$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe25758-ed5c-3d5c-9392-ce2592d6c054.roa File: cfe25758-ed5c-3d5c-9392-ce2592d6c054.roa (raw, json) Hash identifier: CwDT4QG+ozCHzrXn4juow6mcVYGiDDm/oovTccrdTDw= Subject key identifier: 4D:9C:E0:A5:F1:BD:59:59:42:06:5A:F1:88:47:15:C0:A5:F2:FD:8C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF46AF692480DBC1546C20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe25758-ed5c-3d5c-9392-ce2592d6c054.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:46:af:69:24:80:db:c1:54:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=cce91f0d-1675-4dbd-b0b7-35aa11c47845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:ef:3c:a2:f8:ae:af:f1:4d:c8:3d:50:94: 0f:31:15:48:7e:86:d9:9c:45:30:73:d6:3b:fe:30: 68:4d:d5:cb:6a:9c:0d:7d:0e:95:41:a1:af:ea:5a: 00:cc:07:7e:d2:11:73:61:49:1f:7a:b8:23:d7:5d: 32:77:bc:80:11:4c:5a:b9:bd:2f:a2:3a:43:8f:6f: c6:02:86:98:9f:d7:1a:7a:24:9f:eb:40:56:ca:1e: d3:60:d0:b7:d7:68:91:bb:16:33:58:c3:50:74:44: 2e:20:0e:2b:4c:89:c8:e1:db:7e:42:19:6f:6c:5a: cc:53:5a:49:cf:02:41:13:e3:04:5a:2b:cf:50:20: 70:e1:41:93:8d:39:81:51:0f:f2:18:59:02:ec:3e: d6:6c:f3:60:27:23:19:3e:a5:c8:82:40:f5:68:12: fa:8c:58:13:80:b4:09:d5:c9:e1:fe:a9:e3:4a:8a: 0b:b0:5a:7d:32:82:f7:93:f7:81:94:5d:8b:51:5e: f8:7c:cc:86:bd:b3:11:d8:c3:3e:32:27:a6:41:9e: e7:dc:b2:f9:65:dc:93:3e:b3:32:bc:af:71:f6:3c: 93:88:83:21:b5:0c:bc:a5:59:ba:eb:c6:49:6f:88: 4c:8f:ae:0e:9d:6a:b0:52:1f:f3:b4:a9:cf:5c:47: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9C:E0:A5:F1:BD:59:59:42:06:5A:F1:88:47:15:C0:A5:F2:FD:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe25758-ed5c-3d5c-9392-ce2592d6c054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4b:94:ae:8a:e3:9b:16:4c:43:3d:d1:43:c7:60:1d:8d:d9: db:2d:a7:09:33:0c:f4:65:fe:f8:df:4e:df:a2:38:9b:39:2d: 3a:0f:fc:bc:c8:48:78:48:12:0b:17:36:75:88:c5:c3:5c:44: 43:08:24:fc:42:c3:c5:cb:75:81:96:53:de:0a:d0:d6:9d:ad: 7a:d0:93:26:3f:73:99:89:96:34:cf:6a:84:39:cf:75:79:2c: 06:6c:c3:2b:a7:41:41:83:b1:91:ea:3c:41:57:1e:27:37:37: 0d:11:5a:80:c7:36:40:b5:1b:17:a1:f7:6e:a5:1b:bc:5d:64: 99:6b:45:7e:20:5a:bc:19:5c:c9:28:79:85:f0:42:d1:71:e4: 27:07:91:98:3c:2f:c0:fa:9e:8b:02:85:42:2c:35:f2:07:a4: ca:8b:59:12:f8:c1:99:99:c8:2b:09:3c:87:ba:b0:ca:9e:3d: 48:03:66:0b:6b:05:f9:94:73:6c:33:f2:33:bd:d8:02:f7:c4: f9:5e:87:cb:db:02:b8:ab:06:82:a5:b3:bb:f9:cc:e3:38:56: c8:ce:96:f9:43:04:c3:34:3e:f1:c5:e9:9a:f5:65:ba:5d:60: f8:0d:22:12:1a:ff:72:39:b2:4a:e4:79:79:b2:80:ad:35:de: 7c:62:d7:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70avaSSA28FUbCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2NlOTFmMGQtMTY3NS00ZGJkLWIwYjctMzVhYTExYzQ3ODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC3vPKL4rq/xTcg9UJQPMRVIfobZnEUwc9Y7 /jBoTdXLapwNfQ6VQaGv6loAzAd+0hFzYUkfergj110yd7yAEUxaub0vojpDj2/G AoaYn9caeiSf60BWyh7TYNC312iRuxYzWMNQdEQuIA4rTInI4dt+QhlvbFrMU1pJ zwJBE+MEWivPUCBw4UGTjTmBUQ/yGFkC7D7WbPNgJyMZPqXIgkD1aBL6jFgTgLQJ 1cnh/qnjSooLsFp9MoL3k/eBlF2LUV74fMyGvbMR2MM+MiemQZ7n3LL5ZdyTPrMy vK9x9jyTiIMhtQy8pVm668ZJb4hMj64OnWqwUh/ztKnPXEe6ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2c4KXxvVlZQgZa8YhHFcCl8v2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZlMjU3NTgtZWQ1Yy0z ZDVjLTkzOTItY2UyNTkyZDZjMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxLlK6K45sWTEM90UPHYB2N2dstpwkzDPRl/vjfTt+iOJs5LToP/LzI SHhIEgsXNnWIxcNcREMIJPxCw8XLdYGWU94K0NadrXrQkyY/c5mJljTPaoQ5z3V5 LAZswyunQUGDsZHqPEFXHic3Nw0RWoDHNkC1Gxeh926lG7xdZJlrRX4gWrwZXMko eYXwQtFx5CcHkZg8L8D6nosChUIsNfIHpMqLWRL4wZmZyCsJPIe6sMqePUgDZgtr BfmUc2wz8jO92AL3xPleh8vbArirBoKls7v5zOM4VsjOlvlDBMM0PvHF6Zr1Zbpd YPgNIhIa/3I5skrkeXmygK013nxi128= -----END CERTIFICATE-----Generated at Sun Apr 27 03:10:09 2025 by rpki-client