$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529b29f6-454a-3116-a0c5-2b5d209db581.roa File: 529b29f6-454a-3116-a0c5-2b5d209db581.roa (raw, json) Hash identifier: +JFF1Ap2yCY4u0ruxuNLlmXH5oipA8X2VNDzpvo+aVE= Subject key identifier: 24:05:8C:C9:02:7F:86:49:45:C7:6A:B9:52:2A:4F:45:93:12:08:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C532C88893BD74FEBAA1CB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529b29f6-454a-3116-a0c5-2b5d209db581.roa Signing time: Tue 04 Feb 2025 11:23:27 +0000 ROA not before: Tue 04 Feb 2025 11:23:27 +0000 ROA not after: Mon 05 May 2025 10:23:27 +0000 asID: 30036 IP address blocks: 150.195.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:32:c8:88:93:bd:74:fe:ba:a1:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:23:27 2025 GMT Not After : May 5 10:23:27 2025 GMT Subject: CN=a02eb1a5-a281-4edc-9520-fe28b7009f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:d1:a3:de:74:eb:38:5b:06:d8:0c:be:e2: 57:47:cd:ed:71:fb:97:6f:50:e0:3d:5a:c4:76:9d: 4c:73:82:b3:1a:97:13:48:b4:f2:29:1c:8a:42:53: 37:39:f8:42:f5:8e:74:d1:6f:76:ee:6f:d0:ea:91: cf:d8:f3:aa:cc:53:fb:8b:6b:08:85:d5:3c:26:63: fa:62:d2:15:29:a6:86:e9:c1:0d:75:b8:88:fe:cc: 2b:b7:71:b3:1e:4b:08:93:98:f6:ce:41:60:be:23: 63:a8:b7:55:35:9d:03:58:6b:50:fc:f3:c8:a9:12: 54:8f:cb:3d:1c:0a:44:d5:ec:c9:40:27:a8:58:7d: ba:1a:b0:78:d3:64:1b:c1:9f:b9:e2:47:7c:84:4f: f7:b3:66:b8:03:11:6c:2f:cc:56:c0:86:bf:f4:0d: a7:95:1e:ce:2b:3f:7c:10:b1:f1:c2:f6:4f:19:68: c3:6a:a6:24:f6:4f:e3:5a:31:02:c3:4d:9f:d1:4d: 08:8f:24:6a:8f:ab:98:03:3e:4d:91:22:c2:a4:63: da:0e:60:1e:96:f7:85:0c:cf:f6:98:24:19:e5:ec: 1d:a6:16:c5:95:b5:9d:b8:5c:db:30:72:7f:b7:08: 58:f6:6b:09:2c:53:8d:56:dc:65:f3:66:46:d6:df: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:05:8C:C9:02:7F:86:49:45:C7:6A:B9:52:2A:4F:45:93:12:08:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529b29f6-454a-3116-a0c5-2b5d209db581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:17:54:81:b2:29:c9:b5:f2:f0:57:24:af:c5:42:c0:95:38: 84:b2:0c:d9:ab:e9:d8:4f:62:b6:55:2c:8f:fd:36:af:15:e8: c8:20:87:2f:1b:0f:44:55:d5:2a:2c:28:2c:85:4d:0a:da:44: d6:ee:5b:32:0c:ef:50:53:de:c1:39:9b:3c:7e:42:5f:ca:3d: da:ba:ee:5b:76:93:7c:45:97:eb:95:3b:ad:1a:d2:c9:f3:29: 99:13:be:c4:11:53:d9:05:eb:01:df:f2:78:d9:d5:89:1c:d8: cd:d0:c5:2a:09:01:fd:a6:84:1d:5b:e9:8b:bc:e0:d8:a2:81: d8:e5:21:b5:77:a1:f5:d1:51:5d:c4:e8:2d:c8:ce:da:cb:72: fb:18:0f:8e:c4:17:dd:0e:ec:f5:25:85:8c:9f:04:33:cc:40: be:c4:5a:61:17:b4:31:30:43:69:6c:62:72:b7:b9:1b:0c:2d: 92:a0:64:8b:27:68:c0:21:c3:02:14:38:99:27:e5:68:2f:a6: 18:cd:2d:5b:c4:1b:f6:8d:12:95:f8:77:6a:87:13:4a:2d:27: 2c:b9:39:b9:55:66:04:a2:ce:99:b1:76:a7:47:71:fe:23:8e: 2a:cc:10:d2:da:72:f3:95:c3:67:05:c8:ab:e0:42:c3:87:77: 72:80:d0:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFMsiIk710/rqhywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjMyN1oXDTI1MDUwNTEwMjMyN1owLzEtMCsGA1UEAxMk YTAyZWIxYTUtYTI4MS00ZWRjLTk1MjAtZmUyOGI3MDA5Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTTRo9506zhbBtgMvuJXR83tcfuXb1DgPVrE dp1Mc4KzGpcTSLTyKRyKQlM3OfhC9Y500W927m/Q6pHP2POqzFP7i2sIhdU8JmP6 YtIVKaaG6cENdbiI/swrt3GzHksIk5j2zkFgviNjqLdVNZ0DWGtQ/PPIqRJUj8s9 HApE1ezJQCeoWH26GrB402QbwZ+54kd8hE/3s2a4AxFsL8xWwIa/9A2nlR7OKz98 ELHxwvZPGWjDaqYk9k/jWjECw02f0U0IjyRqj6uYAz5NkSLCpGPaDmAelveFDM/2 mCQZ5ewdphbFlbWduFzbMHJ/twhY9msJLFONVtxl82ZG1t9bjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQFjMkCf4ZJRcdquVIqT0WTEggAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTI5YjI5ZjYtNDU0YS0z MTE2LWEwYzUtMmI1ZDIwOWRiNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsMaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYXVIGyKcm18vBXJK/FQsCVOISyDNmr6dhPYrZVLI/9Nq8V6Mgghy8b D0RV1SosKCyFTQraRNbuWzIM71BT3sE5mzx+Ql/KPdq67lt2k3xFl+uVO60a0snz KZkTvsQRU9kF6wHf8njZ1Ykc2M3QxSoJAf2mhB1b6Yu84NiigdjlIbV3ofXRUV3E 6C3IztrLcvsYD47EF90O7PUlhYyfBDPMQL7EWmEXtDEwQ2lsYnK3uRsMLZKgZIsn aMAhwwIUOJkn5WgvphjNLVvEG/aNEpX4d2qHE0otJyy5OblVZgSizpmxdqdHcf4j jirMENLacvOVw2cFyKvgQsOHd3KA0PY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:54 2025 by rpki-client