$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db4acbe4-df6e-3a03-9185-272ab3559450.roa File: db4acbe4-df6e-3a03-9185-272ab3559450.roa (raw, json) Hash identifier: stHhryGXsAnR5UNTbWOdfHdzpBFiFRiewQLwY919o7M= Subject key identifier: 57:90:01:E5:A9:F6:17:31:62:F5:81:BD:C8:BF:5C:F7:30:32:77:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA0838761A277134CD3240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db4acbe4-df6e-3a03-9185-272ab3559450.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:08:38:76:1a:27:71:34:cd:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d6d831a7-b412-40d7-a5f4-3b2571675b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:c3:3e:a0:54:ea:54:3f:f0:1b:12:63:aa: 21:5e:45:ea:54:31:6d:c2:9b:d5:b6:17:12:89:98: c1:7f:46:da:86:5b:5c:da:be:88:0b:ed:76:f0:0e: 23:31:52:ea:25:86:8d:89:44:75:72:09:6b:1d:ae: 2c:07:0b:e6:69:51:04:e5:21:81:91:54:69:d1:8e: cb:4f:7e:f3:ac:d5:4e:23:49:7a:a0:cc:3b:42:45: e2:8f:18:3d:f9:40:ed:43:e9:14:fd:2f:66:6d:92: 16:57:a8:77:f5:29:dc:b8:c4:9a:56:57:e7:6e:b0: d3:cf:6d:88:03:97:28:f2:1b:48:fa:dd:2c:4c:f1: 9b:d3:47:90:6c:4c:a5:c8:7f:94:b4:30:5d:be:58: 88:26:9a:14:17:f9:c5:0e:49:9d:8e:a2:fc:e8:40: 1e:b1:73:1d:ea:51:1d:d2:e6:75:79:2b:60:77:8b: 49:3a:75:cb:e0:b8:70:09:df:39:7c:02:09:e5:3f: de:9e:da:90:aa:fa:9e:06:9b:d8:e2:22:89:5f:0c: 8f:55:b5:bc:8f:ed:60:99:10:4c:e5:41:03:74:99: 55:6d:01:df:50:1c:3d:b9:2f:28:19:58:9f:95:9c: 5b:5f:2a:e3:d7:fe:a6:e0:c8:c0:e2:76:7b:e3:0f: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:90:01:E5:A9:F6:17:31:62:F5:81:BD:C8:BF:5C:F7:30:32:77:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db4acbe4-df6e-3a03-9185-272ab3559450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a8:41:26:6f:ef:51:9a:8b:85:1a:46:3c:39:7f:ea:cc:9e: 38:59:2a:74:b8:7f:ce:e3:79:fc:cd:ee:50:3b:3f:e0:d0:ed: 7d:2d:aa:1b:40:7e:6c:a3:f3:87:8c:5b:17:44:ff:98:57:61: 84:c8:32:02:3e:5e:77:ae:9c:c7:fb:ec:88:b3:8e:16:9b:75: 89:00:e3:63:30:48:ec:41:b4:72:42:2d:dd:ad:34:07:4c:7b: 0a:54:12:83:e9:7b:18:9f:dd:e8:aa:50:4f:96:c6:7b:fe:f4: dd:57:30:c8:f2:bc:fc:36:96:13:fa:fa:f9:f1:48:c6:0b:70: 4a:c7:22:c2:59:cb:15:40:d0:e8:a3:fb:a2:44:32:20:38:0a: ec:ad:a0:a7:8f:fb:59:e3:ff:b5:44:15:bb:f7:8e:a3:3d:dc: 65:6d:5e:72:af:6f:f3:b9:5c:08:50:8a:58:79:2a:d1:41:4b: 0f:28:66:b0:a2:a8:4d:35:6f:74:9a:7e:1e:79:4c:f6:31:10: 33:74:7b:d9:3b:9c:c6:a7:71:f0:07:6f:6e:55:df:3d:9d:95: 53:f1:64:6c:a1:4d:de:b9:d5:aa:9b:20:54:a5:ff:b3:6b:ed: a6:b7:56:4b:43:b3:3c:4f:e2:6d:bd:20:11:53:85:a6:fb:c4: 25:11:88:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugg4dhoncTTNMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDZkODMxYTctYjQxMi00MGQ3LWE1ZjQtM2IyNTcxNjc1YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSLDPqBU6lQ/8BsSY6ohXkXqVDFtwpvVthcS iZjBf0bahltc2r6IC+128A4jMVLqJYaNiUR1cglrHa4sBwvmaVEE5SGBkVRp0Y7L T37zrNVOI0l6oMw7QkXijxg9+UDtQ+kU/S9mbZIWV6h39SncuMSaVlfnbrDTz22I A5co8htI+t0sTPGb00eQbEylyH+UtDBdvliIJpoUF/nFDkmdjqL86EAesXMd6lEd 0uZ1eStgd4tJOnXL4LhwCd85fAIJ5T/entqQqvqeBpvY4iKJXwyPVbW8j+1gmRBM 5UEDdJlVbQHfUBw9uS8oGViflZxbXyrj1/6m4MjA4nZ74w8hPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeQAeWp9hcxYvWBvci/XPcwMnftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI0YWNiZTQtZGY2ZS0z YTAzLTkxODUtMjcyYWIzNTU5NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRllMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuoQSZv71Gai4UaRjw5f+rMnjhZKnS4f87jefzN7lA7P+DQ7X0tqhtA fmyj84eMWxdE/5hXYYTIMgI+XneunMf77IizjhabdYkA42MwSOxBtHJCLd2tNAdM ewpUEoPpexif3eiqUE+Wxnv+9N1XMMjyvPw2lhP6+vnxSMYLcErHIsJZyxVA0Oij +6JEMiA4CuytoKeP+1nj/7VEFbv3jqM93GVtXnKvb/O5XAhQilh5KtFBSw8oZrCi qE01b3Safh55TPYxEDN0e9k7nMancfAHb25V3z2dlVPxZGyhTd651aqbIFSl/7Nr 7aa3VktDszxP4m29IBFThab7xCURiIM= -----END CERTIFICATE-----Generated at Sun Apr 27 09:14:58 2025 by rpki-client