$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca724c1b-b0f5-3037-aac7-17027e5a455e.roa File: ca724c1b-b0f5-3037-aac7-17027e5a455e.roa (raw, json) Hash identifier: coxP7sMGgZqq08v0KFCTztdA+O9ch4Rs+4nA8nI2euY= Subject key identifier: 49:9B:34:CE:EF:43:F8:11:9B:CA:5C:82:7B:28:EB:8C:C2:AB:EE:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDD9837F8CB7CE3DB120E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca724c1b-b0f5-3037-aac7-17027e5a455e.roa Signing time: Thu 24 Apr 2025 11:53:44 +0000 ROA not before: Thu 24 Apr 2025 11:53:44 +0000 ROA not after: Wed 23 Jul 2025 11:53:44 +0000 asID: 19905 IP address blocks: 173.27.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:d9:83:7f:8c:b7:ce:3d:b1:20:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:44 2025 GMT Not After : Jul 23 11:53:44 2025 GMT Subject: CN=ec5417a2-c372-4bb1-8b53-c23880cdbc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:3a:65:6b:b1:e4:c1:f0:ff:2d:7f:34:51: 51:15:62:9c:23:73:84:95:f1:86:13:db:7e:ba:d6: a1:ac:a9:e0:1f:90:7e:54:a2:c5:90:b7:42:83:83: 76:e9:11:8d:76:b9:30:37:23:d5:d4:ee:dd:1b:72: 16:83:c4:ab:a9:6f:5c:b4:f0:8b:e1:67:32:24:e3: f8:b5:11:ca:aa:94:4e:47:60:79:ad:c2:cb:4a:e4: 29:5d:4f:ac:0a:8f:cf:fa:b4:bb:80:ff:64:d9:9a: af:c9:64:59:75:5c:c5:89:ef:b8:c0:e4:cb:a3:3e: 8a:ff:5f:8c:cf:7b:1c:21:da:2c:7f:d9:54:57:4b: 02:31:3c:8e:27:68:dc:7d:7c:d8:d8:b3:51:cc:46: 85:ba:40:b9:98:04:8a:ba:df:d1:38:65:7e:7f:0b: 06:73:63:59:fa:2b:08:df:d7:40:e9:27:36:9c:54: 94:99:3c:08:01:1e:63:73:32:e1:6b:d5:ed:0d:62: fe:9b:cb:c8:5d:da:73:b2:f0:46:2d:2c:09:db:e2: 48:a2:ac:7f:c2:c6:9a:0b:35:e4:98:39:a4:44:f1: 68:4a:91:83:2e:d9:28:a4:57:26:ee:12:81:dc:be: 86:a9:67:46:45:74:a7:fc:fe:af:16:17:3d:94:16: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9B:34:CE:EF:43:F8:11:9B:CA:5C:82:7B:28:EB:8C:C2:AB:EE:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca724c1b-b0f5-3037-aac7-17027e5a455e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:29:ef:16:ea:31:c4:05:31:6a:81:bb:0c:4d:25:d6:db:ce: 0f:38:73:d8:75:17:10:6d:aa:b2:d5:e4:5b:bf:ce:d7:50:3b: 42:cd:7e:28:11:11:20:50:9b:d6:70:9e:ec:c7:46:ba:c8:72: 72:0f:66:38:56:7f:ad:99:9b:ad:53:80:28:09:f3:f0:0c:8c: 17:86:96:6e:87:c8:57:4f:58:21:ac:59:be:91:dd:f9:14:11: 1f:03:19:78:0e:79:d5:f3:a7:15:05:82:cd:7d:fb:d3:86:6c: 45:9f:24:fc:ad:54:45:07:b9:92:4b:45:d8:87:88:5c:26:b4: 99:bf:62:d0:84:84:dc:33:13:14:40:eb:7d:61:05:b8:60:ca: 62:ef:c9:38:a1:c6:fc:ba:96:03:54:97:65:65:bd:53:b1:96: c4:e0:21:c0:d1:39:c4:fa:5d:26:a4:21:df:f9:43:c7:88:0b: 30:85:c7:77:96:f9:00:5c:7d:11:9c:22:9b:8c:6b:c2:3b:ca: dc:30:13:f6:43:4b:f1:9f:7d:af:d0:fc:91:3f:27:a7:49:fa: 3a:5a:44:a6:a1:96:bb:05:e6:c3:24:21:bb:e4:2c:86:a6:c7: 01:7b:0f:46:58:ae:7d:c9:9b:a7:6f:45:50:69:36:34:1a:95: 1c:6d:c6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzdmDf4y3zj2xIOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTM0NFoXDTI1MDcyMzExNTM0NFowLzEtMCsGA1UEAxMk ZWM1NDE3YTItYzM3Mi00YmIxLThiNTMtYzIzODgwY2RiYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA06ZWux5MHw/y1/NFFRFWKcI3OElfGGE9t+ utahrKngH5B+VKLFkLdCg4N26RGNdrkwNyPV1O7dG3IWg8SrqW9ctPCL4WcyJOP4 tRHKqpROR2B5rcLLSuQpXU+sCo/P+rS7gP9k2ZqvyWRZdVzFie+4wOTLoz6K/1+M z3scIdosf9lUV0sCMTyOJ2jcfXzY2LNRzEaFukC5mASKut/ROGV+fwsGc2NZ+isI 39dA6Sc2nFSUmTwIAR5jczLha9XtDWL+m8vIXdpzsvBGLSwJ2+JIoqx/wsaaCzXk mDmkRPFoSpGDLtkopFcm7hKB3L6GqWdGRXSn/P6vFhc9lBahGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmbNM7vQ/gRm8pcgnso64zCq+5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2E3MjRjMWItYjBmNS0z MDM3LWFhYzctMTcwMjdlNWE0NTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4p7xbqMcQFMWqBuwxNJdbbzg84c9h1FxBtqrLV5Fu/ztdQO0LNfigR ESBQm9ZwnuzHRrrIcnIPZjhWf62Zm61TgCgJ8/AMjBeGlm6HyFdPWCGsWb6R3fkU ER8DGXgOedXzpxUFgs19+9OGbEWfJPytVEUHuZJLRdiHiFwmtJm/YtCEhNwzExRA 631hBbhgymLvyTihxvy6lgNUl2VlvVOxlsTgIcDROcT6XSakId/5Q8eICzCFx3eW +QBcfRGcIpuMa8I7ytwwE/ZDS/Gffa/Q/JE/J6dJ+jpaRKahlrsF5sMkIbvkLIam xwF7D0ZYrn3Jm6dvRVBpNjQalRxtxvA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:40 2025 by rpki-client