$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee003065-2f49-3d45-abf4-8d08119d5782.roa File: ee003065-2f49-3d45-abf4-8d08119d5782.roa (raw, json) Hash identifier: tebIhhrMW81OdaElzhLpKcRibTIkUOoRONFqGWgpgsY= Subject key identifier: 3A:F2:10:9D:E9:EA:71:90:8C:CD:77:2D:AA:1E:4E:13:21:A1:C4:E8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA05FF3F8200BA25C6A520 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee003065-2f49-3d45-abf4-8d08119d5782.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:05:ff:3f:82:00:ba:25:c6:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=31e3b2a6-b0ba-4790-8864-846c9448348f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:99:5e:95:83:04:26:44:9d:22:36:fb:d3: 23:4d:54:d7:97:b5:9a:15:7b:f1:4c:9c:df:bd:8c: bc:01:44:5b:cb:b4:d4:4b:94:34:56:1e:d2:4a:c4: b1:d6:2f:fa:e8:9c:5c:a3:0b:37:e0:c4:70:57:d4: e5:96:52:0d:6c:c9:2e:30:15:d1:e9:c2:24:47:ad: f8:82:de:c4:a4:cf:91:84:08:c2:07:67:0d:37:f2: 79:44:2f:3f:36:bb:f9:f6:aa:dd:76:51:97:12:8d: a6:20:bf:e1:72:b9:88:85:c1:34:cd:27:d6:64:0e: 65:15:14:55:f1:aa:fd:7e:de:86:b3:19:95:ef:28: 55:cf:73:3d:72:10:e3:35:8f:0e:31:e4:dd:87:d4: 01:36:83:8e:ee:3f:a0:ec:0a:60:3b:69:c4:49:de: b1:25:9a:b6:a4:5b:a1:06:2d:dc:38:3a:36:a8:42: 89:1f:b4:a7:fb:78:91:a8:72:10:79:eb:93:14:32: 6c:69:44:90:8b:04:f0:5b:c0:35:0d:0f:b0:19:28: 75:24:a1:db:3f:57:6d:f0:52:27:24:af:00:75:51: 5b:86:6d:c3:3e:77:38:0b:8f:e9:f0:cb:1a:07:1d: a3:77:fd:df:27:81:f7:e7:1b:86:39:d8:36:a9:5c: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:10:9D:E9:EA:71:90:8C:CD:77:2D:AA:1E:4E:13:21:A1:C4:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee003065-2f49-3d45-abf4-8d08119d5782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c1:89:c1:70:e1:89:01:24:4a:f5:b7:bc:89:aa:79:e7:22: dc:bb:2a:a4:1d:e2:05:b2:b5:8b:48:51:35:6f:ec:d1:45:a6: 66:2c:b2:9d:0d:36:fc:89:1c:a2:79:b4:52:f3:38:42:4d:cd: e7:2a:5f:b9:48:22:a8:60:22:60:57:5c:41:07:e6:2a:5e:4b: 82:e8:81:f9:d1:a6:6f:b6:03:16:2f:b9:1b:63:dd:6d:70:46: 4b:b3:77:f9:82:79:03:69:5c:46:9f:dc:5d:b5:3d:8b:82:46: db:66:bb:ab:23:85:63:e8:94:c0:fb:f2:11:73:1e:b5:80:f1: 51:a8:74:84:dd:be:39:e3:72:9b:56:dd:7f:29:f6:e1:3b:ce: f9:dd:ec:ba:73:83:35:61:17:d5:08:7e:8b:12:ff:a0:fd:31: 42:4d:e0:06:4f:be:b0:7c:5a:d3:8e:88:8c:6e:ac:01:e0:0b: 3f:36:17:8e:db:00:55:5e:be:b2:b3:e8:85:6c:6e:9c:14:99: 75:cb:3a:50:86:00:64:0b:c3:6f:40:30:43:27:27:12:79:2a: d8:2e:37:f6:15:79:e9:47:fe:96:67:aa:74:39:56:21:7c:46: 1e:41:ec:bc:2f:8a:9a:a6:e7:34:58:dd:c4:4f:18:7c:6b:cc: 87:09:d8:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugX/P4IAuiXGpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzFlM2IyYTYtYjBiYS00NzkwLTg4NjQtODQ2Yzk0NDgzNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsmZXpWDBCZEnSI2+9MjTVTXl7WaFXvxTJzf vYy8AURby7TUS5Q0Vh7SSsSx1i/66Jxcows34MRwV9TlllINbMkuMBXR6cIkR634 gt7EpM+RhAjCB2cNN/J5RC8/Nrv59qrddlGXEo2mIL/hcrmIhcE0zSfWZA5lFRRV 8ar9ft6GsxmV7yhVz3M9chDjNY8OMeTdh9QBNoOO7j+g7ApgO2nESd6xJZq2pFuh Bi3cODo2qEKJH7Sn+3iRqHIQeeuTFDJsaUSQiwTwW8A1DQ+wGSh1JKHbP1dt8FIn JK8AdVFbhm3DPnc4C4/p8MsaBx2jd/3fJ4H35xuGOdg2qVycGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDryEJ3p6nGQjM13LaoeThMhocToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWUwMDMwNjUtMmY0OS0z ZDQ1LWFiZjQtOGQwODExOWQ1NzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvBicFw4YkBJEr1t7yJqnnnIty7KqQd4gWytYtIUTVv7NFFpmYssp0N NvyJHKJ5tFLzOEJNzecqX7lIIqhgImBXXEEH5ipeS4LogfnRpm+2AxYvuRtj3W1w Rkuzd/mCeQNpXEaf3F21PYuCRttmu6sjhWPolMD78hFzHrWA8VGodITdvjnjcptW 3X8p9uE7zvnd7LpzgzVhF9UIfosS/6D9MUJN4AZPvrB8WtOOiIxurAHgCz82F47b AFVevrKz6IVsbpwUmXXLOlCGAGQLw29AMEMnJxJ5KtguN/YVeelH/pZnqnQ5ViF8 Rh5B7Lwvipqm5zRY3cRPGHxrzIcJ2Gk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:57:58 2025 by rpki-client