$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68347c4b-9adb-3382-8d65-86fed7f10cd5.roa File: 68347c4b-9adb-3382-8d65-86fed7f10cd5.roa (raw, json) Hash identifier: pqQc3WR9rgw98uPISXAIQv8inPhUtC+KJpt1qhJw5BY= Subject key identifier: 38:31:6A:17:96:8F:38:FD:AB:BB:B4:75:08:79:FC:07:C2:79:1A:F1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B87632F1E11020BA5A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68347c4b-9adb-3382-8d65-86fed7f10cd5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.22.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b8:76:32:f1:e1:10:20:ba:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1f25cc5b-7b93-4c1e-9178-c501ded917ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:60:f6:b2:03:47:be:5b:81:e3:9b:57:1a: 5f:a2:03:49:25:b9:c2:95:b8:d6:0b:10:f8:4f:b5: b0:b1:fc:8f:41:b1:36:60:a0:90:8a:6d:ff:b6:02: 51:b1:27:45:3c:23:30:26:68:1d:ad:14:fc:3a:10: 35:52:27:30:b0:df:84:67:57:b7:1e:87:b2:5d:79: 9a:42:a1:b9:19:b6:16:32:78:4c:ce:cc:95:11:09: f4:1b:f9:27:ce:86:cb:f0:95:8d:f4:1e:14:39:e6: 25:f2:fb:eb:a3:ca:95:ce:4a:ed:b5:ba:5c:28:3a: 9f:36:26:2f:f5:f7:5d:45:fc:03:33:b0:e2:e9:43: 42:7a:e2:e1:59:73:a6:d5:16:f2:b5:82:1d:9a:90: 4a:49:74:12:dc:d8:e5:6c:0b:81:eb:5b:ce:37:00: 5f:97:7f:33:9e:95:05:24:af:7d:ee:ba:f7:d0:e5: bc:bb:1c:f8:f8:04:23:4c:b6:36:33:53:49:5e:8d: 18:c9:24:eb:70:25:01:16:28:05:d8:9e:5a:e1:05: 6f:4e:df:5e:5b:52:19:c8:9c:cf:dc:67:16:77:55: 8e:54:05:9e:51:99:1c:a9:e2:91:7f:98:15:ac:5b: 2d:39:ca:94:ec:2c:92:e8:e5:56:c9:c3:a9:a3:66: 9e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:6A:17:96:8F:38:FD:AB:BB:B4:75:08:79:FC:07:C2:79:1A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68347c4b-9adb-3382-8d65-86fed7f10cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:08:06:2c:e7:b9:23:d8:b2:3f:f1:f0:1a:53:8d:0c:57:d1: c2:68:61:61:31:c1:f6:d7:a5:8c:0d:68:34:73:2d:2e:5e:0c: da:8d:ca:2d:d0:a7:66:0c:4a:1f:3c:95:88:21:23:71:41:02: 7a:80:da:de:35:f5:bb:d5:86:ba:a7:b1:e5:3a:90:5a:a8:77: cb:39:15:18:53:c4:4c:0a:41:6a:28:ed:17:2c:b8:0f:ed:6c: 6c:72:4e:de:7a:17:38:39:d8:8f:d4:2e:8c:0d:17:32:e5:02: 59:b8:a8:04:f0:5d:e9:23:bf:1c:4a:bc:db:09:fa:32:fe:cb: 87:a7:e5:34:48:fb:9b:86:47:1a:ad:7c:0a:2f:1f:c3:e2:08: 81:51:a9:3d:94:bf:1f:b7:31:39:75:7d:d4:bb:74:b0:27:ef: 81:8a:1c:70:53:49:ff:9a:92:90:1b:02:b1:da:e3:d9:f2:64: 3e:b0:71:45:c3:6e:7d:87:2d:a9:9f:f1:a6:45:19:89:c1:a6: 9d:09:07:db:2b:e2:b1:27:19:5b:7f:25:a9:07:29:44:e7:86: 2a:6a:71:a8:df:2f:4f:ab:6f:4c:27:f7:8a:03:61:4a:c7:55: cf:b6:ec:5c:2b:c0:cc:a3:ce:7f:b8:94:99:5e:e6:3e:81:c7: 55:a1:da:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLh2MvHhECC6WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWYyNWNjNWItN2I5My00YzFlLTkxNzgtYzUwMWRlZDkxN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAlg9rIDR75bgeObVxpfogNJJbnClbjWCxD4 T7WwsfyPQbE2YKCQim3/tgJRsSdFPCMwJmgdrRT8OhA1UicwsN+EZ1e3HoeyXXma QqG5GbYWMnhMzsyVEQn0G/knzobL8JWN9B4UOeYl8vvro8qVzkrttbpcKDqfNiYv 9fddRfwDM7Di6UNCeuLhWXOm1RbytYIdmpBKSXQS3NjlbAuB61vONwBfl38znpUF JK997rr30OW8uxz4+AQjTLY2M1NJXo0YySTrcCUBFigF2J5a4QVvTt9eW1IZyJzP 3GcWd1WOVAWeUZkcqeKRf5gVrFstOcqU7CyS6OVWycOpo2aeQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgxaheWjzj9q7u0dQh5/AfCeRrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjgzNDdjNGItOWFkYi0z MzgyLThkNjUtODZmZWQ3ZjEwY2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEIBiznuSPYsj/x8BpTjQxX0cJoYWExwfbXpYwNaDRzLS5eDNqNyi3Q p2YMSh88lYghI3FBAnqA2t419bvVhrqnseU6kFqod8s5FRhTxEwKQWoo7RcsuA/t bGxyTt56Fzg52I/ULowNFzLlAlm4qATwXekjvxxKvNsJ+jL+y4en5TRI+5uGRxqt fAovH8PiCIFRqT2Uvx+3MTl1fdS7dLAn74GKHHBTSf+akpAbArHa49nyZD6wcUXD bn2HLamf8aZFGYnBpp0JB9sr4rEnGVt/JakHKUTnhipqcajfL0+rb0wn94oDYUrH Vc+27FwrwMyjzn+4lJle5j6Bx1Wh2mo= -----END CERTIFICATE-----Generated at Sat Apr 26 20:58:28 2025 by rpki-client