$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa File: 39051ff4-e3bd-3767-be38-89a0f13f363b.roa (raw, json) Hash identifier: AnFG0tLtuUN/L8qgju54RlCoE6M0tbl8Z4MAwqWzbIY= Subject key identifier: D0:49:29:B0:2F:91:73:52:4A:22:69:49:19:75:B6:21:23:34:84:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1795F1C18DB125498CC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.22.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:17:95:f1:c1:8d:b1:25:49:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=643aaf3d-a2e0-4fe8-8646-89f8bcc423d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:6d:14:3a:a6:27:78:79:7b:f6:4e:7c:68: d3:88:99:a7:21:8e:bd:2c:14:73:ee:95:c8:7f:bb: 9a:e2:10:00:4c:56:ae:f7:5f:b1:fd:e1:90:c3:59: a6:81:cf:aa:e9:46:fe:9b:d8:c9:76:56:24:32:6e: d7:7a:39:ee:82:18:89:2f:8a:65:ac:cd:c3:47:6d: f6:29:9f:f5:50:27:8c:25:48:c5:b2:5c:e0:c4:ff: 36:8e:67:7a:d0:46:9d:f1:14:05:b8:82:aa:55:33: a9:c6:4d:1a:e1:4f:be:81:79:08:2a:8b:26:45:44: c1:2d:7e:50:a8:6c:96:31:ba:5d:4d:d5:58:2e:b6: f4:4f:df:a1:2b:9d:e0:74:f8:88:7c:09:b2:12:cf: ac:d3:54:96:6a:e6:23:85:73:61:5b:1b:ee:82:d8: 67:ed:6c:0e:d2:e0:8b:ca:b9:3a:29:c5:8b:4f:83: d5:74:90:41:b5:66:d7:35:24:2f:bf:53:bf:77:6a: 90:2e:8f:86:0d:8b:01:b2:03:59:52:7e:b7:64:03: f9:56:9f:f4:ce:51:00:12:1b:70:3d:07:57:3d:84: cf:d4:17:4a:40:ef:aa:ca:33:04:53:8c:fa:84:8e: bd:2f:d4:8c:cf:a8:f3:58:1f:91:37:5d:dd:0a:6c: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:49:29:B0:2F:91:73:52:4A:22:69:49:19:75:B6:21:23:34:84:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:15:b9:ca:a9:b1:1c:32:33:9e:0d:c2:93:50:74:a5:50:06: 9b:90:83:cf:44:75:73:e8:49:d7:93:6b:b9:e4:25:70:4a:72: ea:de:4d:c1:d0:23:a0:2d:6f:27:cc:cd:32:9d:34:b8:16:a6: 34:4d:d6:d0:a5:7e:8f:c8:ea:87:17:0f:cd:7f:b2:6e:e9:af: b6:1f:d4:52:91:01:53:6f:1c:19:c5:5c:07:0f:37:b8:80:08: 3c:b7:e9:f1:d9:87:04:8b:5c:11:c4:3d:6b:8d:fa:30:93:7f: 2d:b5:99:5d:fb:6f:6c:97:df:ec:91:b8:30:25:08:67:d6:11: fc:3b:7d:16:5b:b4:46:03:b7:55:b3:4b:61:b4:0c:97:d8:82: e8:ab:3e:a0:ab:8b:ac:fe:b4:50:9f:38:fc:32:15:c5:e6:1b: 20:2a:05:ce:ed:1b:ec:f0:1b:92:86:9d:af:87:45:e7:c7:26: a6:a0:0d:14:f6:70:8a:7f:55:50:36:99:71:ad:c6:6e:1c:56: 83:2a:61:11:35:db:03:59:28:5e:6c:7c:ae:9c:82:6c:a5:19: 81:c3:35:7b:45:c4:7f:3f:09:69:1c:64:9c:c2:74:0d:8d:a6: 40:55:55:4b:70:6b:da:72:93:2f:84:34:fc:45:69:22:19:c3: 78:51:7f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuheV8cGNsSVJjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjQzYWFmM2QtYTJlMC00ZmU4LTg2NDYtODlmOGJjYzQyM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlldtFDqmJ3h5e/ZOfGjTiJmnIY69LBRz7pXI f7ua4hAATFau91+x/eGQw1mmgc+q6Ub+m9jJdlYkMm7XejnughiJL4plrM3DR232 KZ/1UCeMJUjFslzgxP82jmd60Ead8RQFuIKqVTOpxk0a4U++gXkIKosmRUTBLX5Q qGyWMbpdTdVYLrb0T9+hK53gdPiIfAmyEs+s01SWauYjhXNhWxvugthn7WwO0uCL yrk6KcWLT4PVdJBBtWbXNSQvv1O/d2qQLo+GDYsBsgNZUn63ZAP5Vp/0zlEAEhtw PQdXPYTP1BdKQO+qyjMEU4z6hI69L9SMz6jzWB+RN13dCmwu4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBJKbAvkXNSSiJpSRl1tiEjNIQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzkwNTFmZjQtZTNiZC0z NzY3LWJlMzgtODlhMGYxM2YzNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8VucqpsRwyM54NwpNQdKVQBpuQg89EdXPoSdeTa7nkJXBKcureTcHQ I6AtbyfMzTKdNLgWpjRN1tClfo/I6ocXD81/sm7pr7Yf1FKRAVNvHBnFXAcPN7iA CDy36fHZhwSLXBHEPWuN+jCTfy21mV37b2yX3+yRuDAlCGfWEfw7fRZbtEYDt1Wz S2G0DJfYguirPqCri6z+tFCfOPwyFcXmGyAqBc7tG+zwG5KGna+HRefHJqagDRT2 cIp/VVA2mXGtxm4cVoMqYRE12wNZKF5sfK6cgmylGYHDNXtFxH8/CWkcZJzCdA2N pkBVVUtwa9pyky+ENPxFaSIZw3hRf5Y= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:02 2025 by rpki-client