$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfd111dd-ea53-35e8-8367-67847a6f7bea.roa File: dfd111dd-ea53-35e8-8367-67847a6f7bea.roa (raw, json) Hash identifier: L7hGXITpLqfsuGOazho6/1audVH4mlmz78l1vgBCsic= Subject key identifier: 64:38:97:0A:8A:BD:D2:25:DF:62:67:EC:DB:B1:8E:01:05:42:BB:E6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55FA5D594E594A1FC075EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfd111dd-ea53-35e8-8367-67847a6f7bea.roa Signing time: Tue 04 Feb 2025 12:53:51 +0000 ROA not before: Tue 04 Feb 2025 12:53:51 +0000 ROA not after: Mon 05 May 2025 11:53:51 +0000 asID: 30036 IP address blocks: 173.27.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:a5:d5:94:e5:94:a1:fc:07:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:53:51 2025 GMT Not After : May 5 11:53:51 2025 GMT Subject: CN=e6c0ac98-7f5e-49cf-96b6-fcfcfb21241d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:cb:ce:df:5c:de:bd:06:4e:99:0d:14:55: 0e:44:5a:5b:7c:fd:c2:72:8c:bb:be:e9:99:eb:ed: 83:ef:f3:87:b2:2a:45:1e:d6:02:31:69:44:18:01: 23:cd:7d:2b:a3:aa:88:6f:b6:fd:7f:17:9c:94:c9: c9:ad:e4:0a:c6:7a:63:b5:aa:f4:75:6b:9d:a3:d3: db:7c:63:77:df:8b:3f:61:30:3f:81:ff:8c:b1:9c: 79:a9:36:46:3e:43:cd:05:ea:17:c8:f5:43:25:d7: 33:e1:4a:a5:03:9d:fc:4a:90:f9:cc:f3:14:f8:80: cf:f7:c2:9e:1b:22:d1:bb:c0:c6:99:64:9c:90:0b: f5:90:88:e0:5d:f5:0f:95:3b:ef:6f:09:16:f2:78: b0:c8:fa:b2:d7:63:00:6b:8e:e1:86:25:44:a1:b9: 91:6d:5d:00:87:04:20:c8:43:a7:2a:bf:fd:4f:8b: 72:6b:53:b5:d9:42:9e:4e:92:af:ea:04:ee:61:8a: 1a:16:c9:fe:8e:03:1b:7f:d4:92:b3:91:b5:4a:83: d1:cf:33:3a:8a:bb:c4:99:33:48:84:cc:77:22:34: 6c:65:9e:58:c9:46:49:00:58:8f:55:fb:62:df:70: a0:07:77:cb:ce:88:8a:3a:17:39:d0:d7:ef:07:a6: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:38:97:0A:8A:BD:D2:25:DF:62:67:EC:DB:B1:8E:01:05:42:BB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfd111dd-ea53-35e8-8367-67847a6f7bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:97:9a:66:fc:a9:c7:7d:4c:68:3b:8c:69:9c:99:82:6a:39: 91:e5:6d:b3:ce:9d:64:dc:36:73:d8:81:8e:ca:cd:9e:4a:51: d5:2d:36:cd:b7:59:42:c7:42:0b:f3:7c:b1:2e:9c:70:3a:53: b0:5f:c3:88:0a:8f:20:c5:69:9c:c6:5a:3d:78:3f:9a:e0:13: 5b:ec:7b:68:f7:f9:0a:89:46:e7:76:27:ab:39:7b:91:72:20: 72:f3:96:37:18:31:af:7b:03:3d:59:42:0f:2b:30:b9:fc:49: 35:8c:2d:55:eb:b4:96:03:d0:1b:7c:8e:9e:4a:4a:ff:60:11: 36:38:cb:48:ae:a5:eb:16:b4:09:b0:1a:2d:fa:8e:d3:08:90: 90:49:c2:8a:03:c0:bd:8b:22:aa:93:ce:38:37:50:7a:67:59: 14:ca:a8:8c:9f:e0:45:18:73:23:aa:8f:33:e4:cf:c5:b3:31: 7a:eb:14:6a:5a:68:74:8b:b8:15:8b:2a:db:37:7a:a4:47:ad: 6a:fc:fa:0f:a4:20:c9:01:59:cb:4a:5c:4d:02:b8:92:da:fb: c6:d2:71:1e:1d:81:96:5d:88:b2:e1:f2:91:e3:7c:1b:dd:d9: 72:8c:41:68:44:8f:3a:6b:a7:3d:9e:e8:65:df:f1:4a:e9:50: 07:b3:b9:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFX6XVlOWUofwHXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNTM1MVoXDTI1MDUwNTExNTM1MVowLzEtMCsGA1UEAxMk ZTZjMGFjOTgtN2Y1ZS00OWNmLTk2YjYtZmNmY2ZiMjEyNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsLLzt9c3r0GTpkNFFUORFpbfP3Ccoy7vumZ 6+2D7/OHsipFHtYCMWlEGAEjzX0ro6qIb7b9fxeclMnJreQKxnpjtar0dWudo9Pb fGN334s/YTA/gf+MsZx5qTZGPkPNBeoXyPVDJdcz4UqlA538SpD5zPMU+IDP98Ke GyLRu8DGmWSckAv1kIjgXfUPlTvvbwkW8niwyPqy12MAa47hhiVEobmRbV0AhwQg yEOnKr/9T4tya1O12UKeTpKv6gTuYYoaFsn+jgMbf9SSs5G1SoPRzzM6irvEmTNI hMx3IjRsZZ5YyUZJAFiPVfti33CgB3fLzoiKOhc50NfvB6ZgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ4lwqKvdIl32Jn7NuxjgEFQrvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGZkMTExZGQtZWE1My0z NWU4LTgzNjctNjc4NDdhNmY3YmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGXmmb8qcd9TGg7jGmcmYJqOZHlbbPOnWTcNnPYgY7KzZ5KUdUtNs23 WULHQgvzfLEunHA6U7Bfw4gKjyDFaZzGWj14P5rgE1vse2j3+QqJRud2J6s5e5Fy IHLzljcYMa97Az1ZQg8rMLn8STWMLVXrtJYD0Bt8jp5KSv9gETY4y0iupesWtAmw Gi36jtMIkJBJwooDwL2LIqqTzjg3UHpnWRTKqIyf4EUYcyOqjzPkz8WzMXrrFGpa aHSLuBWLKts3eqRHrWr8+g+kIMkBWctKXE0CuJLa+8bScR4dgZZdiLLh8pHjfBvd 2XKMQWhEjzprpz2e6GXf8UrpUAezuUE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:18 2025 by rpki-client