:fe:77:8a:08:af: 72:73:ad:78:77:85:a2:d3:9b:61:3f:eb:3e:8e:bc: a6:f9:99:65:80:81:61:76:b0:37:1a:03:d0:5a:e7: 4e:00:1e:4d:53:11:e7:84:0a:d9:21:8f:23:40:0b: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:22:03:D9:E9:B2:89:DE:41:5A:80:D0:32:9C:84:F1:41:F3:62:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b759afaa-be62-3795-96ee-44c19adb2351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:25:ce:9a:9e:77:ba:92:b6:81:81:51:d6:bf:08:9e:16:d9: 70:21:82:0e:08:f4:fa:21:93:4e:a8:90:ef:03:8b:b1:61:76: ac:4c:20:a9:e8:6c:a6:0f:10:b1:bd:48:48:cb:07:0e:05:40: cf:e7:c9:1b:99:44:d0:7a:6e:37:98:19:b9:3b:06:f1:3c:a3: 3d:a0:93:c4:28:00:b1:ee:3a:63:51:08:74:58:5e:87:27:79: 5e:85:e5:bc:d4:a3:80:e4:06:70:56:b3:77:bd:1d:a4:98:b6: 39:c8:17:49:ce:c6:7b:46:cd:57:fa:3b:7c:6e:8f:65:e4:2b: 2b:48:08:92:27:97:32:8f:01:89:de:e8:ad:2f:20:94:c1:d7: 81:90:95:0e:77:10:11:54:cd:3b:04:dd:de:9a:61:35:40:5a: 07:c7:f6:8e:a8:25:be:ab:6f:7e:e5:13:f9:2d:63:70:44:71: 2f:0f:eb:ad:ca:23:76:07:57:81:2a:f1:a7:08:94:25:d0:7b: b5:c9:c6:69:40:95:c0:76:0e:81:f4:1f:7d:b0:3c:87:87:35: a4:08:7f:17:ae:6b:c3:70:74:c8:e5:e2:0c:f9:b5:4e:96:63: 60:d7:d3:de:6a:6c:51:76:fb:59:ad:49:f6:c9:7c:dc:e7:fb: f7:2e:a7:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugXwo8fVq9nylQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2FhZmZjNWYtYWMyYy00NDIyLTk4ZGEtZGJkMDA4NTk3N2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqYntyB21cXfPpP2bHDLSK/hW/p0x0ueBb2s cepOWhDKbKzWyVaC2QIpyoOGUCG3hkSmr6Fe5VvBML3A+uYF4Q1Y9aatSy6QVDPi 2R6fjFI5gcxudvJmhqoM04GVKopesU3bfrqpWgKT/vG9JKOnllYbHEN7R8zxVBiu XOTnFXmpMCvBPmEctIUplfmA1p1mu6euugAvkEx8LLOmc/Bjuet0ly24a5Livq06 xOWJrCKBd1xiZhfSaZZ+tekEYB3nP22NcHgXnz6LWS6Q/neKCK9yc614d4Wi05th P+s+jrym+ZllgIFhdrA3GgPQWudOAB5NUxHnhArZIY8jQAsu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4iA9npsoneQVqA0DKchPFB82IbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjc1OWFmYWEtYmU2Mi0z Nzk1LTk2ZWUtNDRjMTlhZGIyMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABslzpqed7qStoGBUda/CJ4W2XAhgg4I9Pohk06okO8Di7FhdqxMIKno bKYPELG9SEjLBw4FQM/nyRuZRNB6bjeYGbk7BvE8oz2gk8QoALHuOmNRCHRYXocn eV6F5bzUo4DkBnBWs3e9HaSYtjnIF0nOxntGzVf6O3xuj2XkKytICJInlzKPAYne 6K0vIJTB14GQlQ53EBFUzTsE3d6aYTVAWgfH9o6oJb6rb37lE/ktY3BEcS8P663K I3YHV4Eq8acIlCXQe7XJxmlAlcB2DoH0H32wPIeHNaQIfxeua8NwdMjl4gz5tU6W Y2DX095qbFF2+1mtSfbJfNzn+/cup4I= -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:45 2025 by rpki-client