$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa File: 09d7a587-a979-367c-95a2-0cb463b5d3be.roa (raw, json) Hash identifier: 0SduMUEGMOyjoR+3KFE1NiJKEPPAOmbZUnWOoU5I2q0= Subject key identifier: 01:AD:D9:49:53:26:37:14:C8:F4:60:36:B1:C8:95:62:99:4A:B3:0F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FEB7875513C6D014B080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.22.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fe:b7:87:55:13:c6:d0:14:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=48aeffc8-4156-4533-af75-e04e58d6a7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:86:df:b2:ba:22:dd:a0:6f:ff:88:82:2c: c3:6a:06:11:a0:2f:8c:fe:d4:a4:21:ac:4b:4c:3f: 10:d2:c6:6b:59:73:ab:96:a8:38:89:68:59:bd:40: 21:aa:14:a4:56:f1:02:50:52:f4:bf:a0:03:c6:6b: 9c:09:d4:9c:05:df:37:2f:ce:4b:10:96:3f:8b:3d: 6b:e5:e9:47:f0:fe:f0:cc:96:45:02:85:11:e6:cc: 08:b1:0a:76:59:bc:ee:1d:17:86:e2:91:89:c8:82: df:fd:d5:2f:a1:0e:46:a5:24:43:49:db:84:82:99: 04:8d:a2:a4:46:42:d3:39:51:7a:40:eb:8e:35:c4: f7:34:2c:55:55:b0:d4:3d:57:87:ad:fc:78:7f:bb: e9:32:71:3b:45:55:24:78:39:05:4a:59:68:ec:de: da:01:c7:b1:07:ba:21:ac:d8:d5:d0:44:ef:40:13: b4:23:5b:50:c3:a6:a2:ea:11:b2:92:f4:7d:81:ed: 36:cb:a2:8f:3c:e3:f3:ab:cd:8b:4e:69:25:45:bd: c8:48:39:3b:6d:ef:49:01:5a:09:63:14:13:f9:99: 4c:ab:50:98:5e:ac:fc:9c:29:69:01:75:16:bf:ff: 65:ed:0f:23:77:90:57:b6:3e:ba:f0:cd:32:14:15: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AD:D9:49:53:26:37:14:C8:F4:60:36:B1:C8:95:62:99:4A:B3:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d2:4f:74:97:27:5d:96:9b:74:37:ef:17:87:7b:67:01:46: 04:bc:5b:73:3e:ed:66:0d:d5:2f:12:86:0e:e2:72:67:03:67: e7:36:32:eb:be:9a:00:cf:21:77:c0:1b:f2:a0:85:6d:8b:34: b5:6a:76:a8:f5:46:e2:d5:09:4d:56:6e:a7:a4:80:c3:09:b4: 5c:19:dd:d3:cb:c4:f9:b6:8f:6e:92:d2:f0:94:0c:84:a4:9c: b6:a2:60:d1:60:82:68:a6:28:74:e4:15:0c:8f:13:3e:b4:88: 80:c7:90:1b:4c:9f:0e:3a:f9:62:4a:70:dc:d6:3a:b9:0c:12: 90:48:40:d9:b4:c1:56:5b:4b:3f:e7:51:9a:4b:0b:37:cf:37: 8f:64:0e:b8:2f:d5:fd:85:94:ca:4b:a3:2c:b5:97:7f:7d:17: 83:fa:af:e4:3b:9b:03:72:73:47:c7:82:be:61:ed:8b:44:9b: f1:3d:91:bd:32:16:5d:e3:07:36:7b:30:30:96:0f:37:1b:c6: 4f:66:15:2a:06:87:d3:93:f9:e0:fb:91:8a:41:4a:92:ee:61: d8:5b:4e:86:76:c6:ec:73:4b:7d:f1:da:af:70:ba:cb:82:bf: cc:f0:75:8e:78:e9:02:e7:58:d6:a8:26:c4:88:ea:00:08:30: 5a:da:45:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf63h1UTxtAUsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDhhZWZmYzgtNDE1Ni00NTMzLWFmNzUtZTA0ZTU4ZDZhN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqaG37K6It2gb/+IgizDagYRoC+M/tSkIaxL TD8Q0sZrWXOrlqg4iWhZvUAhqhSkVvECUFL0v6ADxmucCdScBd83L85LEJY/iz1r 5elH8P7wzJZFAoUR5swIsQp2WbzuHReG4pGJyILf/dUvoQ5GpSRDSduEgpkEjaKk RkLTOVF6QOuONcT3NCxVVbDUPVeHrfx4f7vpMnE7RVUkeDkFSllo7N7aAcexB7oh rNjV0ETvQBO0I1tQw6ai6hGykvR9ge02y6KPPOPzq82LTmklRb3ISDk7be9JAVoJ YxQT+ZlMq1CYXqz8nClpAXUWv/9l7Q8jd5BXtj668M0yFBUbrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGt2UlTJjcUyPRgNrHIlWKZSrMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDlkN2E1ODctYTk3OS0z NjdjLTk1YTItMGNiNDYzYjVkM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbST3SXJ12Wm3Q37xeHe2cBRgS8W3M+7WYN1S8Shg7icmcDZ+c2Muu+ mgDPIXfAG/KghW2LNLVqdqj1RuLVCU1WbqekgMMJtFwZ3dPLxPm2j26S0vCUDISk nLaiYNFggmimKHTkFQyPEz60iIDHkBtMnw46+WJKcNzWOrkMEpBIQNm0wVZbSz/n UZpLCzfPN49kDrgv1f2FlMpLoyy1l399F4P6r+Q7mwNyc0fHgr5h7YtEm/E9kb0y Fl3jBzZ7MDCWDzcbxk9mFSoGh9OT+eD7kYpBSpLuYdhbToZ2xuxzS33x2q9wusuC v8zwdY546QLnWNaoJsSI6gAIMFraRX4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:54:37 2025 by rpki-client