$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c989fd55-2d03-39ce-bb2d-e1a19b0da9ea.roa File: c989fd55-2d03-39ce-bb2d-e1a19b0da9ea.roa (raw, json) Hash identifier: RqSxioUb9DaHo3LZXrAnYekdrZVZM0lGOMSfiSHmmu0= Subject key identifier: DE:B4:F2:01:2A:D7:DF:8B:C5:AA:91:17:31:65:B8:37:5F:45:C2:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584981305FF1F1DEF4DB0E28DA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c989fd55-2d03-39ce-bb2d-e1a19b0da9ea.roa Signing time: Sat 12 Apr 2025 19:30:34 +0000 ROA not before: Sat 12 Apr 2025 19:30:34 +0000 ROA not after: Fri 11 Jul 2025 19:30:34 +0000 asID: 19905 IP address blocks: 173.25.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:30:5f:f1:f1:de:f4:db:0e:28:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 12 19:30:34 2025 GMT Not After : Jul 11 19:30:34 2025 GMT Subject: CN=60b9a065-8850-437e-8bfd-c55c17ec5e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:66:4f:0b:ac:91:b4:1d:ed:72:d3:2b:db: c8:49:c2:b6:c4:80:3a:9f:9b:75:e4:09:89:44:cf: 83:7f:52:25:92:32:2f:6a:11:48:e8:58:03:63:90: a3:dd:02:91:50:1d:aa:b6:72:79:b5:2d:ef:89:eb: ca:f8:df:df:a0:9a:e7:f7:5f:04:2e:25:94:1c:ea: e7:6f:dd:5a:90:fb:34:64:5b:b3:ad:6c:c7:51:89: ba:c9:86:41:14:ef:e4:14:75:86:32:19:fd:d2:83: e6:3c:52:7e:39:2e:fb:09:de:66:02:1c:45:be:d8: f3:ff:2d:a3:26:59:05:4e:af:34:0a:36:36:5c:d5: 2b:60:79:46:b0:5c:a9:14:6d:6d:09:35:10:15:19: 6e:80:96:70:64:f4:31:68:5f:b5:12:95:e0:f1:ff: 77:39:d0:49:8a:c9:94:87:92:8b:a9:65:56:b4:7d: 17:6f:7c:a7:39:0a:0d:6b:1e:29:f9:bb:ca:50:3c: c2:8e:68:01:c0:0a:2f:50:45:2f:98:fa:80:8a:e0: 99:91:a7:19:b1:ad:f0:dd:f8:07:bb:d8:c3:fb:1c: b0:46:6f:9e:40:2f:c3:83:80:6c:23:d0:00:16:81: 3e:1a:fb:b2:ee:42:ec:c7:cc:be:bf:eb:e3:66:e0: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B4:F2:01:2A:D7:DF:8B:C5:AA:91:17:31:65:B8:37:5F:45:C2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c989fd55-2d03-39ce-bb2d-e1a19b0da9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:07:13:56:0f:fc:e1:96:5f:39:8c:7a:52:67:ca:7c:73:73: 0a:d9:f9:c0:78:0a:cb:ff:5b:80:32:50:a0:62:68:b4:c7:3a: 4d:25:b8:d9:e6:3e:57:f2:c3:9b:b4:05:95:27:48:25:37:96: c9:41:a9:60:bb:85:c9:e6:df:1b:c3:05:3e:50:96:b9:71:bd: 91:a0:ae:37:e6:20:fc:a2:b0:99:ec:5f:70:fe:36:2a:a5:70: ac:52:19:01:b3:69:96:75:79:12:74:f7:19:46:b4:0a:e0:a1: af:8e:75:ca:06:af:28:a9:10:cc:ca:45:34:b3:a4:30:79:8a: bf:d6:f3:d0:57:fc:4f:b9:b7:46:22:02:d3:2c:80:4f:94:93: 3a:6f:41:cd:47:17:6f:82:5b:b7:89:24:96:b5:64:da:e3:02: eb:db:27:52:64:b3:2f:22:b6:c7:34:19:13:ba:07:45:56:5e: 9d:61:50:6d:08:f5:07:47:c2:23:b2:16:20:10:f6:c6:18:55: 1b:b6:81:90:b5:17:5b:5a:3e:8c:f6:ee:47:42:23:aa:c4:17: 04:de:ed:a8:9e:56:82:5a:bc:40:da:e4:ea:48:54:89:27:4a: 6d:2c:4e:a3:68:50:0b:2a:2e:b2:7a:01:46:cc:82:f3:75:d5: 3c:fb:ab:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmBMF/x8d702w4o2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQxMjE5MzAzNFoXDTI1MDcxMTE5MzAzNFowLzEtMCsGA1UEAxMk NjBiOWEwNjUtODg1MC00MzdlLThiZmQtYzU1YzE3ZWM1ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyVmTwuskbQd7XLTK9vIScK2xIA6n5t15AmJ RM+Df1IlkjIvahFI6FgDY5Cj3QKRUB2qtnJ5tS3vievK+N/foJrn918ELiWUHOrn b91akPs0ZFuzrWzHUYm6yYZBFO/kFHWGMhn90oPmPFJ+OS77Cd5mAhxFvtjz/y2j JlkFTq80CjY2XNUrYHlGsFypFG1tCTUQFRlugJZwZPQxaF+1EpXg8f93OdBJismU h5KLqWVWtH0Xb3ynOQoNax4p+bvKUDzCjmgBwAovUEUvmPqAiuCZkacZsa3w3fgH u9jD+xywRm+eQC/Dg4BsI9AAFoE+Gvuy7kLsx8y+v+vjZuDfuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN608gEq19+LxaqRFzFluDdfRcLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzk4OWZkNTUtMmQwMy0z OWNlLWJiMmQtZTFhMTliMGRhOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUHE1YP/OGWXzmMelJnynxzcwrZ+cB4Csv/W4AyUKBiaLTHOk0luNnm Plfyw5u0BZUnSCU3lslBqWC7hcnm3xvDBT5QlrlxvZGgrjfmIPyisJnsX3D+Niql cKxSGQGzaZZ1eRJ09xlGtArgoa+OdcoGryipEMzKRTSzpDB5ir/W89BX/E+5t0Yi AtMsgE+UkzpvQc1HF2+CW7eJJJa1ZNrjAuvbJ1Jksy8itsc0GRO6B0VWXp1hUG0I 9QdHwiOyFiAQ9sYYVRu2gZC1F1taPoz27kdCI6rEFwTe7aieVoJavEDa5OpIVIkn Sm0sTqNoUAsqLrJ6AUbMgvN11Tz7q6M= -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:17 2025 by rpki-client