$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffd11ab3-1d09-3517-978d-293caf56f984.roa File: ffd11ab3-1d09-3517-978d-293caf56f984.roa (raw, json) Hash identifier: XLmADMJ5xoBFbJ+1INZai0H2gJehaxcQkrfrQc3lBF8= Subject key identifier: 51:99:B6:01:CE:CF:6E:05:09:0F:9E:8F:9A:75:30:15:CF:CA:0C:EE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA36D53459212F170E9440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffd11ab3-1d09-3517-978d-293caf56f984.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.30.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:36:d5:34:59:21:2f:17:0e:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5b4e9de7-242a-48a3-a3c0-48f661441930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:30:ac:49:15:be:b0:fb:18:0a:9a:c7:f9: 2b:b6:63:07:2f:36:fb:56:c6:6e:56:d2:56:54:64: cc:6b:5b:e1:d4:7b:06:14:4c:72:48:0d:71:27:fa: 65:58:8f:80:c5:9a:50:22:83:1c:07:e3:d7:f0:3d: 5f:60:df:64:b5:ed:65:44:c1:46:6b:5d:e5:8b:00: cf:22:44:3e:86:11:87:c6:3c:22:e4:0b:df:b7:bc: e5:b3:8e:81:b8:8d:46:90:e2:0f:73:f3:30:95:e9: 78:62:ec:15:aa:51:ed:4e:5d:71:71:48:cd:3a:f6: 3c:d0:cd:46:b8:e5:fa:d0:c6:e3:1e:54:13:8f:e3: 98:75:ca:50:2c:33:2e:e2:6f:16:80:45:69:a2:72: 7f:a7:db:b1:20:e9:03:a7:03:6e:8b:53:4e:fd:85: 96:21:1d:50:e3:f9:bf:91:e8:66:b3:f3:a4:ab:a4: ac:7e:a1:b0:7d:78:e5:91:ef:57:06:b0:59:4c:d5: c8:3b:87:58:84:20:9d:e4:cf:a8:23:95:d0:89:26: 31:72:48:fe:ff:17:7d:35:21:c4:f2:f2:21:b0:cd: 10:1d:74:e2:67:aa:70:ab:cc:15:fb:9b:df:f0:87: bd:e6:8a:03:00:81:05:39:65:d0:83:de:7d:2e:97: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:99:B6:01:CE:CF:6E:05:09:0F:9E:8F:9A:75:30:15:CF:CA:0C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffd11ab3-1d09-3517-978d-293caf56f984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:93:3d:42:27:e4:cf:bf:53:a8:16:94:b9:83:71:95:02:bf: 2b:a5:88:48:38:c3:97:93:c6:ef:fe:86:21:4a:21:ad:a2:39: a4:58:fd:d1:01:9c:df:0b:3b:f3:88:03:ff:50:91:d3:a4:9f: 47:ec:d1:16:57:f4:d9:d5:6c:2b:ef:30:dd:18:a3:e9:d3:ae: e9:e9:46:67:92:a1:1b:ef:f3:59:32:47:da:10:68:4c:ba:7c: 62:8d:d8:ce:c5:7d:68:56:9c:07:ea:b9:2d:32:47:f6:7f:47: 10:60:dc:4e:f4:c2:12:94:33:79:17:97:9b:b7:f7:fc:e9:73: 2c:dc:5b:77:b8:5a:2b:bb:8c:ac:ad:cb:95:2a:76:34:e2:32: af:73:8a:d3:74:8e:a6:d0:77:70:9b:c6:a9:3b:54:66:02:f7: f6:7e:d3:d5:a1:cc:63:82:5b:a5:22:c9:69:84:6f:74:28:50: b5:dd:9b:f4:f9:3e:79:eb:08:c2:59:23:66:99:0e:f5:62:dd: 9a:b2:cb:6a:d4:f7:a1:38:9c:63:57:ad:e6:61:2e:70:c2:64: d8:1d:6a:71:19:68:3b:c1:99:64:04:a2:bd:26:d8:f6:34:6e: 19:1b:d6:b6:f3:1c:34:4c:3f:71:a0:19:a1:39:be:9f:38:aa: c6:49:1e:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujbVNFkhLxcOlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWI0ZTlkZTctMjQyYS00OGEzLWEzYzAtNDhmNjYxNDQxOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTYwrEkVvrD7GAqax/krtmMHLzb7VsZuVtJW VGTMa1vh1HsGFExySA1xJ/plWI+AxZpQIoMcB+PX8D1fYN9kte1lRMFGa13liwDP IkQ+hhGHxjwi5Avft7zls46BuI1GkOIPc/Mwlel4YuwVqlHtTl1xcUjNOvY80M1G uOX60MbjHlQTj+OYdcpQLDMu4m8WgEVponJ/p9uxIOkDpwNui1NO/YWWIR1Q4/m/ kehms/Okq6SsfqGwfXjlke9XBrBZTNXIO4dYhCCd5M+oI5XQiSYxckj+/xd9NSHE 8vIhsM0QHXTiZ6pwq8wV+5vf8Ie95ooDAIEFOWXQg959LpfgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGZtgHOz24FCQ+ej5p1MBXPygzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZkMTFhYjMtMWQwOS0z NTE3LTk3OGQtMjkzY2FmNTZmOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR71MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaTPUIn5M+/U6gWlLmDcZUCvyuliEg4w5eTxu/+hiFKIa2iOaRY/dEB nN8LO/OIA/9QkdOkn0fs0RZX9NnVbCvvMN0Yo+nTrunpRmeSoRvv81kyR9oQaEy6 fGKN2M7FfWhWnAfquS0yR/Z/RxBg3E70whKUM3kXl5u39/zpcyzcW3e4Wiu7jKyt y5UqdjTiMq9zitN0jqbQd3Cbxqk7VGYC9/Z+09WhzGOCW6UiyWmEb3QoULXdm/T5 PnnrCMJZI2aZDvVi3Zqyy2rU96E4nGNXreZhLnDCZNgdanEZaDvBmWQEor0m2PY0 bhkb1rbzHDRMP3GgGaE5vp84qsZJHuA= -----END CERTIFICATE-----Generated at Mon Apr 28 02:16:08 2025 by rpki-client