$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/059a2a68-e0e4-32ed-b1d1-8d684f4856f1.roa File: 059a2a68-e0e4-32ed-b1d1-8d684f4856f1.roa (raw, json) Hash identifier: jPsfFhyrUuBbTdEZMJZXXeX3mjK4ATQ8pSf/rCmqT7M= Subject key identifier: 78:5F:12:21:67:1E:01:25:D3:77:E3:EB:FB:88:9B:B7:4D:C4:FF:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848D8E2605558A7F8DD6CB48D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/059a2a68-e0e4-32ed-b1d1-8d684f4856f1.roa Signing time: Tue 11 Feb 2025 12:37:37 +0000 ROA not before: Tue 11 Feb 2025 12:37:37 +0000 ROA not after: Mon 12 May 2025 11:37:37 +0000 asID: 30036 IP address blocks: 173.27.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d8:e2:60:55:58:a7:f8:dd:6c:b4:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 11 12:37:37 2025 GMT Not After : May 12 11:37:37 2025 GMT Subject: CN=45adb868-c296-4935-a406-10997a6871b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:68:f5:7c:c0:4c:f5:9c:71:7c:04:3a:36: aa:65:cd:eb:dd:62:c1:97:1e:80:42:c1:23:93:c9: 21:05:41:54:aa:63:3b:49:8e:e8:b2:cb:bd:c7:bf: da:b0:f7:db:b9:39:38:c9:9e:09:0f:60:12:13:8b: ec:f7:cb:ba:5a:a1:42:b0:da:d6:e9:04:a0:b4:d5: 07:6f:31:15:f0:6e:2d:49:12:32:6e:5d:2c:80:7e: f6:1c:b2:fe:82:68:78:3f:ca:5a:89:3e:9b:4b:3d: b0:5f:71:24:bd:26:d7:61:fa:32:31:70:d4:f6:84: bb:69:db:64:50:eb:99:62:12:bc:f5:40:8f:8e:30: 73:a9:b9:1b:7b:14:bb:2b:05:5a:11:b0:6b:d3:c0: b3:fa:59:f8:35:8b:f3:1b:81:cc:82:f3:ad:ed:bd: 3b:31:bc:87:2d:01:c1:c4:89:a9:f9:d7:a3:2a:4c: 33:d8:ab:50:78:58:b3:73:9f:71:80:aa:f0:04:68: b5:a5:8e:89:95:7d:ab:b0:9d:f7:90:27:dc:eb:d8: df:1f:b6:ac:fb:42:b5:af:f7:3f:ac:05:74:fc:9f: d9:9b:2c:a7:15:47:12:0c:36:40:54:fb:d2:c8:d1: 4a:1e:db:b3:e7:9a:dc:a4:39:bb:21:cf:53:3d:d7: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5F:12:21:67:1E:01:25:D3:77:E3:EB:FB:88:9B:B7:4D:C4:FF:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/059a2a68-e0e4-32ed-b1d1-8d684f4856f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:70:48:af:b5:ce:9c:a2:44:4f:7a:ba:bb:56:ba:d4:f5:1e: 95:48:8a:dd:ac:57:b5:f3:12:4d:58:de:47:81:43:8c:90:f3: 84:25:a3:e4:7b:03:d8:fb:94:7a:6f:bb:69:bb:4f:e8:32:43: 1e:fc:29:cf:17:ed:59:a8:11:2d:71:a3:b4:cb:d5:59:1f:43: 52:7d:0f:18:bc:07:30:9b:bb:6e:d6:b5:33:ce:5d:84:9d:99: fb:fc:33:1c:7f:c2:ac:69:7f:59:7c:17:2b:b6:36:00:69:2b: 43:41:ed:24:d5:f6:4a:b0:08:01:89:f7:4e:2e:50:50:79:53: ab:9a:04:5b:52:b9:ca:61:09:5a:18:f4:95:91:a7:c8:81:63: 66:a4:6b:3f:5f:97:0b:23:7d:e2:bf:43:1b:96:01:54:e3:49: 02:d2:cb:91:78:76:c3:cb:9f:6b:e9:ea:b8:6a:f0:a0:de:f7: 64:d5:dc:d0:33:9e:89:63:fd:6b:69:f8:0c:94:70:de:c4:f1: 17:20:d0:41:b4:e3:7a:91:bc:2e:b3:1a:12:e7:13:16:aa:99: 8d:85:ae:8c:15:05:86:8f:2d:1d:90:21:f8:45:19:3a:a3:d4: fc:d7:1b:b8:57:46:56:aa:a8:8d:46:1c:d8:b9:62:44:71:17: ff:db:f9:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjY4mBVWKf43Wy0jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIxMTEyMzczN1oXDTI1MDUxMjExMzczN1owLzEtMCsGA1UEAxMk NDVhZGI4NjgtYzI5Ni00OTM1LWE0MDYtMTA5OTdhNjg3MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK1o9XzATPWccXwEOjaqZc3r3WLBlx6AQsEj k8khBUFUqmM7SY7ossu9x7/asPfbuTk4yZ4JD2ASE4vs98u6WqFCsNrW6QSgtNUH bzEV8G4tSRIybl0sgH72HLL+gmh4P8paiT6bSz2wX3EkvSbXYfoyMXDU9oS7adtk UOuZYhK89UCPjjBzqbkbexS7KwVaEbBr08Cz+ln4NYvzG4HMgvOt7b07MbyHLQHB xImp+dejKkwz2KtQeFizc59xgKrwBGi1pY6JlX2rsJ33kCfc69jfH7as+0K1r/c/ rAV0/J/ZmyynFUcSDDZAVPvSyNFKHtuz55rcpDm7Ic9TPdd+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhfEiFnHgEl03fj6/uIm7dNxP/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDU5YTJhNjgtZTBlNC0z MmVkLWIxZDEtOGQ2ODRmNDg1NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJwSK+1zpyiRE96urtWutT1HpVIit2sV7XzEk1Y3keBQ4yQ84Qlo+R7 A9j7lHpvu2m7T+gyQx78Kc8X7VmoES1xo7TL1VkfQ1J9Dxi8BzCbu27WtTPOXYSd mfv8Mxx/wqxpf1l8Fyu2NgBpK0NB7STV9kqwCAGJ904uUFB5U6uaBFtSucphCVoY 9JWRp8iBY2akaz9flwsjfeK/QxuWAVTjSQLSy5F4dsPLn2vp6rhq8KDe92TV3NAz nolj/Wtp+AyUcN7E8Rcg0EG043qRvC6zGhLnExaqmY2FrowVBYaPLR2QIfhFGTqj 1PzXG7hXRlaqqI1GHNi5YkRxF//b+Xo= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:39 2025 by rpki-client