$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb290644-1c43-32fe-b205-2e470b7fa14b.roa File: fb290644-1c43-32fe-b205-2e470b7fa14b.roa (raw, json) Hash identifier: yPMPyBQHyEYO1YGJt7tm9Zoc8VQbWrMnzkDJ9vJAW/c= Subject key identifier: 40:A2:A0:7E:AA:35:3F:FF:7B:EE:0F:BF:72:A3:68:48:3C:4D:5B:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA08565013E0A9E988BE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb290644-1c43-32fe-b205-2e470b7fa14b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:08:56:50:13:e0:a9:e9:88:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=38c60831-6882-47bb-ad6c-65fd7d8abe56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:da:91:54:81:22:36:21:b6:d1:b0:2b:4c: b7:67:45:98:91:30:98:19:81:be:ea:80:c1:d8:7e: 3e:90:d9:0f:a7:44:f2:48:06:cd:9b:55:8d:b9:2e: 38:79:55:4e:1b:19:16:9c:71:7a:14:c7:58:3f:99: ff:72:68:c7:de:06:e2:4a:e9:4d:29:32:dd:80:f3: 0c:35:f3:9c:33:64:f3:47:7c:4c:5a:1d:cf:e2:bc: 43:c3:6a:10:24:d8:3e:b4:9e:1d:9d:25:9e:80:d2: 73:ff:88:b8:2a:76:c2:1d:17:ff:3c:bf:ac:1a:f7: 62:19:d9:bf:a7:fd:22:f7:0f:6d:7f:e0:7f:c6:a7: 34:ec:f0:50:bb:16:37:0e:a8:ef:ea:bf:94:64:6f: c2:96:dc:96:e4:60:4b:0a:41:3a:d4:f5:fb:bf:0e: 1e:ad:26:92:6d:41:4e:4b:85:ff:ba:7c:26:27:c2: 61:67:1c:a9:f6:96:75:9d:10:42:5e:b6:cc:2c:53: 66:3b:04:e2:36:33:44:26:6c:d1:85:1b:d0:47:cc: a6:57:64:09:34:95:90:da:d5:c4:5b:7b:17:48:96: 3b:29:d8:68:38:00:2b:45:12:f2:dc:97:c2:3e:6c: 39:2d:ed:31:1b:3e:23:40:59:a9:a2:d2:2e:09:4f: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:A0:7E:AA:35:3F:FF:7B:EE:0F:BF:72:A3:68:48:3C:4D:5B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb290644-1c43-32fe-b205-2e470b7fa14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7f:c5:d6:39:7e:ff:33:e2:88:79:e1:21:40:34:75:ce:03: ad:e2:e1:ef:1b:39:64:60:dd:28:d0:72:78:7e:c0:19:b8:35: 58:04:b2:8f:fb:f2:68:d5:b3:96:a1:33:90:ee:be:4b:bc:df: 2b:7d:c7:c9:29:04:ec:12:0d:ff:0d:7b:88:09:3b:24:fe:94: f2:c9:35:b8:3c:a8:1d:8d:80:1a:3d:23:4f:47:87:58:33:a3: 2c:48:22:6d:2b:b1:51:69:d9:8c:5e:ac:8b:c7:e7:f7:18:86: 59:34:6a:23:66:9e:be:dd:f2:1f:81:e7:a3:b3:07:cf:c9:74: 17:72:a7:f7:bf:fd:02:e4:77:28:24:b2:1a:b0:98:35:d1:3e: 0b:fa:b4:93:46:83:73:14:e5:76:b3:cd:cb:53:53:3f:a3:21: 96:74:5d:c3:b9:33:d8:4d:d1:40:ff:0b:2f:0f:a2:c7:72:51: 0a:ac:61:eb:aa:3d:37:2d:52:f6:76:7b:b4:86:36:ee:8b:43: 17:b3:25:0b:03:ed:69:ec:6a:30:54:c6:0d:af:91:de:c6:91: 96:eb:05:f2:80:f7:b8:91:07:e1:44:91:a1:73:77:48:2c:75: a3:32:f5:1a:1f:0b:80:d8:73:1d:9e:47:99:67:60:e6:e9:16: 55:10:17:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkughWUBPgqemIvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzhjNjA4MzEtNjg4Mi00N2JiLWFkNmMtNjVmZDdkOGFiZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiTakVSBIjYhttGwK0y3Z0WYkTCYGYG+6oDB 2H4+kNkPp0TySAbNm1WNuS44eVVOGxkWnHF6FMdYP5n/cmjH3gbiSulNKTLdgPMM NfOcM2TzR3xMWh3P4rxDw2oQJNg+tJ4dnSWegNJz/4i4KnbCHRf/PL+sGvdiGdm/ p/0i9w9tf+B/xqc07PBQuxY3Dqjv6r+UZG/CltyW5GBLCkE61PX7vw4erSaSbUFO S4X/unwmJ8JhZxyp9pZ1nRBCXrbMLFNmOwTiNjNEJmzRhRvQR8ymV2QJNJWQ2tXE W3sXSJY7KdhoOAArRRLy3JfCPmw5Le0xGz4jQFmpotIuCU/CEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECioH6qNT//e+4Pv3KjaEg8TVthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmIyOTA2NDQtMWM0My0z MmZlLWIyMDUtMmU0NzBiN2ZhMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRmpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN/xdY5fv8z4oh54SFANHXOA63i4e8bOWRg3SjQcnh+wBm4NVgEso/7 8mjVs5ahM5Duvku83yt9x8kpBOwSDf8Ne4gJOyT+lPLJNbg8qB2NgBo9I09Hh1gz oyxIIm0rsVFp2YxerIvH5/cYhlk0aiNmnr7d8h+B56OzB8/JdBdyp/e//QLkdygk shqwmDXRPgv6tJNGg3MU5XazzctTUz+jIZZ0XcO5M9hN0UD/Cy8PosdyUQqsYeuq PTctUvZ2e7SGNu6LQxezJQsD7WnsajBUxg2vkd7GkZbrBfKA97iRB+FEkaFzd0gs daMy9RofC4DYcx2eR5lnYObpFlUQF9Q= -----END CERTIFICATE-----Generated at Sun Apr 27 05:40:52 2025 by rpki-client