$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e22adfe-65ed-32c9-b239-7ddf2eec5c22.roa File: 0e22adfe-65ed-32c9-b239-7ddf2eec5c22.roa (raw, json) Hash identifier: E1fuUEK8vyP8+XfDM/zdNiPEUabhT3s5csB3Dag4b6U= Subject key identifier: 11:78:C2:0D:95:34:35:3D:64:59:43:11:00:C8:2C:E7:06:C0:5D:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CCE07A42C793D341316640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e22adfe-65ed-32c9-b239-7ddf2eec5c22.roa Signing time: Thu 24 Apr 2025 11:51:46 +0000 ROA not before: Thu 24 Apr 2025 11:51:46 +0000 ROA not after: Wed 23 Jul 2025 11:51:46 +0000 asID: 19905 IP address blocks: 173.16.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cc:e0:7a:42:c7:93:d3:41:31:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:51:46 2025 GMT Not After : Jul 23 11:51:46 2025 GMT Subject: CN=7aaa32a3-7db0-4d01-8632-3c4eb58615f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:5c:93:97:05:9a:c8:1c:3a:fc:19:89:66: 1b:a2:e0:af:ae:aa:f7:2d:f7:2c:60:5d:ca:ff:1f: 7c:2b:7f:b8:8f:dd:2a:8a:40:44:6f:e4:21:5b:49: 96:08:51:bf:b0:02:0d:e6:5a:0e:bd:43:77:29:07: b1:6f:af:b4:dd:93:ff:94:92:42:e6:e7:7d:34:9a: 21:f0:26:2b:ab:ae:97:35:38:83:ee:ee:34:eb:5d: 41:3a:1c:95:16:a1:c8:ae:e9:b1:b7:ea:a8:8d:20: 80:3f:b5:11:9a:77:a1:71:9d:89:82:02:90:ba:08: 74:b4:03:65:93:80:06:b0:d0:de:b6:28:22:e5:ca: 52:b7:00:7f:46:6f:46:5d:97:91:7e:fb:b6:4f:2b: 16:0c:f0:c2:73:91:08:2e:75:e1:5e:9c:8a:97:fa: fa:b4:52:d5:3f:1a:06:73:2c:ed:3c:e8:d2:ae:8b: 1d:3e:85:b4:03:7b:f0:85:09:84:22:48:9c:13:e4: 88:d1:53:37:96:23:14:ae:a3:4b:71:38:66:ac:82: 62:d8:4f:ad:52:b0:5e:2e:31:86:d2:bd:33:c3:e3: 46:f0:0e:12:8b:0f:76:85:87:50:67:1a:d5:21:91: 45:fe:77:83:d3:25:15:3b:59:e6:0b:e1:54:13:a4: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:78:C2:0D:95:34:35:3D:64:59:43:11:00:C8:2C:E7:06:C0:5D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e22adfe-65ed-32c9-b239-7ddf2eec5c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:06:a5:91:a6:39:63:85:28:69:2f:bd:a2:7a:ab:f1:59:9b: aa:5a:76:3c:97:45:39:b5:91:65:9e:1e:71:53:55:9d:fd:56: 21:ca:2e:4e:f2:8b:e4:05:05:12:bf:b0:12:36:1a:87:93:09: c4:aa:06:ac:c7:2a:92:2e:82:76:e1:44:cd:3d:5d:4a:74:90: 53:17:2d:e1:27:8c:09:7b:aa:9d:54:5e:86:dc:40:4f:db:56: 34:06:3d:f7:d9:5d:f2:e4:15:35:c2:58:33:bd:5c:56:25:dc: 40:a1:73:ef:1f:7c:f8:a4:0c:d5:66:28:7f:69:9f:58:1a:22: 44:f0:3e:f7:8e:82:08:e6:e7:1d:35:e7:be:5d:2b:73:10:d3: 9d:ce:fd:5f:22:23:03:57:f6:5b:37:a6:7d:fc:c1:02:5b:da: 78:f5:d6:5f:0a:43:dc:d2:a1:a7:20:f6:ad:f0:11:80:7e:50: eb:20:59:51:a2:e6:8d:d8:9b:eb:6a:83:6d:73:9d:65:e5:46: dd:e0:c1:ea:b9:20:af:a1:c2:69:d9:5d:9f:87:0e:55:0c:e4: ef:c9:55:0b:f7:b9:40:a7:af:03:c4:8c:26:2a:29:93:5d:a0: ce:0b:bd:e3:36:cd:0f:b6:2b:bc:4c:84:3c:1f:ae:16:ab:e9: fc:c5:31:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzOB6QseT00ExZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTE0NloXDTI1MDcyMzExNTE0NlowLzEtMCsGA1UEAxMk N2FhYTMyYTMtN2RiMC00ZDAxLTg2MzItM2M0ZWI1ODYxNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq1ck5cFmsgcOvwZiWYbouCvrqr3LfcsYF3K /x98K3+4j90qikBEb+QhW0mWCFG/sAIN5loOvUN3KQexb6+03ZP/lJJC5ud9NJoh 8CYrq66XNTiD7u40611BOhyVFqHIrumxt+qojSCAP7URmnehcZ2JggKQugh0tANl k4AGsNDetigi5cpStwB/Rm9GXZeRfvu2TysWDPDCc5EILnXhXpyKl/r6tFLVPxoG cyztPOjSrosdPoW0A3vwhQmEIkicE+SI0VM3liMUrqNLcThmrIJi2E+tUrBeLjGG 0r0zw+NG8A4Siw92hYdQZxrVIZFF/neD0yUVO1nmC+FUE6TC2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF4wg2VNDU9ZFlDEQDILOcGwF1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGUyMmFkZmUtNjVlZC0z MmM5LWIyMzktN2RkZjJlZWM1YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRD0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoGpZGmOWOFKGkvvaJ6q/FZm6padjyXRTm1kWWeHnFTVZ39ViHKLk7y i+QFBRK/sBI2GoeTCcSqBqzHKpIugnbhRM09XUp0kFMXLeEnjAl7qp1UXobcQE/b VjQGPffZXfLkFTXCWDO9XFYl3EChc+8ffPikDNVmKH9pn1gaIkTwPveOggjm5x01 575dK3MQ053O/V8iIwNX9ls3pn38wQJb2nj11l8KQ9zSoacg9q3wEYB+UOsgWVGi 5o3Ym+tqg21znWXlRt3gweq5IK+hwmnZXZ+HDlUM5O/JVQv3uUCnrwPEjCYqKZNd oM4LveM2zQ+2K7xMhDwfrhar6fzFMRw= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:47 2025 by rpki-client