$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be34aeab-23a3-3a38-81f5-3763967ee6f6.roa File: be34aeab-23a3-3a38-81f5-3763967ee6f6.roa (raw, json) Hash identifier: oIVH5DeGDzRbiMT6wrzyUeWPyzHeCUluBhShyvXUtHo= Subject key identifier: 7E:FD:45:02:0B:D1:2B:A4:2D:E7:F3:96:15:AB:DA:4C:D5:6C:71:D2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B737093DBEDF94876E027160 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be34aeab-23a3-3a38-81f5-3763967ee6f6.roa Signing time: Thu 30 Jan 2025 11:10:42 +0000 ROA not before: Thu 30 Jan 2025 11:10:42 +0000 ROA not after: Wed 30 Apr 2025 10:10:42 +0000 asID: 30036 IP address blocks: 173.27.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:09:3d:be:df:94:87:6e:02:71:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:10:42 2025 GMT Not After : Apr 30 10:10:42 2025 GMT Subject: CN=49b2b53d-557a-4883-be39-00abbca11558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:46:a5:df:3c:d8:93:a2:26:fe:98:64:8e: c5:59:02:fe:2d:4f:b9:50:ad:83:c4:38:7c:e8:a5: 55:63:71:48:bb:3c:8d:bb:6c:40:bd:d7:1b:95:9a: 0e:a7:df:de:60:38:93:cd:fb:e4:e8:74:6d:16:3b: 2f:ac:d5:d3:63:e9:86:cc:b0:b1:97:45:f6:d9:61: 63:2f:ae:58:a3:ca:58:a4:67:5e:dc:75:bc:b3:00: 59:0e:16:21:5c:cc:83:65:25:b9:12:bf:c8:a1:a6: 41:1d:ce:1d:4d:e7:fd:20:44:7b:cc:f8:2c:42:a0: c0:28:0f:43:90:01:28:28:df:a8:dd:be:05:1d:0d: d4:c4:25:56:ab:8b:b3:5d:5e:2f:3e:42:e7:5a:a1: ab:cf:76:fd:4a:c3:98:83:06:b6:07:ee:fd:7b:aa: 68:3b:0d:78:67:0e:4b:d2:29:22:7c:6d:73:88:55: 05:1b:5a:ed:84:d7:70:36:13:e9:2c:57:19:c0:16: 9e:4c:4a:b1:29:24:58:20:a8:50:55:37:b0:3d:fd: 62:0f:fb:8b:dc:07:73:9a:06:7b:c0:fd:c2:e1:24: 7e:ae:be:d3:76:02:42:45:6f:e6:c5:05:4c:8d:9e: 66:fa:03:a2:a5:e6:ce:f5:6a:1e:ac:65:e2:58:4f: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FD:45:02:0B:D1:2B:A4:2D:E7:F3:96:15:AB:DA:4C:D5:6C:71:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be34aeab-23a3-3a38-81f5-3763967ee6f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:40:69:ca:27:7d:dd:d7:21:7f:35:14:d0:5e:97:49:54:71: be:39:7c:cd:5c:44:30:38:f2:18:1a:26:3d:f7:6f:e4:1f:9a: 61:03:34:28:20:67:55:97:fd:5b:65:fa:d1:12:dd:9a:81:b2: c0:4d:a1:2d:11:98:a4:68:ae:28:fa:28:de:55:61:d7:33:b2: b6:dc:61:04:a0:1f:62:fc:f6:b3:2a:ad:d1:a9:63:62:33:0b: 4f:c4:93:f0:62:fc:a1:46:e3:06:0e:15:26:6a:bf:38:9a:1c: 6a:79:c5:95:1d:35:13:74:ac:e9:d5:12:4e:15:44:2f:09:ad: d0:87:c5:26:d7:19:30:9b:5f:39:5c:b2:69:d6:d2:05:d3:ea: 77:45:8c:e9:44:7b:39:ed:52:2a:d1:02:15:b8:f4:30:97:a1: 15:95:c9:fb:60:11:9d:cf:57:62:0d:10:5f:24:1f:66:21:88: 9d:6b:cd:b7:1a:5a:89:51:0b:21:74:67:c1:9c:df:fb:df:ae: be:91:ba:08:a8:f9:d5:ca:97:d3:b9:98:03:8c:fa:15:42:5f: 9b:b3:4f:99:b4:f2:c3:de:56:54:c4:b1:96:0c:b2:6a:44:d3: 51:db:ce:b6:50:20:80:7f:61:27:bb:10:4a:1f:28:35:1c:cf: 7a:14:1a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nwk9vt+Uh24CcWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTA0MloXDTI1MDQzMDEwMTA0MlowLzEtMCsGA1UEAxMk NDliMmI1M2QtNTU3YS00ODgzLWJlMzktMDBhYmJjYTExNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonpGpd882JOiJv6YZI7FWQL+LU+5UK2DxDh8 6KVVY3FIuzyNu2xAvdcblZoOp9/eYDiTzfvk6HRtFjsvrNXTY+mGzLCxl0X22WFj L65Yo8pYpGde3HW8swBZDhYhXMyDZSW5Er/IoaZBHc4dTef9IER7zPgsQqDAKA9D kAEoKN+o3b4FHQ3UxCVWq4uzXV4vPkLnWqGrz3b9SsOYgwa2B+79e6poOw14Zw5L 0ikifG1ziFUFG1rthNdwNhPpLFcZwBaeTEqxKSRYIKhQVTewPf1iD/uL3AdzmgZ7 wP3C4SR+rr7TdgJCRW/mxQVMjZ5m+gOipebO9WoerGXiWE8mgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH79RQIL0SukLefzlhWr2kzVbHHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmUzNGFlYWItMjNhMy0z YTM4LTgxZjUtMzc2Mzk2N2VlNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRtBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdAaconfd3XIX81FNBel0lUcb45fM1cRDA48hgaJj33b+QfmmEDNCgg Z1WX/Vtl+tES3ZqBssBNoS0RmKRorij6KN5VYdczsrbcYQSgH2L89rMqrdGpY2Iz C0/Ek/Bi/KFG4wYOFSZqvziaHGp5xZUdNRN0rOnVEk4VRC8JrdCHxSbXGTCbXzlc smnW0gXT6ndFjOlEezntUirRAhW49DCXoRWVyftgEZ3PV2INEF8kH2YhiJ1rzbca WolRCyF0Z8Gc3/vfrr6Rugio+dXKl9O5mAOM+hVCX5uzT5m08sPeVlTEsZYMsmpE 01HbzrZQIIB/YSe7EEofKDUcz3oUGm8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:49 2025 by rpki-client