$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa File: fa38c4c0-2930-37f2-aa5d-8781e808672d.roa (raw, json) Hash identifier: pqVAurinJxU3MypF0b6tV9E1kAybcPcyDu3s0feSK2w= Subject key identifier: 09:81:20:F3:E2:0F:FB:5D:25:A4:56:1B:C5:ED:9E:25:4C:50:65:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57D66BDF658B5EC218DBB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa Signing time: Tue 04 Feb 2025 13:53:48 +0000 ROA not before: Tue 04 Feb 2025 13:53:48 +0000 ROA not after: Mon 05 May 2025 12:53:48 +0000 asID: 30036 IP address blocks: 173.25.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:66:bd:f6:58:b5:ec:21:8d:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:53:48 2025 GMT Not After : May 5 12:53:48 2025 GMT Subject: CN=9c1a8e70-4585-4491-9941-d65282c04aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:e8:ee:39:5e:bd:b0:d1:f0:21:39:8a:b7: d4:4d:15:2b:31:7d:d4:c6:56:93:88:df:41:b0:62: ff:39:96:5d:00:43:4f:97:f3:43:60:ac:0e:70:11: ab:aa:c0:37:f9:e7:5a:27:7a:54:b3:2b:09:b3:c9: 99:3c:24:7e:da:5a:2b:99:9f:cb:8a:0a:73:53:47: 83:fa:d8:42:5f:22:c2:49:28:6c:54:9d:95:3a:82: 77:bc:43:6f:13:92:9f:6e:d9:da:42:3e:07:d0:51: 19:3b:0e:a9:e2:11:cf:82:9c:fd:f4:6b:16:27:b6: 0b:76:7e:7d:e3:b5:f8:09:f7:5f:8a:e1:83:c2:f3: 9a:ac:1f:61:d3:6d:f4:0c:79:2f:4e:ac:52:0a:30: ea:06:97:30:b9:03:01:de:37:37:1a:56:e1:77:ea: 59:50:b2:91:e8:62:49:76:e9:89:9a:39:e3:53:06: c0:25:bc:a9:fd:ec:f4:b1:67:1d:6c:01:c1:1b:43: 38:92:b7:4e:af:49:86:7a:96:4b:00:32:9c:96:7a: 06:c2:09:7f:45:bf:ca:d3:2a:5a:b8:9b:cd:b2:0c: 14:71:51:18:0e:ab:f2:74:25:9a:47:b2:51:f0:16: ff:76:15:6c:2a:18:eb:ad:2c:8d:20:7f:0e:92:62: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:81:20:F3:E2:0F:FB:5D:25:A4:56:1B:C5:ED:9E:25:4C:50:65:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d6:4b:66:76:5c:77:d3:96:0d:f8:66:1e:18:e7:e1:f5:42: 9a:a7:6d:3d:71:07:48:64:8c:59:69:3a:2c:c0:ca:cc:ea:40: 90:25:27:ca:5c:c6:61:43:bd:50:fe:4a:89:8f:e3:0a:8e:05: 3d:4b:c0:78:ed:5b:e0:9c:7b:6c:1f:0e:b7:52:b0:02:44:c2: fc:1e:a9:7d:99:fd:48:29:27:ec:d7:c9:4b:13:40:05:0e:3f: 4e:0e:1d:73:e6:0e:a8:bb:40:fb:0d:bb:4e:d8:f0:5e:dc:9f: 2f:b6:1e:c0:22:84:41:4e:cc:70:5e:10:ad:13:6c:dd:c4:9a: 4d:42:f3:2e:51:f3:6a:12:5c:f8:ea:13:58:be:95:9a:12:12: 64:8b:84:fa:ea:26:dd:a4:a8:9e:4c:96:88:ec:9e:c9:64:83: 58:a4:f3:32:34:f3:5e:b8:8d:a5:22:b2:61:7d:cd:e8:4f:84: fe:66:a8:5d:11:bd:51:e4:b6:1a:34:8b:f7:e3:a9:b3:52:ab: f6:bb:20:27:f4:5c:77:f7:b2:27:0b:61:c8:b1:28:f3:f4:e2: b7:76:23:5b:e7:7c:b9:82:e6:d1:79:13:a8:7b:3f:4f:ff:da: 4a:02:83:be:6e:ce:e7:84:fa:7a:4e:cc:14:f5:9f:04:61:7d: 15:7a:17:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfWa99li17CGNuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTM0OFoXDTI1MDUwNTEyNTM0OFowLzEtMCsGA1UEAxMk OWMxYThlNzAtNDU4NS00NDkxLTk5NDEtZDY1MjgyYzA0YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvro7jlevbDR8CE5irfUTRUrMX3UxlaTiN9B sGL/OZZdAENPl/NDYKwOcBGrqsA3+edaJ3pUsysJs8mZPCR+2lormZ/LigpzU0eD +thCXyLCSShsVJ2VOoJ3vENvE5KfbtnaQj4H0FEZOw6p4hHPgpz99GsWJ7YLdn59 47X4CfdfiuGDwvOarB9h0230DHkvTqxSCjDqBpcwuQMB3jc3Glbhd+pZULKR6GJJ dumJmjnjUwbAJbyp/ez0sWcdbAHBG0M4krdOr0mGepZLADKclnoGwgl/Rb/K0ypa uJvNsgwUcVEYDqvydCWaR7JR8Bb/dhVsKhjrrSyNIH8OkmLtoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmBIPPiD/tdJaRWG8XtniVMUGVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmEzOGM0YzAtMjkzMC0z N2YyLWFhNWQtODc4MWU4MDg2NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHWS2Z2XHfTlg34Zh4Y5+H1QpqnbT1xB0hkjFlpOizAyszqQJAlJ8pc xmFDvVD+SomP4wqOBT1LwHjtW+Cce2wfDrdSsAJEwvweqX2Z/UgpJ+zXyUsTQAUO P04OHXPmDqi7QPsNu07Y8F7cny+2HsAihEFOzHBeEK0TbN3Emk1C8y5R82oSXPjq E1i+lZoSEmSLhPrqJt2kqJ5Mlojsnslkg1ik8zI08164jaUismF9zehPhP5mqF0R vVHktho0i/fjqbNSq/a7ICf0XHf3sicLYcixKPP04rd2I1vnfLmC5tF5E6h7P0// 2koCg75uzueE+npOzBT1nwRhfRV6F1g= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:47 2025 by rpki-client