$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa File: eaba19c1-68aa-3949-9002-013681e0e87e.roa (raw, json) Hash identifier: Wjd8WPgzurcxFPn54osNCp04HpVynYK6RFQkN1s2Rsw= Subject key identifier: E4:4D:13:A0:CE:36:E9:9B:95:72:F2:09:0E:FF:FC:14:5B:E5:B1:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C263C4A3D9D469A7355645C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa Signing time: Mon 03 Feb 2025 11:14:44 +0000 ROA not before: Mon 03 Feb 2025 11:14:44 +0000 ROA not after: Sun 04 May 2025 10:14:44 +0000 asID: 30036 IP address blocks: 173.27.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:63:c4:a3:d9:d4:69:a7:35:56:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:14:44 2025 GMT Not After : May 4 10:14:44 2025 GMT Subject: CN=b2e70544-33a3-4327-9e05-16a2866f5601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:1a:53:1c:86:15:5e:28:1a:5c:93:e0:eb: 8e:c1:24:d0:2a:84:19:92:dd:15:dc:d3:bb:1b:c3: 87:86:47:82:1a:58:01:fd:df:83:c1:e6:2e:e3:f0: 6c:41:74:7f:a7:e0:88:ba:90:52:6d:e3:32:ed:49: e8:20:fc:6d:15:c5:f2:a9:33:7a:de:92:42:0a:66: b4:91:41:3e:3d:0f:45:26:aa:55:d1:7e:7c:5d:81: 9c:0f:bf:93:b3:bf:00:91:15:83:a3:59:1e:a6:38: 8e:af:e4:a5:90:6f:4a:81:9f:d6:60:e5:21:59:39: d7:03:4c:5c:2c:8c:c9:7a:3d:e6:6a:65:d3:66:5f: 42:71:0b:4b:c3:d4:50:72:77:56:0d:c6:61:71:63: 0c:75:a7:25:a2:d8:19:32:3a:f8:15:e7:a3:d0:dd: 9a:cd:17:02:e2:7e:34:13:ed:84:72:04:5d:f9:95: e9:cb:64:42:9d:52:fb:94:fb:70:92:93:5d:69:5c: eb:51:57:1d:b3:2d:83:4e:c6:7e:8f:ed:69:ed:b3: 26:f5:18:44:14:43:98:27:13:d5:3f:bf:80:67:14: 87:db:c3:11:9c:f9:bd:08:e6:e6:e1:75:a2:de:0f: 39:c8:37:50:e4:9c:f3:c3:1b:35:bd:3c:ad:6e:ce: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4D:13:A0:CE:36:E9:9B:95:72:F2:09:0E:FF:FC:14:5B:E5:B1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:12:b6:e9:06:e3:14:db:54:87:69:ec:19:dc:77:72:b8:97: 4d:1e:94:bc:13:c7:0d:50:24:3c:54:01:32:f1:db:22:71:77: 47:c2:1b:b8:c2:b2:f2:0d:fc:5b:ae:97:59:bf:e1:4f:06:9c: 87:64:45:a3:63:20:22:33:ed:c5:17:41:2a:3a:7b:4b:ae:ba: 4d:3f:7d:e8:27:77:d9:b1:66:d0:93:ad:a2:69:0f:57:23:1d: a6:80:08:68:9e:66:c2:38:0a:a8:7c:60:4c:4c:10:d8:78:4c: 41:41:39:2f:62:ad:b3:4c:99:02:57:c7:8b:38:72:6b:54:7e: 16:18:75:86:58:39:c3:f3:c0:63:bd:0f:41:50:29:1e:3c:ae: 66:b4:04:74:dd:42:86:69:0b:a6:f5:38:31:77:28:89:f0:5e: 9a:f7:be:8f:4f:44:b2:86:e6:f7:7b:3b:25:84:e3:2c:6b:15: ca:d0:3f:05:39:93:4e:52:bc:3d:69:cd:7f:f6:19:db:35:81: f7:59:68:2e:c0:50:ff:03:9e:70:f4:68:bb:fd:56:4f:05:4b: 1d:6a:64:59:75:f3:3a:b1:fd:87:3f:30:87:bc:ca:b3:fc:aa: 70:03:30:f1:7a:10:e9:65:2d:da:b1:66:57:7d:16:56:65:4a: 36:ed:a6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCY8Sj2dRppzVWRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTQ0NFoXDTI1MDUwNDEwMTQ0NFowLzEtMCsGA1UEAxMk YjJlNzA1NDQtMzNhMy00MzI3LTllMDUtMTZhMjg2NmY1NjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01EaUxyGFV4oGlyT4OuOwSTQKoQZkt0V3NO7 G8OHhkeCGlgB/d+DweYu4/BsQXR/p+CIupBSbeMy7UnoIPxtFcXyqTN63pJCCma0 kUE+PQ9FJqpV0X58XYGcD7+Ts78AkRWDo1kepjiOr+SlkG9KgZ/WYOUhWTnXA0xc LIzJej3mamXTZl9CcQtLw9RQcndWDcZhcWMMdaclotgZMjr4Feej0N2azRcC4n40 E+2EcgRd+ZXpy2RCnVL7lPtwkpNdaVzrUVcdsy2DTsZ+j+1p7bMm9RhEFEOYJxPV P7+AZxSH28MRnPm9CObm4XWi3g85yDdQ5Jzzwxs1vTytbs6hSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORNE6DONumblXLyCQ7//BRb5bFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWFiYTE5YzEtNjhhYS0z OTQ5LTkwMDItMDEzNjgxZTBlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0StukG4xTbVIdp7Bncd3K4l00elLwTxw1QJDxUATLx2yJxd0fCG7jC svIN/Fuul1m/4U8GnIdkRaNjICIz7cUXQSo6e0uuuk0/fegnd9mxZtCTraJpD1cj HaaACGieZsI4Cqh8YExMENh4TEFBOS9irbNMmQJXx4s4cmtUfhYYdYZYOcPzwGO9 D0FQKR48rma0BHTdQoZpC6b1ODF3KInwXpr3vo9PRLKG5vd7OyWE4yxrFcrQPwU5 k05SvD1pzX/2Gds1gfdZaC7AUP8DnnD0aLv9Vk8FSx1qZFl18zqx/Yc/MIe8yrP8 qnADMPF6EOllLdqxZld9FlZlSjbtprM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:46 2025 by rpki-client