$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa File: 4f880dbf-1650-30da-8777-197c7f35c869.roa (raw, json) Hash identifier: ayrIJKn7NAEN91MTovR17lacVwAwELIli7hne0BNmNU= Subject key identifier: 54:51:94:EA:37:9C:93:1F:4D:7F:36:BA:08:B2:B4:68:CC:49:3C:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA07402ADBFD1F79EDF1A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.22.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:07:40:2a:db:fd:1f:79:ed:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ba2a6669-0efd-46b4-a311-2f260e6cc9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9b:e0:4e:5f:7e:8c:36:63:f5:f7:a0:ce:42: 1a:8d:ad:3a:1e:f6:16:f7:01:8e:66:e8:e1:93:9f: 5a:52:bc:d7:a6:6c:ca:bb:9c:84:0c:30:20:6d:66: b8:be:68:e2:52:f9:02:70:91:0b:b3:59:9c:19:bd: 24:6b:2d:a1:d5:5d:e4:c6:27:6b:36:ee:20:3c:6f: 47:73:bf:e8:39:4c:bb:1e:7d:68:d0:cb:23:9d:79: 94:2d:8c:18:ee:5a:19:f6:62:c8:92:ed:b3:e1:a4: bc:62:91:6e:d0:20:d1:8f:51:52:09:80:31:f0:6f: c3:73:26:4c:5c:a1:b9:51:14:58:e8:7f:14:55:de: fa:7f:8d:8d:2c:4f:cf:ed:56:d6:7c:82:9d:27:bd: 8b:54:bc:f4:20:21:77:31:f8:88:82:7b:ed:a9:b3: e4:a7:24:71:cd:e9:8f:f0:83:2b:34:21:a9:be:ae: 98:da:96:13:9d:5a:51:64:aa:99:b5:00:87:a3:31: f5:a0:c3:0e:7f:22:91:c9:3b:ea:a9:21:09:e4:19: 0f:c5:4e:da:20:58:a4:10:d9:23:44:40:f5:d7:24: 68:8c:ef:a2:b3:19:34:75:2e:79:6b:6d:d1:6d:6c: 1d:18:af:10:a4:22:f0:c6:20:1c:bd:4c:8a:a1:48: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:94:EA:37:9C:93:1F:4D:7F:36:BA:08:B2:B4:68:CC:49:3C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ee:a0:44:4b:3b:b1:e9:53:87:8f:10:23:e7:ff:c2:4b:90: 8d:9f:f4:1e:5d:2f:d2:9d:0e:b7:1b:b9:c6:f8:9c:c8:08:73: cd:1a:a2:20:b4:41:68:13:af:d5:e7:12:e3:37:9f:73:18:3a: 2b:26:3f:8b:35:54:75:0d:9d:2a:ea:4d:94:0f:cf:a5:6b:e2: c1:ed:5f:8c:cc:97:dd:8f:41:52:50:a1:39:e4:60:b9:20:0f: 5e:69:ea:17:74:19:b5:03:eb:6f:ee:95:e3:bf:cf:59:b6:9d: 99:f1:0d:0e:2f:fc:1b:29:66:47:a4:17:a9:d5:eb:aa:ae:f4: 98:e1:d1:f7:93:af:24:bd:5e:ee:b5:b1:4a:5f:cf:04:ae:3b: 27:d2:4d:23:bd:15:80:a0:8d:97:ad:e4:73:e8:c7:51:a5:fc: 98:42:65:4f:c1:40:7e:87:15:e7:72:cf:8b:1c:47:60:bd:0f: f8:b9:1d:d7:49:3b:22:64:ea:4b:13:37:97:4a:9f:dd:c3:de: 3b:da:13:ff:76:aa:dc:8a:33:d4:dc:2a:36:82:c8:c3:c9:90: 9a:20:8f:a6:d7:3b:3d:81:29:d2:55:06:ce:3d:d0:d1:74:d5: 10:6b:42:91:2c:9c:f0:5d:db:f1:1d:05:7a:23:ae:5d:56:3b: b5:b3:72:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugdAKtv9H3nt8aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmEyYTY2NjktMGVmZC00NmI0LWEzMTEtMmYyNjBlNmNjOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95vgTl9+jDZj9fegzkIaja06HvYW9wGOZujh k59aUrzXpmzKu5yEDDAgbWa4vmjiUvkCcJELs1mcGb0kay2h1V3kxidrNu4gPG9H c7/oOUy7Hn1o0MsjnXmULYwY7loZ9mLIku2z4aS8YpFu0CDRj1FSCYAx8G/DcyZM XKG5URRY6H8UVd76f42NLE/P7VbWfIKdJ72LVLz0ICF3MfiIgnvtqbPkpyRxzemP 8IMrNCGpvq6Y2pYTnVpRZKqZtQCHozH1oMMOfyKRyTvqqSEJ5BkPxU7aIFikENkj RED11yRojO+isxk0dS55a23RbWwdGK8QpCLwxiAcvUyKoUjFLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRRlOo3nJMfTX82ugiytGjMSTytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY4ODBkYmYtMTY1MC0z MGRhLTg3NzctMTk3YzdmMzVjODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjuoERLO7HpU4ePECPn/8JLkI2f9B5dL9KdDrcbucb4nMgIc80aoiC0 QWgTr9XnEuM3n3MYOismP4s1VHUNnSrqTZQPz6Vr4sHtX4zMl92PQVJQoTnkYLkg D15p6hd0GbUD62/uleO/z1m2nZnxDQ4v/BspZkekF6nV66qu9Jjh0feTryS9Xu61 sUpfzwSuOyfSTSO9FYCgjZet5HPox1Gl/JhCZU/BQH6HFedyz4scR2C9D/i5HddJ OyJk6ksTN5dKn93D3jvaE/92qtyKM9TcKjaCyMPJkJogj6bXOz2BKdJVBs490NF0 1RBrQpEsnPBd2/EdBXojrl1WO7Wzcqs= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:06 2025 by rpki-client