$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cca7a88-21fb-3626-b127-7ad75d191925.roa File: 3cca7a88-21fb-3626-b127-7ad75d191925.roa (raw, json) Hash identifier: jAoj9gBe2N/nevPKjtnG2KdsxvRGQPN4M7TWnLyntSM= Subject key identifier: 33:AD:5D:8F:0B:ED:F3:12:3E:24:9F:40:22:C4:03:DB:54:4E:05:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B8B1CC1C2E74660E7CA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cca7a88-21fb-3626-b127-7ad75d191925.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b8:b1:cc:1c:2e:74:66:0e:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e1229010-3b54-4db4-988a-740a42523389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:35:f4:8d:b5:7c:bc:1b:83:f6:f2:dd:22: 6f:bd:7c:ae:3c:73:81:79:ff:ce:ff:85:93:b4:5f: 48:93:3a:c5:62:3b:ce:44:e9:aa:0f:fc:0d:28:1d: 1d:96:c4:30:8b:9e:69:75:5d:16:cf:3f:57:1c:31: 06:33:62:68:9c:a9:44:fd:cb:6c:9e:06:1a:ce:4a: 24:30:a6:01:78:58:99:3e:10:2f:ef:a8:a7:c8:e8: e5:98:eb:d6:29:bb:98:b5:77:bf:f0:58:1f:60:19: 88:85:47:65:bc:44:0b:a4:6c:f3:24:85:0d:16:b4: 4d:9b:0d:29:66:54:36:b3:cd:16:e1:3d:82:1c:ca: 78:5c:3b:9a:e4:a5:92:54:ea:31:0d:a0:78:b0:a6: 08:a9:25:22:6f:57:f0:77:6e:88:b7:6f:bd:17:46: de:0e:e8:d5:31:e3:42:ca:96:6f:06:4a:05:66:8c: d2:24:c1:09:54:8e:65:d1:15:60:f4:0f:48:96:8f: 48:bc:3a:0f:2d:92:6d:d9:ce:e0:45:d2:69:5b:cc: 0c:85:b5:28:19:e6:0a:81:30:75:27:c4:69:85:6e: 88:3d:c1:05:38:c1:6c:92:fd:bf:05:95:e6:52:ba: 7d:52:39:ae:23:be:07:78:a6:c6:c6:b4:ba:e3:4b: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:5D:8F:0B:ED:F3:12:3E:24:9F:40:22:C4:03:DB:54:4E:05:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cca7a88-21fb-3626-b127-7ad75d191925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6c:cf:20:2f:3b:2f:42:67:da:8d:70:d6:0a:a2:5d:4a:25: 53:6e:01:7c:19:36:6b:ee:bf:c7:41:fb:a9:a5:0d:ee:c4:2e: 02:1f:af:ff:26:6c:3c:c6:69:02:8b:f4:d1:89:cb:41:08:28: ff:30:81:6b:e1:14:9a:db:fd:1e:0d:15:87:18:ab:db:25:e6: fd:92:de:be:a9:f8:8e:7f:59:31:b8:32:ed:d7:91:54:ad:54: 3c:a1:4f:f4:7a:e8:a5:f8:c6:8b:c0:fc:ee:27:31:52:1e:f3: 41:c4:34:cb:da:e1:fb:6b:60:b2:bc:c0:5e:c9:d4:ca:fd:2f: ab:f6:93:7c:3e:01:5a:4b:39:8a:c7:ec:97:5a:fa:91:42:12: eb:a2:82:88:3c:14:2a:f4:8b:3b:7c:f9:a6:af:3f:5d:9a:25: 24:a0:ef:a0:b6:f7:95:23:7a:5a:8c:12:85:54:d9:e0:d2:c2: ad:6d:0b:ae:ee:52:2a:17:d1:70:8a:2b:1a:70:a4:34:6a:37: 9c:9b:17:da:72:2e:bb:10:13:53:54:84:ab:28:d5:dd:04:37: 26:f6:6f:4f:e9:49:34:9d:3d:61:10:70:49:78:e4:bf:2a:3c: 75:74:d8:23:cd:03:4c:66:6b:7e:61:22:04:5d:3d:e6:10:ec: df:61:f3:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLixzBwudGYOfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTEyMjkwMTAtM2I1NC00ZGI0LTk4OGEtNzQwYTQyNTIzMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQQ19I21fLwbg/by3SJvvXyuPHOBef/O/4WT tF9IkzrFYjvOROmqD/wNKB0dlsQwi55pdV0Wzz9XHDEGM2JonKlE/ctsngYazkok MKYBeFiZPhAv76inyOjlmOvWKbuYtXe/8FgfYBmIhUdlvEQLpGzzJIUNFrRNmw0p ZlQ2s80W4T2CHMp4XDua5KWSVOoxDaB4sKYIqSUib1fwd26It2+9F0beDujVMeNC ypZvBkoFZozSJMEJVI5l0RVg9A9Ilo9IvDoPLZJt2c7gRdJpW8wMhbUoGeYKgTB1 J8RphW6IPcEFOMFskv2/BZXmUrp9UjmuI74HeKbGxrS640vbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOtXY8L7fMSPiSfQCLEA9tUTgVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2NjYTdhODgtMjFmYi0z NjI2LWIxMjctN2FkNzVkMTkxOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9szyAvOy9CZ9qNcNYKol1KJVNuAXwZNmvuv8dB+6mlDe7ELgIfr/8m bDzGaQKL9NGJy0EIKP8wgWvhFJrb/R4NFYcYq9sl5v2S3r6p+I5/WTG4Mu3XkVSt VDyhT/R66KX4xovA/O4nMVIe80HENMva4ftrYLK8wF7J1Mr9L6v2k3w+AVpLOYrH 7Jda+pFCEuuigog8FCr0izt8+aavP12aJSSg76C295UjelqMEoVU2eDSwq1tC67u UioX0XCKKxpwpDRqN5ybF9pyLrsQE1NUhKso1d0ENyb2b0/pSTSdPWEQcEl45L8q PHV02CPNA0xma35hIgRdPeYQ7N9h88I= -----END CERTIFICATE-----Generated at Sun Apr 27 00:42:19 2025 by rpki-client