$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa1ad4bd-370a-34c6-b7b9-a70cf3cc27da.roa File: aa1ad4bd-370a-34c6-b7b9-a70cf3cc27da.roa (raw, json) Hash identifier: dISJWeFsc9nbP5QpuGv2c+UihATPOIpgtYgQsgzAAR4= Subject key identifier: 57:31:7A:AB:A0:6A:8F:E8:F3:F8:57:FA:3C:DE:B7:51:3F:1A:86:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5864DA4555F15F650D0EC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa1ad4bd-370a-34c6-b7b9-a70cf3cc27da.roa Signing time: Tue 04 Feb 2025 14:11:44 +0000 ROA not before: Tue 04 Feb 2025 14:11:44 +0000 ROA not after: Mon 05 May 2025 13:11:44 +0000 asID: 30036 IP address blocks: 173.27.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:86:4d:a4:55:5f:15:f6:50:d0:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:11:44 2025 GMT Not After : May 5 13:11:44 2025 GMT Subject: CN=0a497cb0-03be-4c61-b86d-dba82036b573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:ed:7e:2c:f6:86:7e:34:c9:e0:d9:81:53: 9b:6d:a4:a5:1f:fc:b1:5c:99:38:31:31:e7:6a:3d: 56:e4:10:5a:3d:56:49:33:59:84:ff:e7:bf:34:5c: 67:29:8a:2f:9a:69:6a:79:84:42:d8:1f:6e:b5:81: 8e:0a:08:9a:14:5a:08:09:ba:58:e8:b7:20:45:66: 43:6c:ef:98:e1:6a:2b:90:4b:29:af:5e:1d:95:6c: 77:04:65:28:a2:98:c3:e8:13:ea:5e:e4:0f:25:ec: c2:fd:27:b6:5a:8f:15:c0:94:4f:2f:af:62:bc:10: 46:6b:94:e7:71:31:5a:fa:53:cf:5a:95:47:27:27: e1:d8:e3:58:1d:2a:9a:af:d8:a8:0e:9f:01:bf:d3: fc:16:2b:ca:e0:65:75:a0:9a:3e:93:16:25:88:54: ca:98:db:8e:56:16:3d:b4:ef:60:bf:7a:54:5e:6e: d8:c9:59:11:79:06:14:bf:05:85:d7:7e:04:d1:5d: 2c:73:ad:8b:41:f8:28:fb:76:5a:16:a2:12:a5:7a: 89:7a:64:28:8c:41:3f:ed:2d:d9:d6:d9:39:cb:31: 70:0d:a5:86:df:7a:8e:fd:86:ca:21:1b:53:de:06: 74:d3:56:48:e5:ed:ad:00:b2:97:53:32:af:36:2b: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:31:7A:AB:A0:6A:8F:E8:F3:F8:57:FA:3C:DE:B7:51:3F:1A:86:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa1ad4bd-370a-34c6-b7b9-a70cf3cc27da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1c:20:4f:69:01:c2:c4:26:87:ac:60:a0:bd:ec:a9:68:0b: 27:f3:86:8c:35:24:f1:7d:15:3f:e3:3d:09:a3:2c:17:92:cf: 80:07:19:46:12:db:02:a9:f4:7c:6f:a3:32:d9:c9:c4:f3:86: e4:9b:31:d8:1d:0f:c0:9d:4e:3d:02:a6:96:10:96:36:46:f1: 7b:be:ee:21:9a:ba:91:3a:dc:7e:05:44:be:3b:93:3b:9e:31: 0f:f5:19:0a:43:ff:28:97:77:1c:5a:e2:cb:e7:2b:c7:7f:6f: c6:1e:37:20:01:9a:2f:99:a5:7c:38:ab:a4:34:31:9e:2e:69: 9d:96:c8:ec:b6:62:c1:b6:29:8e:03:d4:0b:4c:c2:2e:7c:95: fe:ee:28:eb:f0:78:44:fa:69:0c:14:30:36:2b:a7:90:f6:7b: 08:42:26:ac:52:c9:9b:a6:64:89:16:67:ff:b8:c0:f4:33:55: 55:67:00:bb:fc:5f:91:5b:e0:2d:23:df:20:b3:44:c4:e4:60: f0:5a:ba:14:02:ff:c0:43:84:57:e0:d1:be:ab:b4:68:53:6f: 88:65:bc:7f:b9:5f:ce:64:2f:66:07:97:6b:a5:b8:ce:cf:62: c0:b3:19:5b:43:17:34:4e:ba:0c:6d:9b:e2:3b:03:36:8c:c1: e5:1e:f8:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFhk2kVV8V9lDQ7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MTE0NFoXDTI1MDUwNTEzMTE0NFowLzEtMCsGA1UEAxMk MGE0OTdjYjAtMDNiZS00YzYxLWI4NmQtZGJhODIwMzZiNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn/tfiz2hn40yeDZgVObbaSlH/yxXJk4MTHn aj1W5BBaPVZJM1mE/+e/NFxnKYovmmlqeYRC2B9utYGOCgiaFFoICbpY6LcgRWZD bO+Y4WorkEspr14dlWx3BGUoopjD6BPqXuQPJezC/Se2Wo8VwJRPL69ivBBGa5Tn cTFa+lPPWpVHJyfh2ONYHSqar9ioDp8Bv9P8FivK4GV1oJo+kxYliFTKmNuOVhY9 tO9gv3pUXm7YyVkReQYUvwWF134E0V0sc62LQfgo+3ZaFqISpXqJemQojEE/7S3Z 1tk5yzFwDaWG33qO/YbKIRtT3gZ001ZI5e2tALKXUzKvNisspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcxequgao/o8/hX+jzet1E/GoaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWExYWQ0YmQtMzcwYS0z NGM2LWI3YjktYTcwY2YzY2MyN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0cIE9pAcLEJoesYKC97KloCyfzhow1JPF9FT/jPQmjLBeSz4AHGUYS 2wKp9HxvozLZycTzhuSbMdgdD8CdTj0CppYQljZG8Xu+7iGaupE63H4FRL47kzue MQ/1GQpD/yiXdxxa4svnK8d/b8YeNyABmi+ZpXw4q6Q0MZ4uaZ2WyOy2YsG2KY4D 1AtMwi58lf7uKOvweET6aQwUMDYrp5D2ewhCJqxSyZumZIkWZ/+4wPQzVVVnALv8 X5Fb4C0j3yCzRMTkYPBauhQC/8BDhFfg0b6rtGhTb4hlvH+5X85kL2YHl2uluM7P YsCzGVtDFzROugxtm+I7AzaMweUe+Ag= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:52 2025 by rpki-client