$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdafe0b2-45a4-39bb-8cad-4b01d1a66fdf.roa File: bdafe0b2-45a4-39bb-8cad-4b01d1a66fdf.roa (raw, json) Hash identifier: Ya3sgEWRgLJx4QOlkLuq6/CU7f+OWJ4YO5rIOoyLuVE= Subject key identifier: 95:EB:BE:9A:3E:CE:3C:25:0A:64:BB:14:1A:39:4B:FF:D9:0C:6A:13 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA05B957EF220B60DCBB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdafe0b2-45a4-39bb-8cad-4b01d1a66fdf.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:05:b9:57:ef:22:0b:60:dc:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8eb698b3-d0f3-497a-acbd-b622a2b0d96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:6c:53:b8:6f:0c:b8:d1:74:65:de:11:5a: a5:ad:48:4e:c6:2b:00:52:6c:ef:d0:c1:80:b1:73: c7:62:29:47:88:67:71:55:5c:bf:23:66:23:65:40: 02:41:ed:97:0b:77:a4:01:0b:e6:8e:12:d3:fe:1b: fa:b1:e0:88:48:1d:b9:40:0b:39:1e:af:af:f0:86: 3a:31:1d:6a:b8:9f:c1:33:76:a5:07:52:ea:b6:9c: fa:da:5c:c0:eb:fd:51:9d:71:45:21:5f:f7:92:15: cd:b7:27:d5:cc:d1:15:27:5e:14:aa:f8:47:5f:73: 5e:aa:ba:52:58:37:38:09:9c:40:4f:6e:ef:b3:0c: 76:78:ae:8f:12:bd:1e:7b:b9:ce:e9:c3:7d:78:fd: d1:d7:34:70:b7:e2:68:f1:0e:aa:35:1b:b2:45:8c: 83:4a:53:c1:a7:15:b1:7f:a5:52:bf:58:10:88:a3: 09:7f:72:38:57:2c:0c:0f:cd:0d:93:ff:60:25:5b: b6:17:a6:ae:17:d8:e8:15:93:10:84:7d:38:e2:f8: 1f:4e:3b:4b:d5:80:ab:9a:d1:88:f4:64:14:1d:4d: 8c:ff:51:23:82:0c:45:84:fe:d2:49:7b:31:24:f0: 0f:72:7a:f2:fc:fe:78:9e:3f:29:63:e7:8d:73:3d: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EB:BE:9A:3E:CE:3C:25:0A:64:BB:14:1A:39:4B:FF:D9:0C:6A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdafe0b2-45a4-39bb-8cad-4b01d1a66fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5a:dd:d8:52:b8:92:fd:7d:9c:ac:6c:32:99:a1:e5:2f:a4: f7:04:42:a1:22:a1:0e:18:f7:f8:50:d1:18:8a:b8:c4:c7:2b: 00:ef:8c:bd:20:3d:e8:56:d4:c3:19:5f:ec:b5:f7:88:bf:06: 47:28:a0:d8:37:9e:c5:5c:7e:6c:a0:dd:fe:ff:bc:5a:77:d3: e7:10:1c:4e:97:8e:82:89:f6:73:ae:bf:7a:f7:30:ed:c9:16: 9a:97:30:30:d9:64:4a:ee:6a:99:4b:25:54:ad:1f:f5:cb:75: 3d:15:87:56:6e:89:33:50:cd:e1:c7:36:fe:a5:bb:21:4a:75: 91:e3:6c:0a:a7:25:96:9a:89:61:0f:ff:6f:cb:24:81:e3:ad: 21:86:86:2c:e6:94:67:ee:67:47:1b:8e:95:30:a7:87:d3:78: d0:80:6d:ee:cb:4a:b0:9e:f3:89:c6:52:5b:35:6a:80:a1:74: 70:6e:04:30:35:db:9b:03:cb:d1:78:14:70:af:44:c2:04:49: 28:af:fb:c7:b8:23:a4:45:54:5a:93:12:e5:09:52:13:c4:af: 16:da:6c:bd:98:78:16:ec:c9:ab:b3:30:0b:82:98:77:27:eb: b5:12:ba:a5:39:ce:87:d3:9f:e2:7b:37:2e:a3:2c:3d:2b:9a: f2:dc:5a:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugW5V+8iC2DcuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGViNjk4YjMtZDBmMy00OTdhLWFjYmQtYjYyMmEyYjBkOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6hsU7hvDLjRdGXeEVqlrUhOxisAUmzv0MGA sXPHYilHiGdxVVy/I2YjZUACQe2XC3ekAQvmjhLT/hv6seCISB25QAs5Hq+v8IY6 MR1quJ/BM3alB1Lqtpz62lzA6/1RnXFFIV/3khXNtyfVzNEVJ14UqvhHX3NeqrpS WDc4CZxAT27vswx2eK6PEr0ee7nO6cN9eP3R1zRwt+Jo8Q6qNRuyRYyDSlPBpxWx f6VSv1gQiKMJf3I4VywMD80Nk/9gJVu2F6auF9joFZMQhH044vgfTjtL1YCrmtGI 9GQUHU2M/1EjggxFhP7SSXsxJPAPcnry/P54nj8pY+eNcz1ptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXrvpo+zjwlCmS7FBo5S//ZDGoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRhZmUwYjItNDVhNC0z OWJiLThjYWQtNGIwMWQxYTY2ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFa3dhSuJL9fZysbDKZoeUvpPcEQqEioQ4Y9/hQ0RiKuMTHKwDvjL0g PehW1MMZX+y194i/BkcooNg3nsVcfmyg3f7/vFp30+cQHE6XjoKJ9nOuv3r3MO3J FpqXMDDZZEruaplLJVStH/XLdT0Vh1ZuiTNQzeHHNv6luyFKdZHjbAqnJZaaiWEP /2/LJIHjrSGGhizmlGfuZ0cbjpUwp4fTeNCAbe7LSrCe84nGUls1aoChdHBuBDA1 25sDy9F4FHCvRMIESSiv+8e4I6RFVFqTEuUJUhPErxbabL2YeBbsyauzMAuCmHcn 67USuqU5zofTn+J7Ny6jLD0rmvLcWgg= -----END CERTIFICATE-----Generated at Mon Apr 28 09:08:16 2025 by rpki-client