$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfd111dd-ea53-35e8-8367-67847a6f7bea.roa File: dfd111dd-ea53-35e8-8367-67847a6f7bea.roa (raw, json) Hash identifier: u45VPFwMqZjN9ZRI9yZ6jXaI+aIURU/lhrQQZYy56hY= Subject key identifier: DD:13:EA:38:5E:2D:1F:74:2E:E7:66:FF:56:25:07:68:E7:1F:29:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2087C61132980C73FE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfd111dd-ea53-35e8-8367-67847a6f7bea.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:20:87:c6:11:32:98:0c:73:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c8382ae7-7524-4ec3-bc84-a028d40da131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fb:c8:5e:da:6a:0c:b1:a9:42:b7:81:a6:ba: 52:97:14:82:d6:57:47:0f:bb:d1:ef:46:80:d3:6c: e9:50:1b:bd:5c:d2:15:df:d5:a2:d5:51:fc:b7:74: 01:62:ac:8b:35:b1:eb:f2:88:ae:87:38:a6:fb:63: 97:f9:e5:f4:0b:dc:8a:e6:6c:10:bc:dd:c6:63:c0: b2:49:0f:33:cd:0e:fc:24:b9:b5:64:4f:28:f4:84: b4:a2:cb:dc:28:9f:9b:d0:74:83:10:72:17:08:43: 4a:d3:ff:b1:8b:6a:7c:ba:b9:78:a2:26:87:e4:b4: 68:84:3e:73:10:25:8e:41:d4:d0:11:9c:0c:19:a1: 1e:58:03:cd:8c:79:bb:df:80:1d:ff:e1:8f:3a:5f: c2:29:56:ea:cc:1c:55:63:7e:73:9a:8a:b8:f3:6b: f0:9b:54:f2:0d:5a:01:88:99:e9:58:49:54:eb:2a: c3:3e:11:50:97:d1:7d:e6:e4:da:9c:44:c2:3d:23: d3:d9:04:bf:b3:78:d3:d9:2c:0e:6e:08:4c:1b:d1: 68:6d:a2:40:77:7c:99:26:58:75:70:0d:3d:c3:47: 0d:b7:e7:be:00:5c:2c:94:f1:0a:ca:26:eb:a2:38: 46:a6:37:bd:57:a8:f2:0a:0e:e8:5e:38:50:78:c5: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:13:EA:38:5E:2D:1F:74:2E:E7:66:FF:56:25:07:68:E7:1F:29:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfd111dd-ea53-35e8-8367-67847a6f7bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:95:38:09:83:42:6b:a7:90:ce:92:f2:84:e2:05:ae:54:3d: 02:4b:12:59:4f:14:d2:d3:84:04:dd:43:71:42:b6:8f:56:40: 04:7e:e3:0a:73:11:58:5b:a5:65:9c:f1:67:58:ce:d8:ce:4d: 91:15:63:a2:e9:6b:c6:cc:bc:d9:10:49:76:98:42:0c:73:99: 3f:1b:f2:aa:7a:20:6d:a9:5d:07:67:74:74:12:a8:0d:4f:46: 1e:05:ba:a9:0a:95:59:cb:11:9d:d3:04:4e:f0:01:b2:6a:cd: 04:cb:c9:01:0e:cd:4f:b2:13:6e:87:0b:4e:16:ce:62:ba:9d: 51:ff:29:bc:e3:95:9a:d9:c8:bf:9d:12:eb:1b:b0:f6:67:8c: f6:1f:b1:d8:64:5b:63:a9:ef:6e:d7:8e:64:4b:d7:8a:61:6e: a5:13:6f:81:bd:46:5d:ad:ba:8d:99:e9:e9:fd:00:64:9a:f1: a7:6f:a7:06:d0:06:02:27:f8:17:64:68:a7:de:48:98:e6:d7: 8f:19:29:ed:7f:68:27:cb:bc:95:72:45:b0:d6:e9:26:27:69: b1:94:58:e5:24:d5:b1:26:dd:eb:e1:88:66:39:b1:a3:85:70: 3d:38:3d:9a:4c:09:05:c1:d7:e8:67:83:36:59:b1:43:9e:cb: 1c:e3:0a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuiCHxhEymAxz/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzgzODJhZTctNzUyNC00ZWMzLWJjODQtYTAyOGQ0MGRhMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vvIXtpqDLGpQreBprpSlxSC1ldHD7vR70aA 02zpUBu9XNIV39Wi1VH8t3QBYqyLNbHr8oiuhzim+2OX+eX0C9yK5mwQvN3GY8Cy SQ8zzQ78JLm1ZE8o9IS0osvcKJ+b0HSDEHIXCENK0/+xi2p8url4oiaH5LRohD5z ECWOQdTQEZwMGaEeWAPNjHm734Ad/+GPOl/CKVbqzBxVY35zmoq482vwm1TyDVoB iJnpWElU6yrDPhFQl9F95uTanETCPSPT2QS/s3jT2SwObghMG9FobaJAd3yZJlh1 cA09w0cNt+e+AFwslPEKyibrojhGpje9V6jyCg7oXjhQeMUqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0T6jheLR90Ludm/1YlB2jnHyk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGZkMTExZGQtZWE1My0z NWU4LTgzNjctNjc4NDdhNmY3YmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeVOAmDQmunkM6S8oTiBa5UPQJLEllPFNLThATdQ3FCto9WQAR+4wpz EVhbpWWc8WdYztjOTZEVY6Lpa8bMvNkQSXaYQgxzmT8b8qp6IG2pXQdndHQSqA1P Rh4FuqkKlVnLEZ3TBE7wAbJqzQTLyQEOzU+yE26HC04WzmK6nVH/KbzjlZrZyL+d EusbsPZnjPYfsdhkW2Op727XjmRL14phbqUTb4G9Rl2tuo2Z6en9AGSa8advpwbQ BgIn+BdkaKfeSJjm148ZKe1/aCfLvJVyRbDW6SYnabGUWOUk1bEm3evhiGY5saOF cD04PZpMCQXB1+hngzZZsUOeyxzjCqs= -----END CERTIFICATE-----Generated at Sun Apr 27 11:20:30 2025 by rpki-client