$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa File: b2a8b3f6-bded-3677-b401-499c1139fa37.roa (raw, json) Hash identifier: pznXIlH2OLK2oh9KpFda3GXG1OaVdrj9RUgGi/xQcMI= Subject key identifier: 32:7C:81:F8:C3:45:EA:95:98:AF:41:73:1D:A2:00:6E:50:58:74:BA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57E8E580804E0B4B21DB7C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa Signing time: Tue 04 Feb 2025 13:56:08 +0000 ROA not before: Tue 04 Feb 2025 13:56:08 +0000 ROA not after: Mon 05 May 2025 12:56:08 +0000 asID: 30036 IP address blocks: 150.195.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7e:8e:58:08:04:e0:b4:b2:1d:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:56:08 2025 GMT Not After : May 5 12:56:08 2025 GMT Subject: CN=3a4e3f1c-0c57-4410-aa2e-8b13ed8fca7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:e9:b8:ad:d8:87:e7:2c:79:33:a4:40:6a: 0b:f1:e0:e5:2d:cd:15:23:8f:df:f6:64:52:17:d9: c4:e4:b4:81:2f:6f:a2:61:83:dd:96:9d:d0:5a:96: a2:1c:4f:41:47:23:bd:c0:b6:fe:68:87:73:40:f4: 94:1c:16:4f:ee:c1:3f:ba:2f:54:cf:6a:35:a5:a7: db:84:e9:2a:18:8d:13:fa:1d:89:76:01:db:26:23: 4f:35:c4:94:9d:c8:14:f0:9d:28:2f:7a:43:0f:65: 1c:79:d0:89:ae:42:8a:fd:19:2a:0a:2a:48:79:a6: 21:dc:10:06:08:31:00:41:a0:44:9c:35:67:1a:ef: c0:a4:42:e7:a1:c4:33:f7:c0:f5:c0:d7:72:c9:d9: 48:bd:56:6c:13:ea:b0:68:a7:fe:d8:8c:f6:dd:26: 84:49:c0:0e:9e:6d:83:39:e9:eb:77:05:03:36:58: ee:02:1b:45:77:fc:96:fa:6f:bc:6a:3c:79:b1:d8: 5f:87:e1:85:f9:36:2a:b6:8b:d6:95:23:bc:0b:29: 5e:42:c9:9f:54:3a:d6:32:2a:1d:9c:99:c8:05:5e: 4a:41:7e:cf:30:44:0b:54:21:b8:bb:11:db:0c:f8: e8:fa:39:85:f1:43:cc:70:25:69:88:2a:ba:22:7f: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:81:F8:C3:45:EA:95:98:AF:41:73:1D:A2:00:6E:50:58:74:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a8:51:03:d0:3a:21:d1:24:ea:7a:e6:65:64:d9:79:4b:5e: 29:6a:0d:05:78:61:60:cf:f4:03:f8:43:31:ad:a7:4f:48:7e: 65:c5:0d:ce:9b:db:f4:bf:fe:16:d5:5d:19:e8:ea:1e:0a:72: 12:6e:23:1b:f9:0e:9f:67:04:59:0a:fd:d4:c3:59:a1:5d:af: da:d5:26:dc:f7:40:ab:42:bd:74:a9:3c:bc:74:f4:d1:8b:dd: 3d:ff:17:78:a1:70:93:66:6c:0b:c6:da:f6:7a:77:e8:a9:8f: 0e:b3:fc:a9:4f:93:31:4c:c6:82:c8:36:83:11:27:32:9b:a2: 5b:37:0e:71:49:ae:fb:a3:4a:5c:dc:ba:21:df:58:7a:39:56: af:c4:e2:81:88:25:a2:c9:6a:40:63:ba:ef:72:43:2d:2c:1b: 31:79:77:b2:a9:8a:c5:ff:e1:44:73:83:08:37:7d:ac:de:78: 9e:a7:78:dd:40:92:8a:a7:c9:80:f3:d5:a6:35:02:33:e8:da: bf:0e:20:81:d5:8d:eb:13:38:f1:69:58:89:06:c6:9d:7d:8f: aa:f6:60:2c:9a:ba:c5:5b:17:d6:a1:df:56:5a:65:4b:81:b0: 66:6d:7a:d8:0a:92:17:be:53:d8:1d:60:b7:5e:f3:41:09:70: 98:13:50:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfo5YCATgtLIdt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTYwOFoXDTI1MDUwNTEyNTYwOFowLzEtMCsGA1UEAxMk M2E0ZTNmMWMtMGM1Ny00NDEwLWFhMmUtOGIxM2VkOGZjYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGXpuK3Yh+cseTOkQGoL8eDlLc0VI4/f9mRS F9nE5LSBL2+iYYPdlp3QWpaiHE9BRyO9wLb+aIdzQPSUHBZP7sE/ui9Uz2o1pafb hOkqGI0T+h2JdgHbJiNPNcSUncgU8J0oL3pDD2UcedCJrkKK/RkqCipIeaYh3BAG CDEAQaBEnDVnGu/ApELnocQz98D1wNdyydlIvVZsE+qwaKf+2Iz23SaEScAOnm2D OenrdwUDNljuAhtFd/yW+m+8ajx5sdhfh+GF+TYqtovWlSO8CyleQsmfVDrWMiod nJnIBV5KQX7PMEQLVCG4uxHbDPjo+jmF8UPMcCVpiCq6In9FjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ8gfjDReqVmK9Bcx2iAG5QWHS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJhOGIzZjYtYmRlZC0z Njc3LWI0MDEtNDk5YzExMzlmYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2oUQPQOiHRJOp65mVk2XlLXilqDQV4YWDP9AP4QzGtp09IfmXFDc6b 2/S//hbVXRno6h4KchJuIxv5Dp9nBFkK/dTDWaFdr9rVJtz3QKtCvXSpPLx09NGL 3T3/F3ihcJNmbAvG2vZ6d+ipjw6z/KlPkzFMxoLINoMRJzKbols3DnFJrvujSlzc uiHfWHo5Vq/E4oGIJaLJakBjuu9yQy0sGzF5d7KpisX/4URzgwg3fazeeJ6neN1A koqnyYDz1aY1AjPo2r8OIIHVjesTOPFpWIkGxp19j6r2YCyausVbF9ah31ZaZUuB sGZtetgKkhe+U9gdYLde80EJcJgTUIY= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:05 2025 by rpki-client