$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02b2163b-c037-32a6-8454-ad60c66b36a9.roa File: 02b2163b-c037-32a6-8454-ad60c66b36a9.roa (raw, json) Hash identifier: 5d8zEPrxfcGMRXRFKx0i+A6/8AKpdHDzLfw1w9oTx4E= Subject key identifier: 8A:AE:34:DD:DE:1D:60:9A:64:D3:7E:CA:1F:98:B2:E8:C5:C2:B0:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F781BFF70C622A8E84E000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02b2163b-c037-32a6-8454-ad60c66b36a9.roa Signing time: Wed 05 Feb 2025 11:11:27 +0000 ROA not before: Wed 05 Feb 2025 11:11:27 +0000 ROA not after: Tue 06 May 2025 10:11:27 +0000 asID: 30036 IP address blocks: 173.27.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f7:81:bf:f7:0c:62:2a:8e:84:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:11:27 2025 GMT Not After : May 6 10:11:27 2025 GMT Subject: CN=525871a6-31ab-451c-b637-ce1a7166801b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:6e:fa:ca:42:5b:6b:71:47:c7:41:91:ac: d2:0d:07:f6:ce:d1:37:f9:e9:2e:2c:08:c8:62:b0: c0:7a:f6:a6:76:76:70:92:90:b6:13:fd:eb:ee:07: aa:20:a7:c1:e5:90:6a:74:3f:0d:32:be:36:22:29: e9:aa:0c:88:c9:da:91:2d:9c:db:1a:fc:41:93:51: 65:00:8f:a8:73:4b:3a:4f:2d:8a:76:ad:31:ac:52: 9a:5d:f5:dc:79:cd:3f:14:45:0e:7f:a6:22:b0:6a: de:f9:e7:6c:31:2a:d1:5d:1f:82:a5:6c:4c:c0:3b: c5:3a:b2:c8:72:cc:e3:af:db:c0:2c:08:a6:d7:11: de:c5:98:cd:20:57:75:ff:24:64:13:9c:df:ab:d1: 7b:b1:5f:8e:67:be:18:68:ec:b9:dc:fc:40:69:36: 1b:b8:a0:6e:79:b1:54:ed:f8:e4:04:6f:7a:90:16: 35:3c:01:ba:99:4f:da:39:20:af:ed:a4:4c:a7:eb: d6:d2:33:b5:11:51:04:a9:22:cb:8c:19:b0:fa:25: b2:1b:7a:c6:cb:23:ed:f2:a2:3f:a6:ce:19:63:29: 69:85:37:c2:9f:5e:0f:03:a8:ba:48:bd:fc:b8:9f: ff:b0:b8:e8:46:a4:71:8e:68:03:52:61:67:40:e5: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:34:DD:DE:1D:60:9A:64:D3:7E:CA:1F:98:B2:E8:C5:C2:B0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02b2163b-c037-32a6-8454-ad60c66b36a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:fe:e8:13:7f:04:8f:42:02:28:b3:1b:7b:82:7a:29:16:9b: c7:e5:dd:ec:ca:37:63:3f:b5:3d:6e:e8:16:d8:94:b0:67:17: 8e:40:ea:8b:ab:8f:d7:a0:0f:01:3a:51:66:48:1d:19:e4:34: 5c:d9:1d:29:fc:a8:2e:a5:c6:88:7d:c6:a6:46:a9:30:31:35: a5:94:31:7a:02:84:9d:ad:fe:b4:97:48:f9:e7:a5:3d:8e:d9: 78:74:7b:7f:21:94:10:00:b4:27:25:ed:c0:2c:24:27:9d:15: b3:55:4f:7f:58:9e:f4:78:1b:09:90:e7:2d:a5:0f:fc:ec:e5: a6:b8:a6:a5:f3:15:34:5c:d0:bc:c2:d9:62:b6:00:f0:e4:32: e7:4c:5a:5a:58:90:fa:38:30:ba:e5:77:67:ff:d3:a1:f3:e1: ea:0e:7e:ae:45:23:f7:32:61:56:ac:08:63:55:df:48:ba:94: 35:80:d0:1e:01:f5:5c:5c:88:c2:46:64:40:b2:be:d8:f8:4a: 44:8a:25:5d:5a:65:d5:7b:f1:dc:9d:04:f1:69:c8:bc:bb:f9: f0:ee:ac:d8:3c:37:60:9f:32:5e:a6:67:d2:1c:9b:66:5f:35: 0e:b8:60:46:45:15:23:c7:86:b6:c1:7b:e8:a0:39:b0:88:5c: 60:dd:fa:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH94G/9wxiKo6E4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTEyN1oXDTI1MDUwNjEwMTEyN1owLzEtMCsGA1UEAxMk NTI1ODcxYTYtMzFhYi00NTFjLWI2MzctY2UxYTcxNjY4MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveFu+spCW2txR8dBkazSDQf2ztE3+ekuLAjI YrDAevamdnZwkpC2E/3r7geqIKfB5ZBqdD8NMr42IinpqgyIydqRLZzbGvxBk1Fl AI+oc0s6Ty2Kdq0xrFKaXfXcec0/FEUOf6YisGre+edsMSrRXR+CpWxMwDvFOrLI cszjr9vALAim1xHexZjNIFd1/yRkE5zfq9F7sV+OZ74YaOy53PxAaTYbuKBuebFU 7fjkBG96kBY1PAG6mU/aOSCv7aRMp+vW0jO1EVEEqSLLjBmw+iWyG3rGyyPt8qI/ ps4ZYylphTfCn14PA6i6SL38uJ//sLjoRqRxjmgDUmFnQOXldQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIquNN3eHWCaZNN+yh+YsujFwrCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDJiMjE2M2ItYzAzNy0z MmE2LTg0NTQtYWQ2MGM2NmIzNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn+6BN/BI9CAiizG3uCeikWm8fl3ezKN2M/tT1u6BbYlLBnF45A6our j9egDwE6UWZIHRnkNFzZHSn8qC6lxoh9xqZGqTAxNaWUMXoChJ2t/rSXSPnnpT2O 2Xh0e38hlBAAtCcl7cAsJCedFbNVT39YnvR4GwmQ5y2lD/zs5aa4pqXzFTRc0LzC 2WK2APDkMudMWlpYkPo4MLrld2f/06Hz4eoOfq5FI/cyYVasCGNV30i6lDWA0B4B 9VxciMJGZECyvtj4SkSKJV1aZdV78dydBPFpyLy7+fDurNg8N2CfMl6mZ9Icm2Zf NQ64YEZFFSPHhrbBe+igObCIXGDd+os= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:08 2025 by rpki-client