$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa File: 41821b7b-ed24-3365-9e0e-7db6422bd17d.roa (raw, json) Hash identifier: YXp7tip1MauauQ30wSE6DFNPTXW3hdST66V4z6UG4k8= Subject key identifier: CF:9B:C2:C7:1D:06:8D:04:3E:EA:1B:70:54:3B:E0:A6:FA:45:5A:DB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4A523A70BE0C07C8F200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4a:52:3a:70:be:0c:07:c8:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=67e032db-abfc-43ab-b815-1a95758d9aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:2c:f1:7b:fc:29:38:25:7d:a6:87:f3:15: 7b:30:28:15:bf:99:20:ec:07:46:3a:f5:7a:4f:18: c7:af:d7:27:ed:ba:dd:f4:24:af:37:e8:b8:ba:76: c0:7e:da:66:32:5e:8d:de:fb:be:a6:d7:e8:9c:b4: b5:e0:fb:39:a4:bc:bb:24:55:0f:45:89:20:71:ca: d8:2b:68:04:94:26:7e:50:92:f3:28:a5:23:4d:3e: f4:06:6e:d8:fc:f8:b9:cc:f7:8f:54:6d:3e:8f:fc: 05:08:d9:c8:cd:75:e2:dd:10:63:3f:3b:a9:fc:ee: d7:99:5c:61:72:ac:b9:9a:65:d9:60:9d:f8:20:e3: 8c:54:4c:11:af:a0:b7:d7:c3:73:6e:31:1a:5f:e0: 0b:3d:b0:81:9b:d4:85:8d:4b:eb:21:d4:30:70:39: b4:bd:cc:94:7e:ce:0f:4a:45:d7:56:f3:33:57:b4: da:3a:e6:0a:1f:12:21:90:04:23:3d:d2:5f:25:cd: 02:76:95:70:bb:63:a7:75:82:cf:86:13:09:d5:20: 36:c5:59:b4:74:5a:7b:88:c7:41:c8:09:61:49:bc: ff:76:aa:57:0a:59:c4:78:72:08:fd:7c:77:32:0e: 0e:29:eb:bf:f5:1d:e3:f9:95:a2:a1:55:a7:a9:37: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9B:C2:C7:1D:06:8D:04:3E:EA:1B:70:54:3B:E0:A6:FA:45:5A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:93:c7:b9:2b:da:db:fb:cc:f5:b6:62:0b:e1:b3:2c:37:ce: 9f:01:d8:46:2f:a0:bc:57:66:32:2e:0b:60:d9:18:f3:98:53: 2c:fa:9a:4a:fd:3e:d5:ed:31:62:a6:97:64:8f:72:1d:0c:c7: 6e:a6:e7:16:66:1b:51:79:f2:06:bf:1f:eb:be:2c:15:6e:b5: ba:be:98:40:cb:0e:1e:e4:f0:d6:59:99:11:3d:ee:c8:21:7a: 05:ec:07:05:a9:82:3a:53:55:41:d9:35:e1:05:59:66:71:44: ad:e0:66:96:9d:61:37:9a:65:20:62:56:1c:81:fa:61:82:5c: c4:11:dc:26:30:ec:86:b8:f1:b6:09:81:f9:9d:61:85:96:70: 91:f7:0b:ab:c7:0c:55:cc:40:e2:10:be:52:c5:8e:a9:4a:99: a9:11:27:6a:8d:07:5f:3c:86:70:a9:36:32:74:46:68:39:0a: f1:fc:2a:66:2e:b7:c7:bc:98:a8:b6:d4:52:b1:52:b1:e3:e6: 9e:1a:b4:87:8f:13:ed:e1:51:31:6a:ce:31:74:ec:54:fb:a0: 61:58:94:78:5b:a8:37:1e:13:fa:2b:a4:76:fc:bf:cd:35:7d: 21:74:97:42:0d:55:4a:b4:7e:67:6a:3a:08:aa:0d:78:e2:2d: 60:f6:c7:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70pSOnC+DAfI8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NjdlMDMyZGItYWJmYy00M2FiLWI4MTUtMWE5NTc1OGQ5YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocIs8Xv8KTglfaaH8xV7MCgVv5kg7AdGOvV6 TxjHr9cn7brd9CSvN+i4unbAftpmMl6N3vu+ptfonLS14Ps5pLy7JFUPRYkgccrY K2gElCZ+UJLzKKUjTT70Bm7Y/Pi5zPePVG0+j/wFCNnIzXXi3RBjPzup/O7XmVxh cqy5mmXZYJ34IOOMVEwRr6C318NzbjEaX+ALPbCBm9SFjUvrIdQwcDm0vcyUfs4P SkXXVvMzV7TaOuYKHxIhkAQjPdJfJc0CdpVwu2OndYLPhhMJ1SA2xVm0dFp7iMdB yAlhSbz/dqpXClnEeHII/Xx3Mg4OKeu/9R3j+ZWioVWnqTczoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+bwscdBo0EPuobcFQ74Kb6RVrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDE4MjFiN2ItZWQyNC0z MzY1LTllMGUtN2RiNjQyMmJkMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuTx7kr2tv7zPW2Ygvhsyw3zp8B2EYvoLxXZjIuC2DZGPOYUyz6mkr9 PtXtMWKml2SPch0Mx26m5xZmG1F58ga/H+u+LBVutbq+mEDLDh7k8NZZmRE97sgh egXsBwWpgjpTVUHZNeEFWWZxRK3gZpadYTeaZSBiVhyB+mGCXMQR3CYw7Ia48bYJ gfmdYYWWcJH3C6vHDFXMQOIQvlLFjqlKmakRJ2qNB188hnCpNjJ0Rmg5CvH8KmYu t8e8mKi21FKxUrHj5p4atIePE+3hUTFqzjF07FT7oGFYlHhbqDceE/orpHb8v801 fSF0l0INVUq0fmdqOgiqDXjiLWD2xx0= -----END CERTIFICATE-----Generated at Sun Apr 27 02:39:04 2025 by rpki-client