$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c70626e0-362f-319a-b7b2-138520c79448.roa File: c70626e0-362f-319a-b7b2-138520c79448.roa (raw, json) Hash identifier: yXaJSAzvS/Y5Nw3R+MD0B+r8rMmkxggcyNEBrXGst9s= Subject key identifier: 16:BB:2A:2B:95:C6:E5:09:55:45:AD:7B:AE:27:14:C8:35:C1:88:D3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499AF4732780AADB9AE3A93EF1 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c70626e0-362f-319a-b7b2-138520c79448.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.30.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:73:27:80:aa:db:9a:e3:a9:3e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=f256ff34-4840-474f-954d-a7048a1b51ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:14:5f:7d:7d:b4:30:a0:e0:de:17:6d:e6: 3f:04:10:79:b8:62:61:fe:97:cc:0a:0f:88:e0:c2: 5a:14:75:c2:9f:eb:09:6c:8c:10:1f:10:39:04:f1: da:46:de:9f:bb:01:fb:66:23:d4:55:52:67:66:5f: a3:2d:93:5b:26:d3:78:05:a6:29:47:66:2c:18:7c: 8a:00:6c:26:85:a7:70:33:b6:24:39:80:c7:e8:5d: d1:fc:43:f8:00:9c:b9:47:c9:62:34:10:5f:e7:38: 93:58:6c:ab:36:0d:54:dd:3f:6e:8f:8c:ae:39:6f: 4d:48:b4:27:64:bb:03:f7:fa:5c:84:e9:0b:0a:96: 32:b1:e8:06:8d:7e:04:1a:f3:81:c6:a0:fa:a9:07: 8c:5c:3a:83:e6:4a:12:1a:93:94:db:fa:92:11:c9: df:f4:ee:88:cb:22:1f:a4:b9:93:54:50:92:3d:43: eb:da:63:06:0e:32:fc:37:f2:48:57:e5:ae:9f:cb: 59:a6:81:88:da:9e:5f:ce:5e:03:04:95:db:60:b6: 56:dc:4b:a4:f8:88:89:8e:ee:d0:15:d5:c5:a3:f9: a0:0d:46:ab:75:47:03:e6:3e:73:4d:f9:32:12:42: e9:93:9b:7b:20:5e:f0:ee:31:d1:b9:10:6a:9e:2e: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BB:2A:2B:95:C6:E5:09:55:45:AD:7B:AE:27:14:C8:35:C1:88:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c70626e0-362f-319a-b7b2-138520c79448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2a:6d:5a:82:f8:c7:c5:08:5a:f1:94:c2:f4:31:06:66:a7: 1f:77:a4:14:31:3d:87:19:a2:65:5a:ff:7a:9f:57:21:94:2c: 9a:cc:33:5a:54:bb:2d:ce:9b:90:0f:6c:3c:8d:88:0a:9b:6d: 00:12:d4:61:d6:b2:4c:64:07:08:6e:c7:45:4d:b8:78:6c:c2: d0:9e:71:44:3a:5c:9e:57:e9:69:49:c3:3a:f2:14:0b:dc:91: b6:f9:ba:78:1f:8a:0a:bd:5e:94:9c:4d:8e:50:3e:81:d3:81: e5:b6:a3:12:79:de:7f:00:bc:96:eb:fb:5b:2c:1b:13:37:1c: 6e:88:d4:0e:73:3d:19:77:3a:8f:83:ba:ae:e6:71:93:3d:45: 33:53:b3:70:b5:00:fa:ec:e6:ce:09:f5:7a:6c:1b:66:c8:15: be:17:9a:7f:08:fe:d7:5a:88:c1:e3:dd:68:bd:b4:b1:70:65: 6b:67:fb:fe:fc:80:87:72:f1:01:c5:9f:bb:68:14:76:e6:8b: e9:61:95:58:21:49:3f:3d:a1:97:45:01:da:bb:e8:bb:27:8d: 62:88:07:5e:93:f3:54:ce:60:c5:f4:a2:ed:e9:d6:d5:4b:08: 36:a0:d7:03:3f:29:ec:2b:c4:d6:a6:f3:e5:da:23:5a:91:cc: a9:19:3f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HMngKrbmuOpPvEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjI1NmZmMzQtNDg0MC00NzRmLTk1NGQtYTcwNDhhMWI1MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeAUX319tDCg4N4XbeY/BBB5uGJh/pfMCg+I 4MJaFHXCn+sJbIwQHxA5BPHaRt6fuwH7ZiPUVVJnZl+jLZNbJtN4BaYpR2YsGHyK AGwmhadwM7YkOYDH6F3R/EP4AJy5R8liNBBf5ziTWGyrNg1U3T9uj4yuOW9NSLQn ZLsD9/pchOkLCpYysegGjX4EGvOBxqD6qQeMXDqD5koSGpOU2/qSEcnf9O6IyyIf pLmTVFCSPUPr2mMGDjL8N/JIV+Wun8tZpoGI2p5fzl4DBJXbYLZW3Euk+IiJju7Q FdXFo/mgDUardUcD5j5zTfkyEkLpk5t7IF7w7jHRuRBqni6cwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa7KiuVxuUJVUWte64nFMg1wYjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzcwNjI2ZTAtMzYyZi0z MTlhLWI3YjItMTM4NTIwYzc5NDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR7+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAqbVqC+MfFCFrxlML0MQZmpx93pBQxPYcZomVa/3qfVyGULJrMM1pU uy3Om5APbDyNiAqbbQAS1GHWskxkBwhux0VNuHhswtCecUQ6XJ5X6WlJwzryFAvc kbb5ungfigq9XpScTY5QPoHTgeW2oxJ53n8AvJbr+1ssGxM3HG6I1A5zPRl3Oo+D uq7mcZM9RTNTs3C1APrs5s4J9XpsG2bIFb4Xmn8I/tdaiMHj3Wi9tLFwZWtn+/78 gIdy8QHFn7toFHbmi+lhlVghST89oZdFAdq76LsnjWKIB16T81TOYMX0ou3p1tVL CDag1wM/KewrxNam8+XaI1qRzKkZP5o= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:12 2025 by rpki-client