$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa File: d78425cb-a2ae-3330-b7f1-293db195adf4.roa (raw, json) Hash identifier: P1BIWirSxs6JViX/QjJC+aZkLHywaZFLSV+lPdX2L4c= Subject key identifier: 5C:4E:52:7F:74:27:B7:B4:47:9C:5E:02:A8:39:BA:A1:12:A2:11:DD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F2DBE9E3FD4D3DF03E120 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.16.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:2d:be:9e:3f:d4:d3:df:03:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=c850da70-8699-4a3b-bd26-160c62bd3a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:98:e6:35:25:07:aa:62:bd:34:b2:d2:45: a2:2f:58:5c:ae:46:27:dd:21:61:25:2c:f9:30:1d: a7:02:ab:69:d8:d9:40:0f:a2:7d:b5:52:83:01:47: 46:34:3c:46:3d:6b:05:5b:70:5b:37:91:ce:62:5f: 44:47:a7:3a:fd:bf:62:25:b2:51:23:73:23:de:df: c5:b8:c2:6d:c8:e3:83:b8:ee:a3:1e:4a:42:ef:51: ff:af:17:3b:17:c9:ca:8b:3a:04:4c:8d:d4:72:62: 71:9b:68:bc:f1:14:f8:9d:9b:48:8b:4b:f4:68:be: 21:02:3d:93:5a:fb:db:2f:63:dd:b1:fc:0b:bd:78: c9:d0:37:37:da:0d:82:bc:73:be:01:dc:7c:48:66: 2e:95:f3:b7:6c:23:46:ef:54:fb:ce:2f:25:ff:6b: ce:d1:a7:b6:9b:37:03:8a:d2:9b:0d:0f:4a:89:96: 40:55:86:3b:4d:3c:ba:57:ce:f8:ec:17:d0:71:c7: e1:84:83:a2:3c:77:f2:f6:15:cc:25:55:39:f7:ed: ea:7d:64:a0:be:55:d3:01:da:22:13:48:35:dd:5e: c3:02:a7:34:2c:3c:a0:ca:4a:c6:f2:71:51:c0:31: fe:74:b1:71:95:74:fb:ec:0a:f7:02:cc:38:63:8b: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4E:52:7F:74:27:B7:B4:47:9C:5E:02:A8:39:BA:A1:12:A2:11:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e5:d8:57:c3:19:28:f2:b1:8d:26:fd:6c:63:b9:80:8c:4a: c7:dd:21:b9:b1:4b:2d:f9:6f:d7:70:1c:97:c0:7e:47:5a:60: 68:97:05:94:f0:b8:5a:c0:cf:d1:28:4d:2a:39:2f:32:ff:d7: 22:d5:2a:10:1f:ef:d4:c3:d4:65:64:d5:c9:fa:8a:32:73:7b: 2b:13:ca:42:71:f8:a1:f7:54:b9:87:1e:aa:4b:59:90:25:fd: 53:4f:2b:9c:85:fa:5d:a7:dc:4e:ee:36:02:ba:2f:9e:94:11: 58:fe:12:74:56:12:e4:3b:93:d5:40:41:ad:64:b8:fa:99:a3: f6:42:a8:8e:47:9e:de:d0:18:74:ba:76:34:a5:e7:58:54:38: 97:16:ed:b7:8c:b9:6f:e3:fc:d1:a4:43:9c:cd:01:cd:f1:44: 1a:3e:c6:e7:21:f3:2e:51:11:56:c5:c5:3f:bd:47:68:97:f6: c8:eb:ac:78:0b:5e:7f:f0:82:97:bf:2c:b6:97:2a:55:56:6a: b1:29:a0:11:fa:a0:f8:ed:9c:08:11:98:25:26:7a:ad:00:99: 74:f3:08:aa:2c:b5:04:c6:65:78:01:ca:bd:a0:d6:92:79:53: 4a:ec:81:fc:34:4c:74:01:cc:3a:59:40:94:15:7b:7f:67:a6: f2:cd:39:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHy2+nj/U098D4SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk Yzg1MGRhNzAtODY5OS00YTNiLWJkMjYtMTYwYzYyYmQzYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMyY5jUlB6pivTSy0kWiL1hcrkYn3SFhJSz5 MB2nAqtp2NlAD6J9tVKDAUdGNDxGPWsFW3BbN5HOYl9ER6c6/b9iJbJRI3Mj3t/F uMJtyOODuO6jHkpC71H/rxc7F8nKizoETI3UcmJxm2i88RT4nZtIi0v0aL4hAj2T WvvbL2PdsfwLvXjJ0Dc32g2CvHO+Adx8SGYulfO3bCNG71T7zi8l/2vO0ae2mzcD itKbDQ9KiZZAVYY7TTy6V8747BfQccfhhIOiPHfy9hXMJVU59+3qfWSgvlXTAdoi E0g13V7DAqc0LDygykrG8nFRwDH+dLFxlXT77Ar3Asw4Y4ul9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxOUn90J7e0R5xeAqg5uqESohHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDc4NDI1Y2ItYTJhZS0z MzMwLWI3ZjEtMjkzZGIxOTVhZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDl2FfDGSjysY0m/WxjuYCMSsfdIbmxSy35b9dwHJfAfkdaYGiXBZTw uFrAz9EoTSo5LzL/1yLVKhAf79TD1GVk1cn6ijJzeysTykJx+KH3VLmHHqpLWZAl /VNPK5yF+l2n3E7uNgK6L56UEVj+EnRWEuQ7k9VAQa1kuPqZo/ZCqI5Hnt7QGHS6 djSl51hUOJcW7beMuW/j/NGkQ5zNAc3xRBo+xuch8y5REVbFxT+9R2iX9sjrrHgL Xn/wgpe/LLaXKlVWarEpoBH6oPjtnAgRmCUmeq0AmXTzCKostQTGZXgByr2g1pJ5 U0rsgfw0THQBzDpZQJQVe39npvLNOUA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:19 2025 by rpki-client