$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa File: db99f61d-31ec-37f3-b7ec-a859c703324e.roa (raw, json) Hash identifier: UlYbcQbbo1OReTLFiPdvJ+BkbM5hOBBGg2C8imJwO1U= Subject key identifier: 9A:72:2E:A9:AB:17:DC:22:D9:29:A6:CF:66:40:96:86:A4:EA:E2:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3C26FC13E3432BC94700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3c:26:fc:13:e3:43:2b:c9:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ccb3b9d9-cd43-4e4f-b953-3a14c7af72a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:3a:11:6a:d8:19:34:26:d7:79:5b:05:6b: fb:47:c4:df:6a:64:8a:92:c8:10:87:40:f6:d3:6e: 53:62:0f:98:5e:cf:c8:a8:e8:3b:af:a5:1e:c9:c9: 2e:a1:80:08:f8:44:86:cf:7c:1b:9c:43:e3:6d:a1: 1f:e1:c8:c0:82:8c:c3:d2:cc:01:ce:e9:77:21:c9: b0:4b:8d:8a:c4:e3:1a:95:12:e9:0e:f5:d6:db:ef: 07:76:5f:71:c7:a5:72:5c:19:29:88:04:de:1f:ef: f1:27:d3:0e:d6:db:9c:4a:09:bd:9a:c7:4f:e9:59: 18:af:05:42:d6:ea:63:f3:2f:91:92:46:e7:ae:23: 60:3a:a6:5b:bc:88:86:29:0a:84:a9:aa:ba:b6:9c: 24:ab:7b:c3:b8:70:c3:5d:1f:d1:62:c0:1d:35:35: 8e:ff:a1:3d:fd:51:71:2e:80:a6:0c:16:55:b6:b3: 62:2d:52:f2:09:eb:82:24:20:9a:59:ba:44:8b:8d: 61:fa:ec:d3:63:bf:55:28:8c:22:cd:b5:b3:66:43: a4:e0:01:c5:e1:04:08:57:f6:f0:23:d5:25:a2:68: 3d:76:e3:0b:a2:d1:13:ca:34:5d:ff:e6:ca:a9:ef: cd:f8:2e:69:45:cc:2b:ee:a5:5d:c3:eb:2e:eb:85: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:72:2E:A9:AB:17:DC:22:D9:29:A6:CF:66:40:96:86:A4:EA:E2:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d4:d2:ad:23:80:41:95:84:43:45:52:b4:60:7e:58:5e:ec: 2a:c3:43:17:e5:d8:0d:a2:03:d2:0f:a9:db:09:ac:12:46:aa: e0:4c:04:aa:e7:22:fb:ef:f6:f1:a0:f6:ad:99:5d:5c:5f:e1: 8f:71:a3:d0:0f:9d:6b:86:b5:bd:ea:1b:13:84:6c:0e:c5:da: 90:9f:86:28:22:8f:0f:5c:6b:fd:0e:62:b5:88:e4:fb:93:2a: e0:0d:93:cd:01:c1:f8:35:1d:53:91:85:90:a2:a9:54:6c:c8: ec:d1:24:f0:51:53:c0:68:2d:c6:c5:21:fb:50:34:38:27:b3: a5:96:73:2e:63:df:e7:4f:cf:85:05:a0:a9:5a:43:b7:e8:59: fe:db:53:69:ea:b2:5e:95:db:72:75:93:d8:be:bf:06:15:08: 00:f2:81:f5:7a:7b:cd:94:c4:22:07:57:f8:af:2a:1c:57:82: b3:cb:27:fe:59:4f:f1:84:8d:93:fd:7d:09:5f:9a:20:e3:c2: 9f:a1:92:95:ff:be:9b:5b:6c:ed:f3:58:75:3f:30:a0:07:bc: 86:07:2a:5f:7a:f7:70:2d:a0:8a:a7:7b:68:13:08:5d:db:6b: c7:e5:04:4d:f9:11:7b:2c:8f:6c:42:58:18:d8:f8:28:fc:a1: 8f:70:65:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujwm/BPjQyvJRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2NiM2I5ZDktY2Q0My00ZTRmLWI5NTMtM2ExNGM3YWY3MmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcE6EWrYGTQm13lbBWv7R8TfamSKksgQh0D2 025TYg+YXs/IqOg7r6UeyckuoYAI+ESGz3wbnEPjbaEf4cjAgozD0swBzul3Icmw S42KxOMalRLpDvXW2+8Hdl9xx6VyXBkpiATeH+/xJ9MO1tucSgm9msdP6VkYrwVC 1upj8y+RkkbnriNgOqZbvIiGKQqEqaq6tpwkq3vDuHDDXR/RYsAdNTWO/6E9/VFx LoCmDBZVtrNiLVLyCeuCJCCaWbpEi41h+uzTY79VKIwizbWzZkOk4AHF4QQIV/bw I9Ulomg9duMLotETyjRd/+bKqe/N+C5pRcwr7qVdw+su64U/kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpyLqmrF9wi2Smmz2ZAloak6uJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI5OWY2MWQtMzFlYy0z N2YzLWI3ZWMtYTg1OWM3MDMzMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvU0q0jgEGVhENFUrRgflhe7CrDQxfl2A2iA9IPqdsJrBJGquBMBKrn Ivvv9vGg9q2ZXVxf4Y9xo9APnWuGtb3qGxOEbA7F2pCfhigijw9ca/0OYrWI5PuT KuANk80Bwfg1HVORhZCiqVRsyOzRJPBRU8BoLcbFIftQNDgns6WWcy5j3+dPz4UF oKlaQ7foWf7bU2nqsl6V23J1k9i+vwYVCADygfV6e82UxCIHV/ivKhxXgrPLJ/5Z T/GEjZP9fQlfmiDjwp+hkpX/vptbbO3zWHU/MKAHvIYHKl9693AtoIqne2gTCF3b a8flBE35EXssj2xCWBjY+Cj8oY9wZbs= -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:37 2025 by rpki-client