$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/704fbc67-6793-334f-9cfa-ad8985af882b.roa File: 704fbc67-6793-334f-9cfa-ad8985af882b.roa (raw, json) Hash identifier: P+qGIxa86xuYRgbZg+CfeASkCBGkNFMNnBZ+9CZdlnU= Subject key identifier: 48:4C:E1:C5:82:D0:3E:8F:6C:69:5C:26:9E:24:F0:C6:29:90:71:53 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF58DEFCE61E7FF6DB0A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/704fbc67-6793-334f-9cfa-ad8985af882b.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.22.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:58:de:fc:e6:1e:7f:f6:db:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=27410915-fa84-4b6d-b87d-0e4f90752fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d7:df:70:79:d1:62:25:37:8f:8e:47:e3:95: 8e:8a:59:35:19:7b:26:19:40:61:bf:5f:cf:48:af: 31:a3:09:96:38:46:6c:5f:7b:65:f2:b8:54:19:d5: d9:74:b4:04:6a:40:02:e2:6c:6e:41:d9:4c:d9:a3: a5:b5:cb:a0:aa:e1:e1:61:74:3b:8f:d7:be:2f:b9: 3e:72:86:91:41:57:28:64:82:75:4e:68:16:b3:51: fe:4a:97:2d:70:02:a6:19:36:c7:e6:98:4f:bc:cc: 83:1d:22:19:f3:cb:c4:a2:58:bb:a1:b6:9e:bd:b4: b5:e1:af:79:d1:fb:13:9f:41:a5:36:c6:7e:2f:4b: 15:87:1f:6b:3d:f3:86:27:64:5a:25:c3:a0:7a:ec: 85:45:ac:db:c8:34:81:ce:a7:79:a9:c0:b8:a2:39: d4:71:76:27:26:de:47:75:00:b1:83:c4:0e:4c:e7: c6:b6:ed:0e:11:58:e0:19:5d:82:08:61:4c:8c:70: 92:34:71:6e:d2:1c:c8:ee:d9:16:0b:df:8c:31:01: 59:9b:9f:5e:1c:da:81:ac:6c:ec:31:ba:0d:2b:59: 28:5c:c9:83:37:7d:af:7f:28:c0:c6:43:5a:69:3d: e7:42:7c:d4:96:8c:5d:67:20:1a:a8:33:aa:6f:d5: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4C:E1:C5:82:D0:3E:8F:6C:69:5C:26:9E:24:F0:C6:29:90:71:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/704fbc67-6793-334f-9cfa-ad8985af882b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:08:e7:5d:3e:de:d5:72:36:76:46:5b:b2:25:0a:4f:c8:62: 68:be:d8:83:5d:57:43:8d:1d:9b:d1:7d:cc:be:4e:50:9f:a8: dd:4a:5d:b9:0b:67:a4:b5:e2:60:e8:02:14:11:3b:a7:4d:35: 99:a9:c5:0b:47:77:3e:5d:05:95:ca:06:f8:65:68:0a:15:ec: 65:07:28:7c:78:b2:bd:85:17:09:a1:77:cb:bf:38:ad:23:cb: d7:08:a1:3e:0f:1b:6d:a5:df:75:41:70:da:ab:9f:7f:31:86: 38:03:15:89:a4:c9:4b:6e:4e:e6:f5:91:08:86:7f:d4:30:97: 4f:cd:e0:1d:fe:16:35:81:16:8c:b2:12:44:c7:35:ad:a2:0e: 92:57:e0:0e:cc:9c:f1:3d:36:09:97:97:b4:ff:ee:d9:a0:dd: 0b:f8:82:ef:9f:9b:65:cd:b0:34:07:28:96:0c:64:6c:54:f6: 37:d4:78:5c:9b:8f:12:d9:20:95:d8:c9:4a:d2:e6:4c:01:00: e7:5e:5a:19:70:70:cd:b4:1f:3d:6e:d4:61:4f:7b:4f:2a:5a: 8b:eb:a9:13:9f:e5:31:31:cd:7f:94:03:37:37:63:e7:f0:dd: 6d:9c:ea:12:4c:fc:e1:94:e8:00:54:71:05:5e:ac:fe:a1:3d: 9f:e9:56:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71je/OYef/bbCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Mjc0MTA5MTUtZmE4NC00YjZkLWI4N2QtMGU0ZjkwNzUyZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNffcHnRYiU3j45H45WOilk1GXsmGUBhv1/P SK8xowmWOEZsX3tl8rhUGdXZdLQEakAC4mxuQdlM2aOltcugquHhYXQ7j9e+L7k+ coaRQVcoZIJ1TmgWs1H+SpctcAKmGTbH5phPvMyDHSIZ88vEoli7obaevbS14a95 0fsTn0GlNsZ+L0sVhx9rPfOGJ2RaJcOgeuyFRazbyDSBzqd5qcC4ojnUcXYnJt5H dQCxg8QOTOfGtu0OEVjgGV2CCGFMjHCSNHFu0hzI7tkWC9+MMQFZm59eHNqBrGzs MboNK1koXMmDN32vfyjAxkNaaT3nQnzUloxdZyAaqDOqb9UaNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhM4cWC0D6PbGlcJp4k8MYpkHFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzA0ZmJjNjctNjc5My0z MzRmLTljZmEtYWQ4OTg1YWY4ODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgI510+3tVyNnZGW7IlCk/IYmi+2INdV0ONHZvRfcy+TlCfqN1KXbkL Z6S14mDoAhQRO6dNNZmpxQtHdz5dBZXKBvhlaAoV7GUHKHx4sr2FFwmhd8u/OK0j y9cIoT4PG22l33VBcNqrn38xhjgDFYmkyUtuTub1kQiGf9Qwl0/N4B3+FjWBFoyy EkTHNa2iDpJX4A7MnPE9NgmXl7T/7tmg3Qv4gu+fm2XNsDQHKJYMZGxU9jfUeFyb jxLZIJXYyUrS5kwBAOdeWhlwcM20Hz1u1GFPe08qWovrqROf5TExzX+UAzc3Y+fw 3W2c6hJM/OGU6ABUcQVerP6hPZ/pVtY= -----END CERTIFICATE-----Generated at Sun Apr 27 11:33:25 2025 by rpki-client