$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed8d2087-d864-3a44-aa65-6ac95d35a272.roa File: ed8d2087-d864-3a44-aa65-6ac95d35a272.roa (raw, json) Hash identifier: rf0g7NGRPwDfXtCufGzgKSLZR/O97zyDAYhloiFNOIs= Subject key identifier: 5D:FF:4E:24:6F:56:3A:F8:15:5A:C0:AA:B8:72:91:41:D8:81:B0:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3CDC0AA5ACEBE5E5E380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed8d2087-d864-3a44-aa65-6ac95d35a272.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3c:dc:0a:a5:ac:eb:e5:e5:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=28f62e94-0252-4b88-a2ba-c953937542c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:09:62:42:a6:20:89:74:f7:61:87:90:46: cf:29:78:0a:d3:ba:27:8f:0a:16:f8:81:26:26:db: 83:5d:f4:82:d9:9d:0e:c7:f6:26:02:c0:04:e6:81: b8:36:7f:b1:a1:7b:b3:3c:d5:08:77:0d:cc:97:b2: 0f:cb:2e:9d:39:a9:98:57:11:e6:e7:50:2f:a8:73: 37:45:2b:b5:8a:71:1d:ac:36:71:18:7d:60:ea:93: 17:dc:25:c9:99:a9:83:fe:cb:b6:e7:9a:94:0d:51: 51:db:43:d9:cd:97:78:7f:d2:42:f6:e4:af:64:da: 12:72:bb:99:df:b1:5a:a9:4e:c4:ab:3e:63:12:ad: ca:06:ff:6d:c0:a6:29:f5:6d:48:1f:80:53:ee:f6: 50:bf:72:c2:4e:cd:da:57:25:f3:d4:66:50:39:2e: ff:60:47:2d:e9:76:95:6d:ff:45:5d:e6:e1:00:5d: 4d:94:f1:69:bb:5f:3f:cd:36:47:ef:ea:39:32:19: 35:4f:d8:d5:39:7c:f5:5a:39:2a:eb:04:50:c5:03: af:c1:36:03:66:5a:3d:09:b4:fe:b1:3d:b7:3b:c4: 6b:7b:62:7f:fe:a7:38:81:f3:51:04:12:4b:30:7e: 5a:c2:40:70:75:fe:5b:71:3b:6f:64:df:eb:00:d4: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FF:4E:24:6F:56:3A:F8:15:5A:C0:AA:B8:72:91:41:D8:81:B0:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed8d2087-d864-3a44-aa65-6ac95d35a272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:eb:02:ec:13:a3:61:0e:37:71:2a:88:82:cb:1b:5b:59:d9: 27:24:7a:36:7b:f9:67:b6:e6:09:ff:ab:f0:fb:5c:bd:7c:90: 40:fd:81:9d:bc:24:2f:bb:51:c4:f6:8a:9a:42:0e:de:09:9e: 61:52:7d:61:ac:73:9d:d0:56:9c:a2:27:c8:f1:2d:bd:82:74: 98:4b:c5:2e:50:7b:de:c9:cb:6f:24:26:f4:56:b7:5f:d0:96: 4a:45:94:e9:42:df:e3:d4:bd:a4:e1:90:74:71:91:36:e3:b0: 8b:72:b6:ee:3e:41:1d:98:9d:64:6d:d1:3b:4a:8d:e5:b6:f2: 89:05:6c:bb:de:84:ab:dc:bb:a8:ca:d1:31:b0:94:56:a2:d6: 12:bf:ca:95:3a:45:e1:88:d4:48:80:b5:e9:f3:a9:13:6f:0c: 82:ea:d4:30:c3:8c:8c:1a:c5:a6:d1:26:3e:27:a9:0b:d3:93: 77:32:3e:b6:9a:07:44:6c:ed:9d:9e:97:b7:5c:56:be:c1:a1: 2c:c2:a9:29:e3:67:77:00:1b:dc:c9:d4:10:37:d1:cb:e1:61: 5c:be:15:8b:63:21:20:db:94:23:7f:75:d0:f8:6d:29:63:62: 66:cb:09:b7:8c:b8:f0:66:23:13:75:2b:fc:c5:fc:e8:63:3c: 67:29:84:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujzcCqWs6+Xl44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjhmNjJlOTQtMDI1Mi00Yjg4LWEyYmEtYzk1MzkzNzU0MmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx50JYkKmIIl092GHkEbPKXgK07onjwoW+IEm JtuDXfSC2Z0Ox/YmAsAE5oG4Nn+xoXuzPNUIdw3Ml7IPyy6dOamYVxHm51AvqHM3 RSu1inEdrDZxGH1g6pMX3CXJmamD/su255qUDVFR20PZzZd4f9JC9uSvZNoScruZ 37FaqU7Eqz5jEq3KBv9twKYp9W1IH4BT7vZQv3LCTs3aVyXz1GZQOS7/YEct6XaV bf9FXebhAF1NlPFpu18/zTZH7+o5Mhk1T9jVOXz1Wjkq6wRQxQOvwTYDZlo9CbT+ sT23O8Rre2J//qc4gfNRBBJLMH5awkBwdf5bcTtvZN/rANROEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3/TiRvVjr4FVrAqrhykUHYgbADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWQ4ZDIwODctZDg2NC0z YTQ0LWFhNjUtNmFjOTVkMzVhMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPrAuwTo2EON3EqiILLG1tZ2SckejZ7+We25gn/q/D7XL18kED9gZ28 JC+7UcT2ippCDt4JnmFSfWGsc53QVpyiJ8jxLb2CdJhLxS5Qe97Jy28kJvRWt1/Q lkpFlOlC3+PUvaThkHRxkTbjsItytu4+QR2YnWRt0TtKjeW28okFbLvehKvcu6jK 0TGwlFai1hK/ypU6ReGI1EiAtenzqRNvDILq1DDDjIwaxabRJj4nqQvTk3cyPraa B0Rs7Z2el7dcVr7BoSzCqSnjZ3cAG9zJ1BA30cvhYVy+FYtjISDblCN/ddD4bSlj YmbLCbeMuPBmIxN1K/zF/OhjPGcphCk= -----END CERTIFICATE-----Generated at Sun Apr 27 00:51:13 2025 by rpki-client