$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a331f637-f0e1-37ee-88f3-5bee758db7ba.roa File: a331f637-f0e1-37ee-88f3-5bee758db7ba.roa (raw, json) Hash identifier: szLaxfun2JeojIJS585KimWrAA3qYTik8wXK7N74NDY= Subject key identifier: 8D:78:11:F8:02:74:56:28:31:D0:3E:6F:4F:FF:7F:B5:16:AC:5D:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57D70315F20B8E6BC46AD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a331f637-f0e1-37ee-88f3-5bee758db7ba.roa Signing time: Tue 04 Feb 2025 13:53:52 +0000 ROA not before: Tue 04 Feb 2025 13:53:52 +0000 ROA not after: Mon 05 May 2025 12:53:52 +0000 asID: 30036 IP address blocks: 173.27.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:70:31:5f:20:b8:e6:bc:46:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:53:52 2025 GMT Not After : May 5 12:53:52 2025 GMT Subject: CN=b9a4cded-3960-4b47-9c9d-552fd20ea661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:1b:9a:6d:a3:df:6a:d3:bc:db:a5:b0:17: 36:fe:f3:bd:a0:e6:bf:06:ab:88:a8:5e:6b:6a:ae: fb:03:74:bc:51:1b:d0:52:9c:a6:bb:5d:1e:0d:72: 1b:b8:16:37:26:f8:17:33:9b:74:fd:75:66:55:0c: cf:be:42:1b:43:65:7c:81:fb:2a:1c:0b:5a:45:1d: f6:06:d4:a1:18:16:ae:b3:6f:a5:6a:c6:27:29:5f: 2c:a9:de:1d:5c:44:1a:e9:f1:4b:c2:4f:1a:dc:2e: a9:9e:05:69:16:20:51:1d:ca:90:a7:fb:9d:a7:ad: 53:88:3f:cc:ea:a5:ad:ed:72:c7:cb:e6:eb:53:b2: c2:2e:e9:7c:8e:43:22:03:39:12:42:55:16:2b:3a: 89:ca:ea:9e:7d:f0:1d:7b:2e:57:39:e1:0e:95:cf: b0:14:27:da:36:07:64:1b:73:c9:70:a8:cb:3c:8d: 56:76:d7:3f:38:13:7a:09:36:9e:91:37:f9:df:93: 58:e5:97:76:ae:64:f1:3c:8f:f6:f5:26:8f:ac:8b: 62:01:fd:ad:38:03:c3:41:d5:b5:ff:ad:40:7b:48: d3:37:c4:50:38:98:8f:97:fb:5e:c6:fd:db:86:d9: 59:c8:c2:68:13:03:58:55:ad:ac:d1:13:12:1e:ad: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:78:11:F8:02:74:56:28:31:D0:3E:6F:4F:FF:7F:B5:16:AC:5D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a331f637-f0e1-37ee-88f3-5bee758db7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1f:e7:c7:e1:fd:db:2c:40:87:a5:01:9a:33:e4:00:ed:94: b8:6b:94:1b:8a:17:cf:ea:22:16:3f:2c:51:1a:9f:d7:09:1b: 8a:07:7f:b2:79:ac:74:9f:7a:15:29:61:16:00:88:fc:16:57: 45:92:50:91:99:85:3c:35:6c:58:d1:82:c6:84:81:d0:5d:37: 8a:13:31:ff:ef:d7:51:15:bd:e0:3a:d1:9d:86:2d:e5:16:42: 0a:a7:16:b5:89:bc:c2:4b:e1:be:db:ac:45:f5:9b:eb:5f:06: 20:8a:c3:5b:0a:57:61:2b:bd:00:52:7f:28:f4:8d:3a:20:30: 64:14:9f:5e:5f:42:09:8a:71:18:3c:03:cb:5d:8d:8d:4f:05: c8:89:7f:1c:83:f8:0d:00:71:0f:84:d9:20:26:94:92:e6:7d: 24:44:5e:aa:53:36:9f:b0:3f:1b:42:7d:52:5a:ff:70:70:a8: c8:76:c1:43:1a:85:6f:90:f6:d9:4f:c6:a1:64:66:c1:3e:2d: 8a:48:50:77:61:b9:ac:8f:00:aa:5f:c7:41:c4:b8:fc:77:03: 45:fb:72:90:b4:6f:21:57:4c:81:9a:b2:b2:1c:13:5b:5b:60: 00:c4:87:90:01:33:b5:18:d8:03:b4:a2:81:ae:29:cb:9c:52: 76:e0:0e:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfXAxXyC45rxGrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTM1MloXDTI1MDUwNTEyNTM1MlowLzEtMCsGA1UEAxMk YjlhNGNkZWQtMzk2MC00YjQ3LTljOWQtNTUyZmQyMGVhNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZMbmm2j32rTvNulsBc2/vO9oOa/BquIqF5r aq77A3S8URvQUpymu10eDXIbuBY3JvgXM5t0/XVmVQzPvkIbQ2V8gfsqHAtaRR32 BtShGBaus2+lasYnKV8sqd4dXEQa6fFLwk8a3C6pngVpFiBRHcqQp/udp61TiD/M 6qWt7XLHy+brU7LCLul8jkMiAzkSQlUWKzqJyuqeffAdey5XOeEOlc+wFCfaNgdk G3PJcKjLPI1Wdtc/OBN6CTaekTf535NY5Zd2rmTxPI/29SaPrItiAf2tOAPDQdW1 /61Ae0jTN8RQOJiPl/texv3bhtlZyMJoEwNYVa2s0RMSHq1GQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI14EfgCdFYoMdA+b0//f7UWrF3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTMzMWY2MzctZjBlMS0z N2VlLTg4ZjMtNWJlZTc1OGRiN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADof58fh/dssQIelAZoz5ADtlLhrlBuKF8/qIhY/LFEan9cJG4oHf7J5 rHSfehUpYRYAiPwWV0WSUJGZhTw1bFjRgsaEgdBdN4oTMf/v11EVveA60Z2GLeUW QgqnFrWJvMJL4b7brEX1m+tfBiCKw1sKV2ErvQBSfyj0jTogMGQUn15fQgmKcRg8 A8tdjY1PBciJfxyD+A0AcQ+E2SAmlJLmfSREXqpTNp+wPxtCfVJa/3BwqMh2wUMa hW+Q9tlPxqFkZsE+LYpIUHdhuayPAKpfx0HEuPx3A0X7cpC0byFXTIGasrIcE1tb YADEh5ABM7UY2AO0ooGuKcucUnbgDqQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:44 2025 by rpki-client