$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc8666f4-d1a1-377b-b1bc-9f27fb8c9b96.roa File: dc8666f4-d1a1-377b-b1bc-9f27fb8c9b96.roa (raw, json) Hash identifier: j3KwLpl33ud/4gqqkNZpJpHwKs+TFcGr2vbXccTGpno= Subject key identifier: F0:D4:EE:B5:8C:65:0D:8D:E9:84:D7:53:14:F6:06:C0:E9:E2:99:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849F050A067AA81C20F6AC00740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc8666f4-d1a1-377b-b1bc-9f27fb8c9b96.roa Signing time: Thu 22 May 2025 14:50:17 +0000 ROA not before: Thu 22 May 2025 14:50:17 +0000 ROA not after: Wed 20 Aug 2025 14:50:17 +0000 asID: 19905 IP address blocks: 173.30.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:50:a0:67:aa:81:c2:0f:6a:c0:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 22 14:50:17 2025 GMT Not After : Aug 20 14:50:17 2025 GMT Subject: CN=f10c6464-d705-4fe6-8b49-0b986078acff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:fc:86:ac:c6:17:66:62:9f:9f:24:3a:27: 01:74:38:e1:14:bc:ee:04:c6:7a:c5:6b:da:1b:29: ae:95:ed:c3:65:90:79:db:34:cb:b0:25:bc:46:4d: aa:9f:b4:ad:45:dd:76:64:1a:5b:28:9f:be:2c:a5: 06:3c:e0:be:22:dd:c7:14:33:d3:67:96:0b:19:69: ac:c1:06:f3:ef:88:ef:45:eb:6f:20:49:e6:3b:32: e5:01:be:e8:c1:04:a8:d6:56:4b:84:26:3b:71:cc: 2e:94:9d:67:a3:15:67:fe:26:cd:ed:4c:de:2c:a4: 4a:50:eb:c1:3d:58:9d:08:fc:df:1d:e5:d8:fb:0c: b5:b2:03:30:b0:f5:39:ba:e1:d0:ea:58:0b:c8:36: ae:f6:3b:10:6b:e7:71:10:57:3a:1f:f8:44:08:c3: 90:17:12:e8:6c:2d:3f:da:51:cc:57:c7:42:19:2c: 37:1a:02:00:a6:0d:a3:82:e1:36:8f:e5:4c:e1:31: 70:d6:3b:e5:c1:f4:4f:ef:4b:d4:53:49:8b:d1:f3: a0:ed:61:83:f2:47:db:c2:37:50:ad:0e:1d:12:f4: 2d:3f:21:a1:00:a7:71:51:cb:a2:61:9c:82:a4:03: 88:02:db:50:1d:10:7e:70:5a:3d:5b:78:76:d4:1f: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D4:EE:B5:8C:65:0D:8D:E9:84:D7:53:14:F6:06:C0:E9:E2:99:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc8666f4-d1a1-377b-b1bc-9f27fb8c9b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0a:70:82:d3:f4:35:24:7b:4b:b9:1d:3b:19:00:e9:ca:c3: 0a:fa:94:f5:ef:c8:c2:e0:ae:af:38:27:a5:9c:2e:2c:57:46: a3:69:1a:29:d8:3b:2d:ec:c7:2f:96:c7:41:de:b0:7f:45:82: e1:25:83:b2:a6:d5:68:07:c2:f7:c3:99:ca:e9:9f:17:81:49: 1c:b5:12:fe:e5:39:fc:77:dd:10:64:35:4f:65:be:9d:4e:57: 07:91:db:6b:79:84:50:dc:6b:2d:ec:3e:d1:6e:0d:50:b0:37: 08:a5:04:70:25:f7:df:f7:0d:c4:c8:63:e0:ec:af:6b:c7:c6: d6:c7:aa:74:37:92:92:b8:96:d8:12:2f:b0:d8:35:c3:bf:ef: e8:6a:4b:98:4a:a3:49:b4:b8:1b:8f:fd:d1:8f:ad:00:8b:55: 8b:85:71:51:db:99:2f:d0:a8:9c:5f:70:71:7a:b5:e8:95:8f: 7e:15:45:c9:d5:e5:96:cc:b2:8b:52:5a:4a:5f:c1:1d:36:f6: 49:22:2c:b1:ea:e3:8b:09:d0:a8:7c:da:75:e3:f1:47:dc:fa: c9:3a:75:f7:59:86:dd:9e:f0:75:14:f9:11:4e:c7:b0:2d:d6: e3:52:ff:25:bc:bf:e4:09:e6:6c:d0:bd:da:ca:23:a4:4b:83: 20:2f:f7:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwUKBnqoHCD2rAB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyMjE0NTAxN1oXDTI1MDgyMDE0NTAxN1owLzEtMCsGA1UEAxMk ZjEwYzY0NjQtZDcwNS00ZmU2LThiNDktMGI5ODYwNzhhY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1H8hqzGF2Zin58kOicBdDjhFLzuBMZ6xWva Gymule3DZZB52zTLsCW8Rk2qn7StRd12ZBpbKJ++LKUGPOC+It3HFDPTZ5YLGWms wQbz74jvRetvIEnmOzLlAb7owQSo1lZLhCY7ccwulJ1noxVn/ibN7UzeLKRKUOvB PVidCPzfHeXY+wy1sgMwsPU5uuHQ6lgLyDau9jsQa+dxEFc6H/hECMOQFxLobC0/ 2lHMV8dCGSw3GgIApg2jguE2j+VM4TFw1jvlwfRP70vUU0mL0fOg7WGD8kfbwjdQ rQ4dEvQtPyGhAKdxUcuiYZyCpAOIAttQHRB+cFo9W3h21B89iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDU7rWMZQ2N6YTXUxT2BsDp4plNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGM4NjY2ZjQtZDFhMS0z NzdiLWIxYmMtOWYyN2ZiOGM5Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR52MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMKcILT9DUke0u5HTsZAOnKwwr6lPXvyMLgrq84J6WcLixXRqNpGinY Oy3sxy+Wx0HesH9FguElg7Km1WgHwvfDmcrpnxeBSRy1Ev7lOfx33RBkNU9lvp1O VweR22t5hFDcay3sPtFuDVCwNwilBHAl99/3DcTIY+Dsr2vHxtbHqnQ3kpK4ltgS L7DYNcO/7+hqS5hKo0m0uBuP/dGPrQCLVYuFcVHbmS/QqJxfcHF6teiVj34VRcnV 5ZbMsotSWkpfwR029kkiLLHq44sJ0Kh82nXj8Ufc+sk6dfdZht2e8HUU+RFOx7At 1uNS/yW8v+QJ5mzQvdrKI6RLgyAv90c= -----END CERTIFICATE-----Generated at Sun Jun 15 12:11:16 2025 by rpki-client