$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4d0d11e-fff0-3bc2-8a06-0d05de28ca3a.roa File: d4d0d11e-fff0-3bc2-8a06-0d05de28ca3a.roa (raw, json) Hash identifier: 2/GTlsy4ScErMVJliseXSUQF5WTDD1zC7ncZf5xlrMA= Subject key identifier: 26:E4:DA:5C:90:5B:8E:E4:FE:AF:6E:14:2E:E4:A3:B1:01:EA:D6:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA053CA04F0E135D2D0820 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4d0d11e-fff0-3bc2-8a06-0d05de28ca3a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 150.195.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:05:3c:a0:4f:0e:13:5d:2d:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=893f254a-fc55-4ae5-880b-d49fcd943bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:1b:3f:d4:aa:63:5e:bc:af:ae:3f:ae:9d: a7:0e:d1:55:16:64:0f:b2:8b:de:83:15:a0:7c:31: ff:31:72:b0:31:2a:65:dd:d3:a4:94:63:aa:c7:50: 8a:7b:db:c3:ab:94:c9:c0:c1:b0:68:0b:81:f8:e9: c3:86:e1:65:9f:56:ea:20:d9:32:94:44:d6:f1:fe: 35:11:76:15:42:25:e3:6d:a9:2b:e8:2c:03:c0:b8: 1f:4f:d6:4c:21:bc:cc:0f:8d:cd:b6:46:01:fe:57: e1:4f:2f:14:8b:45:3a:31:79:2f:09:df:2b:de:f9: 9b:ce:42:39:c5:0d:31:24:30:7e:8f:79:aa:6a:91: 33:36:42:ab:b5:f8:fa:2b:f6:bf:45:c5:2f:1a:05: 38:99:dd:fa:83:bd:81:a0:93:c0:8e:b5:5b:69:d9: 1a:b9:83:99:2f:c8:5e:88:ca:c4:83:b6:cd:e2:12: 8d:39:7b:20:84:02:68:0a:99:72:2e:0c:86:d1:d7: a9:b9:c6:df:ff:27:af:6d:00:b0:fc:de:9a:9d:eb: f5:07:80:22:2f:e1:e0:71:43:22:40:97:3a:e6:37: 68:94:67:d8:52:48:28:a5:e1:d1:3c:a5:8f:44:a3: d8:4b:90:df:28:5b:8b:4e:b5:02:ca:0c:a3:b6:bc: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E4:DA:5C:90:5B:8E:E4:FE:AF:6E:14:2E:E4:A3:B1:01:EA:D6:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4d0d11e-fff0-3bc2-8a06-0d05de28ca3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:11:c4:1f:74:35:4c:02:ef:60:0b:aa:0b:00:76:bb:e6:22: eb:40:8e:8c:8e:cf:b7:6b:a9:7f:bd:7a:91:a7:8e:e5:86:c6: e3:95:93:ce:55:13:e7:c3:8e:e0:6f:3a:83:6a:56:16:7b:10: 9e:a9:3a:11:4f:41:a3:61:d2:35:26:8b:45:ef:a2:e3:ef:66: 0b:30:e1:57:df:4a:38:e0:02:66:d0:2e:31:19:60:e1:f5:30: 06:a1:cd:84:f4:56:ff:97:5f:29:c0:7e:01:0a:eb:af:69:d9: 15:7e:7e:e0:5f:eb:74:03:e2:eb:c3:b0:b2:3d:b0:88:43:e1: da:08:03:07:c5:e0:60:d8:f3:3f:cc:9a:b9:bb:81:dc:34:5c: 04:53:51:58:44:e6:e8:87:d7:a3:04:d8:75:07:92:de:cb:7f: 4f:b2:83:fc:f3:e3:c9:04:b9:92:e7:14:da:d7:f2:e3:8b:2e: 8a:65:ad:62:d9:41:80:fc:3f:11:12:28:30:67:b8:3b:fa:30: ef:28:d6:ac:44:fb:d9:a9:50:35:d0:1d:d4:ad:33:54:79:94: 7a:e3:85:cb:d6:d4:06:d0:89:e8:1a:90:74:de:75:b5:17:b0: 2f:c7:13:58:77:9c:4b:3f:80:a8:1f:4f:d4:a9:29:4c:af:6d: 4e:0e:bc:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugU8oE8OE10tCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODkzZjI1NGEtZmM1NS00YWU1LTg4MGItZDQ5ZmNkOTQzYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw8bP9SqY168r64/rp2nDtFVFmQPsovegxWg fDH/MXKwMSpl3dOklGOqx1CKe9vDq5TJwMGwaAuB+OnDhuFln1bqINkylETW8f41 EXYVQiXjbakr6CwDwLgfT9ZMIbzMD43NtkYB/lfhTy8Ui0U6MXkvCd8r3vmbzkI5 xQ0xJDB+j3mqapEzNkKrtfj6K/a/RcUvGgU4md36g72BoJPAjrVbadkauYOZL8he iMrEg7bN4hKNOXsghAJoCplyLgyG0depucbf/yevbQCw/N6anev1B4AiL+HgcUMi QJc65jdolGfYUkgopeHRPKWPRKPYS5DfKFuLTrUCygyjtrxWEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbk2lyQW47k/q9uFC7ko7EB6tb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRkMGQxMWUtZmZmMC0z YmMyLThhMDYtMGQwNWRlMjhjYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsRxB90NUwC72ALqgsAdrvmIutAjoyOz7drqX+9epGnjuWGxuOVk85V E+fDjuBvOoNqVhZ7EJ6pOhFPQaNh0jUmi0XvouPvZgsw4VffSjjgAmbQLjEZYOH1 MAahzYT0Vv+XXynAfgEK669p2RV+fuBf63QD4uvDsLI9sIhD4doIAwfF4GDY8z/M mrm7gdw0XARTUVhE5uiH16ME2HUHkt7Lf0+yg/zz48kEuZLnFNrX8uOLLoplrWLZ QYD8PxESKDBnuDv6MO8o1qxE+9mpUDXQHdStM1R5lHrjhcvW1AbQiegakHTedbUX sC/HE1h3nEs/gKgfT9SpKUyvbU4OvCA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:32 2025 by rpki-client