$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48aadcb9-6170-32d4-b078-95d1806fb87d.roa File: 48aadcb9-6170-32d4-b078-95d1806fb87d.roa (raw, json) Hash identifier: Qj8vycbcDSPJWnLvgUT+pDIfJw7jxe0+16JWw2kK34k= Subject key identifier: 3A:97:BD:95:63:00:6E:36:58:8E:9F:6C:2E:A8:6E:41:7A:25:3B:FC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CCE6E2A42F5D06FC794B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48aadcb9-6170-32d4-b078-95d1806fb87d.roa Signing time: Thu 24 Apr 2025 11:51:49 +0000 ROA not before: Thu 24 Apr 2025 11:51:49 +0000 ROA not after: Wed 23 Jul 2025 11:51:49 +0000 asID: 19905 IP address blocks: 173.23.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cc:e6:e2:a4:2f:5d:06:fc:79:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:51:49 2025 GMT Not After : Jul 23 11:51:49 2025 GMT Subject: CN=6781a998-ad14-4112-bca6-b0274f89571a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:ea:6c:4b:ef:fb:97:0a:48:16:0e:c0:14: 60:17:30:f3:8f:37:c4:2b:22:0d:d1:aa:1e:d0:8c: 06:97:12:73:c5:42:33:79:84:83:bc:b6:c3:83:b0: 5d:09:b1:01:98:da:d4:9e:21:6b:cc:56:d8:c2:d7: 91:ae:72:c5:86:fb:38:e8:d3:7a:81:8d:a5:cf:a5: d2:7d:f1:61:98:f5:a8:00:13:91:a7:10:9b:cd:a9: 70:88:87:6d:0e:9c:67:22:b3:fc:71:23:20:cb:ee: bf:34:a7:ba:ef:c1:76:14:a1:8b:1e:7b:bd:d2:66: be:18:b4:61:d1:15:d1:29:1f:c2:18:2e:72:bc:f7: c7:a8:18:ad:0e:fb:5e:2a:3b:36:29:15:06:ad:3d: 65:df:37:d4:2e:0c:4a:2f:2f:d5:37:2c:39:e4:9c: 98:18:56:4b:f3:b9:5d:2b:9c:b0:fa:e8:93:fa:5a: ee:b9:41:cc:6d:95:3e:0c:cd:c6:4a:a2:a4:74:ac: 7d:ef:fd:eb:de:76:38:eb:a5:bf:a9:af:fd:1e:80: 64:b9:fd:59:19:6a:2c:b1:f3:72:60:4b:e9:fe:6d: 33:30:f3:f6:6e:1a:52:46:1a:c6:c4:ae:d4:de:5f: 55:a8:df:8b:a0:f9:1b:f5:23:75:bc:bb:a1:f7:c5: 42:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:BD:95:63:00:6E:36:58:8E:9F:6C:2E:A8:6E:41:7A:25:3B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48aadcb9-6170-32d4-b078-95d1806fb87d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:de:15:71:c0:10:83:e1:4d:12:21:b9:fc:29:0c:23:74:52: 52:a9:73:ba:ab:5a:c2:7f:c0:f8:5f:e0:31:65:be:12:72:75: 05:09:66:45:33:b7:fc:b3:1a:51:cc:4c:5d:88:27:e7:bd:15: 12:4f:c6:23:f9:e4:92:87:d6:70:2a:f4:4f:00:35:55:32:c1: 2d:86:24:a5:25:6e:35:5d:eb:a4:26:02:24:00:58:30:ac:af: 0c:f7:a2:cc:8b:78:b5:55:89:0b:83:ca:38:47:e5:30:ed:56: 09:ea:7b:47:bd:38:b0:5f:ed:6b:9e:4f:f6:f1:75:e7:19:b4: ee:b8:14:8b:2b:c5:90:52:4f:dc:45:14:a2:a8:e6:96:13:50: a0:35:bf:8c:c7:bd:ec:d3:83:e0:79:0e:e5:06:1c:df:db:26: d1:f1:fc:fa:80:7a:12:91:22:fc:11:48:4c:da:18:1c:83:d8: 4c:f9:90:9a:f4:12:1e:cc:01:ee:20:ca:4d:c4:b8:a9:9e:8d: 3e:c7:01:5f:ca:49:ec:a5:8e:5b:c7:e8:b1:f0:ca:4f:c9:c2: 89:11:67:e7:2c:f7:6a:3e:57:ef:72:4c:6d:2d:2d:b7:c1:5d: 97:b4:53:33:47:82:36:06:19:a3:86:0f:97:76:1d:54:4b:8b: e8:b3:2d:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzObipC9dBvx5S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTE0OVoXDTI1MDcyMzExNTE0OVowLzEtMCsGA1UEAxMk Njc4MWE5OTgtYWQxNC00MTEyLWJjYTYtYjAyNzRmODk1NzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip3qbEvv+5cKSBYOwBRgFzDzjzfEKyIN0aoe 0IwGlxJzxUIzeYSDvLbDg7BdCbEBmNrUniFrzFbYwteRrnLFhvs46NN6gY2lz6XS ffFhmPWoABORpxCbzalwiIdtDpxnIrP8cSMgy+6/NKe678F2FKGLHnu90ma+GLRh 0RXRKR/CGC5yvPfHqBitDvteKjs2KRUGrT1l3zfULgxKLy/VNyw55JyYGFZL87ld K5yw+uiT+lruuUHMbZU+DM3GSqKkdKx97/3r3nY466W/qa/9HoBkuf1ZGWossfNy YEvp/m0zMPP2bhpSRhrGxK7U3l9VqN+LoPkb9SN1vLuh98VCKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqXvZVjAG42WI6fbC6obkF6JTv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDhhYWRjYjktNjE3MC0z MmQ0LWIwNzgtOTVkMTgwNmZiODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABneFXHAEIPhTRIhufwpDCN0UlKpc7qrWsJ/wPhf4DFlvhJydQUJZkUz t/yzGlHMTF2IJ+e9FRJPxiP55JKH1nAq9E8ANVUywS2GJKUlbjVd66QmAiQAWDCs rwz3osyLeLVViQuDyjhH5TDtVgnqe0e9OLBf7WueT/bxdecZtO64FIsrxZBST9xF FKKo5pYTUKA1v4zHvezTg+B5DuUGHN/bJtHx/PqAehKRIvwRSEzaGByD2Ez5kJr0 Eh7MAe4gyk3EuKmejT7HAV/KSeyljlvH6LHwyk/JwokRZ+cs92o+V+9yTG0tLbfB XZe0UzNHgjYGGaOGD5d2HVRLi+izLfU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:45 2025 by rpki-client