$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa File: b85ae6d7-e6f8-347c-9094-7c500122ea64.roa (raw, json) Hash identifier: 6vyXYYycLSfNHR2KYgdGX5XsyCWOrZ0UA7IE5EgrZL8= Subject key identifier: A5:31:24:F8:32:89:A6:79:52:98:CB:D3:4E:D8:66:80:02:FE:4C:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A1DC59E090BE48918C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.16.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a1:dc:59:e0:90:be:48:91:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=49502c7f-a649-477f-b56a-e3d89ee87b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:ca:05:71:8b:a0:ae:fe:b0:d6:ec:56:29: c6:54:10:22:ef:c0:2a:08:7e:1f:e6:34:60:4a:83: 77:38:e0:45:e7:b4:bd:67:f1:c3:fb:f2:57:4d:b2: e3:c4:8b:b2:01:62:81:f2:0e:20:8d:e2:c1:42:d1: 0c:2a:f2:2a:29:e6:e8:5f:85:9e:9f:06:06:5d:ea: 8f:da:96:b4:ca:e4:93:3f:3e:02:2f:39:14:f6:fe: 99:58:82:28:ab:f2:d4:08:3f:0f:81:b3:db:5e:1b: dd:3c:27:84:71:0a:9c:39:4d:65:22:dc:99:a6:eb: a6:54:0a:eb:52:cc:1f:f4:44:7f:c9:fa:48:87:ae: 46:0c:59:db:e6:ad:18:cb:68:17:2a:8e:86:56:0b: 49:a6:80:3d:23:6f:b9:a4:d9:ae:db:a8:7e:60:03: e7:77:6f:b5:b4:12:4c:ae:4f:89:2e:b3:3d:0d:f6: aa:c7:1a:6d:4c:31:5e:1d:f1:17:53:2e:22:21:82: 7c:9d:56:2f:63:ec:bf:6b:7a:7b:dc:23:94:68:91: 46:82:b6:db:c8:39:e6:2a:98:a4:2c:8b:6e:f9:49: 69:a5:25:25:d7:2c:23:b1:b6:76:8a:f9:65:2c:85: c4:72:e4:57:f4:30:09:2c:4c:ed:b9:25:7b:d7:05: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:31:24:F8:32:89:A6:79:52:98:CB:D3:4E:D8:66:80:02:FE:4C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:28:c2:a7:76:84:f1:7b:89:a9:7d:e1:59:ee:59:ed:42:a1: 58:5b:4a:31:e2:71:0a:52:3d:18:7c:1d:21:1e:13:d4:a1:48: 66:ea:8b:cf:b0:39:2c:ef:2d:f1:99:e3:c4:46:24:75:8b:fb: a1:c7:04:09:92:5a:59:77:8c:b3:e4:ac:79:ed:0f:0e:84:a3: 47:3f:4c:67:5d:e7:27:b5:40:02:b9:fe:ca:36:d7:fc:37:98: 19:f8:39:e3:71:57:22:ae:cc:37:00:60:14:41:7d:39:7d:30: 73:52:bf:03:69:0d:0d:10:23:71:cf:05:c0:8f:12:3a:5d:a6: bd:79:52:55:d6:38:c9:19:19:56:f8:b7:38:7c:50:c3:0f:64: b3:5c:ef:86:c4:bd:3f:67:c1:d3:0c:ef:d0:6c:cc:75:72:4e: b4:7c:61:c3:ca:38:cb:64:fc:65:cf:27:b1:35:2a:8c:b9:c0: ce:f4:f2:d4:48:3e:46:f9:7c:12:5b:7e:be:10:0d:99:2e:4e: 6a:73:48:51:b6:cd:7d:e7:00:7a:2d:47:e0:d8:ae:76:31:94: 3c:43:eb:ec:6f:11:09:d6:6b:fa:f5:27:71:0e:18:c5:8f:56: 5a:ec:07:c2:96:a3:01:80:fd:48:23:f3:f8:ef:3f:7b:66:99: 95:c9:49:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKHcWeCQvkiRjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDk1MDJjN2YtYTY0OS00NzdmLWI1NmEtZTNkODllZTg3YjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDfKBXGLoK7+sNbsVinGVBAi78AqCH4f5jRg SoN3OOBF57S9Z/HD+/JXTbLjxIuyAWKB8g4gjeLBQtEMKvIqKeboX4WenwYGXeqP 2pa0yuSTPz4CLzkU9v6ZWIIoq/LUCD8PgbPbXhvdPCeEcQqcOU1lItyZpuumVArr Uswf9ER/yfpIh65GDFnb5q0Yy2gXKo6GVgtJpoA9I2+5pNmu26h+YAPnd2+1tBJM rk+JLrM9DfaqxxptTDFeHfEXUy4iIYJ8nVYvY+y/a3p73COUaJFGgrbbyDnmKpik LItu+UlppSUl1ywjsbZ2ivllLIXEcuRX9DAJLEztuSV71wVlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUxJPgyiaZ5UpjL007YZoAC/kzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjg1YWU2ZDctZTZmOC0z NDdjLTkwOTQtN2M1MDAxMjJlYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAowqd2hPF7ial94VnuWe1CoVhbSjHicQpSPRh8HSEeE9ShSGbqi8+w OSzvLfGZ48RGJHWL+6HHBAmSWll3jLPkrHntDw6Eo0c/TGdd5ye1QAK5/so21/w3 mBn4OeNxVyKuzDcAYBRBfTl9MHNSvwNpDQ0QI3HPBcCPEjpdpr15UlXWOMkZGVb4 tzh8UMMPZLNc74bEvT9nwdMM79BszHVyTrR8YcPKOMtk/GXPJ7E1Koy5wM708tRI Pkb5fBJbfr4QDZkuTmpzSFG2zX3nAHotR+DYrnYxlDxD6+xvEQnWa/r1J3EOGMWP VlrsB8KWowGA/Ugj8/jvP3tmmZXJSaA= -----END CERTIFICATE-----Generated at Sun Apr 27 07:27:48 2025 by rpki-client