$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e22eb7b-f3be-3af0-9b46-6e2820760074.roa File: 7e22eb7b-f3be-3af0-9b46-6e2820760074.roa (raw, json) Hash identifier: nEKmd9K/3jHkcZX3dAFRFWHzMlFa9rm4jAegd1rVRdQ= Subject key identifier: B1:0A:A8:5C:49:F2:3B:EB:30:F0:ED:FB:0C:33:FC:4D:3A:33:5C:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA40244932A442F3635480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e22eb7b-f3be-3af0-9b46-6e2820760074.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:40:24:49:32:a4:42:f3:63:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8e6d87e5-70a3-49de-8173-0c2ad69f4a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:be:40:e1:25:63:25:5a:58:43:09:ae:49:e1: 9a:b7:9f:a0:c3:0b:69:1a:23:ab:49:d6:b1:6f:21: e1:27:21:ac:9e:de:74:06:e5:1d:2a:c0:0d:ac:9c: 4e:3e:0f:3b:c3:1f:b3:ae:31:d2:68:8f:d8:7e:9c: 7e:a4:e8:83:46:9f:57:78:f7:d8:48:c6:bd:34:06: 2c:76:7d:53:db:c8:b6:3e:1b:19:a0:8e:9e:6e:12: 39:7d:58:cc:11:d3:08:03:3c:df:26:6c:27:dc:ae: df:79:ee:76:36:dc:5e:f8:4d:a3:2d:f1:a4:1f:e6: 3d:fa:01:aa:f4:dd:21:b2:23:e3:fe:67:49:74:3a: 10:4b:95:53:c0:c4:19:c6:e8:b0:f2:15:a9:99:ad: 03:a8:d4:c9:71:66:fd:f0:d0:3a:9a:01:c6:fb:95: e8:b6:d5:dc:2d:5a:5d:bb:b4:0d:f5:6d:17:23:6e: c1:6e:c4:98:a4:2d:49:07:0f:92:63:fa:37:62:0b: 5a:5d:79:d6:d2:6b:88:7f:38:16:c6:7f:98:88:09: ba:fd:bf:55:36:67:86:8c:f4:6e:f7:e7:09:7e:64: 97:5e:48:dd:14:6e:22:bd:2c:bf:ac:49:8a:e9:5c: 20:79:eb:2b:79:8d:95:18:f7:66:dd:0f:18:5d:d8: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0A:A8:5C:49:F2:3B:EB:30:F0:ED:FB:0C:33:FC:4D:3A:33:5C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e22eb7b-f3be-3af0-9b46-6e2820760074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:08:c4:d0:b6:c5:42:5e:53:7c:94:18:27:cb:a7:9c:64:85: 9a:7c:4f:e4:6d:e4:3a:03:47:13:ec:59:99:ef:c5:c9:ee:70: 90:e3:86:f8:f3:23:74:b8:19:33:a9:c5:ea:01:20:1d:f6:80: 01:3a:92:65:26:a1:0c:c2:98:eb:ec:d8:b1:56:cb:71:5e:fe: b8:dd:bb:84:66:5d:c3:e0:94:48:2e:b4:33:a5:27:51:c3:ee: 65:2b:ef:3b:db:0b:f4:3a:a9:12:a3:8d:c1:09:91:9d:fa:42: 21:f8:36:74:a8:42:1d:af:e8:77:29:b2:1e:ed:c4:67:1d:f2: e2:a9:1a:76:d3:eb:a1:45:da:81:36:35:fe:8e:4e:b6:25:f0: d3:7d:81:77:51:4f:69:9f:62:50:25:b5:35:75:88:9c:39:03: ba:ba:bd:dd:8e:df:eb:7c:67:c1:7f:3e:c0:42:7c:09:ab:4d: 90:80:ba:04:f5:37:61:e8:65:7e:44:f3:9a:7f:fc:30:d1:e3: de:8d:c3:a4:b0:2f:7c:16:20:c4:af:e8:ed:b4:7d:37:6d:c8: c9:d2:f5:09:84:9a:84:3b:a1:45:ff:5a:35:d8:fe:65:5c:0e: 9f:26:ef:fe:75:39:3e:3f:5e:e3:a6:1c:ca:a7:34:cf:54:01: 3c:3f:f5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukAkSTKkQvNjVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGU2ZDg3ZTUtNzBhMy00OWRlLTgxNzMtMGMyYWQ2OWY0YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL5A4SVjJVpYQwmuSeGat5+gwwtpGiOrSdax byHhJyGsnt50BuUdKsANrJxOPg87wx+zrjHSaI/Yfpx+pOiDRp9XePfYSMa9NAYs dn1T28i2PhsZoI6ebhI5fVjMEdMIAzzfJmwn3K7fee52Ntxe+E2jLfGkH+Y9+gGq 9N0hsiPj/mdJdDoQS5VTwMQZxuiw8hWpma0DqNTJcWb98NA6mgHG+5XottXcLVpd u7QN9W0XI27BbsSYpC1JBw+SY/o3YgtaXXnW0muIfzgWxn+YiAm6/b9VNmeGjPRu 9+cJfmSXXkjdFG4ivSy/rEmK6VwgeesreY2VGPdm3Q8YXdhjhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEKqFxJ8jvrMPDt+wwz/E06M1xYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2UyMmViN2ItZjNiZS0z YWYwLTliNDYtNmUyODIwNzYwMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYIxNC2xUJeU3yUGCfLp5xkhZp8T+Rt5DoDRxPsWZnvxcnucJDjhvjz I3S4GTOpxeoBIB32gAE6kmUmoQzCmOvs2LFWy3Fe/rjdu4RmXcPglEgutDOlJ1HD 7mUr7zvbC/Q6qRKjjcEJkZ36QiH4NnSoQh2v6Hcpsh7txGcd8uKpGnbT66FF2oE2 Nf6OTrYl8NN9gXdRT2mfYlAltTV1iJw5A7q6vd2O3+t8Z8F/PsBCfAmrTZCAugT1 N2HoZX5E85p//DDR496Nw6SwL3wWIMSv6O20fTdtyMnS9QmEmoQ7oUX/WjXY/mVc Dp8m7/51OT4/XuOmHMqnNM9UATw/9Vc= -----END CERTIFICATE-----Generated at Sat Apr 26 20:58:28 2025 by rpki-client