$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1c76037-0a9e-337d-bf60-780ddeaade67.roa File: a1c76037-0a9e-337d-bf60-780ddeaade67.roa (raw, json) Hash identifier: k7YKETv3gkrjYALk0xIZYQDBwWUHM2tHafS7SLBgn24= Subject key identifier: 4C:BD:2E:78:1C:4F:6B:00:60:2E:C3:64:48:81:AF:51:3A:4C:FA:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA17B3C3EDD624D05F5F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1c76037-0a9e-337d-bf60-780ddeaade67.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.22.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:17:b3:c3:ed:d6:24:d0:5f:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ed69b8d2-016c-40bb-ab30-2614cd1c6586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:85:17:18:c8:4b:25:cb:65:5d:af:79:04: 1d:52:d6:9b:48:a9:eb:db:1d:21:1e:2d:50:b4:5b: ca:ee:68:3d:72:b4:b5:23:a4:5d:24:a1:94:e6:35: 4f:57:cb:ec:a4:bf:7c:85:4e:98:d6:91:41:e7:34: 04:37:e5:20:41:f2:92:71:a7:a9:f5:31:fb:fc:f7: 9c:32:50:0b:a4:f3:42:c5:f8:c2:86:42:21:df:e8: 44:c0:98:8f:8a:f7:d3:cf:eb:ce:50:a9:e7:8a:8d: 61:84:39:c0:e5:bc:ed:b9:8e:66:65:60:f7:41:f5: ae:8b:cd:8e:df:90:27:9e:ca:c4:d4:38:77:b8:70: e9:f5:b4:21:9c:d3:79:35:0d:d7:0c:fc:6f:27:26: 9e:4f:e9:38:df:3a:d2:56:c8:92:bc:0e:5b:fd:b5: 04:80:60:a4:fa:e0:78:d0:fa:41:73:c0:ac:6a:cf: 65:3a:7a:f0:a9:c5:40:52:12:b6:a6:84:d0:b9:34: c1:a0:a0:23:eb:38:35:1c:6e:10:17:55:01:8f:e3: 67:21:04:38:17:94:02:a2:0b:d2:83:5a:ae:d8:30: f7:e4:df:11:bb:f5:3b:8d:01:5a:5b:31:b1:84:e1: e5:e3:18:d9:e6:e6:d3:be:81:24:ec:2c:84:0f:6f: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BD:2E:78:1C:4F:6B:00:60:2E:C3:64:48:81:AF:51:3A:4C:FA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1c76037-0a9e-337d-bf60-780ddeaade67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:60:55:d7:af:b8:85:9b:4d:94:7b:1e:53:87:d9:33:0c:8a: f9:af:50:77:0f:a9:5a:aa:65:7f:53:0a:97:75:14:cf:b3:5f: 90:ed:ef:eb:9e:b0:40:7b:a0:83:ad:a0:06:8a:3d:69:a8:b6: f2:6b:83:de:87:48:6c:8a:53:23:ae:03:34:66:a4:5f:af:b9: bc:b5:37:66:50:43:ef:8c:13:5a:5b:86:be:82:7e:a1:83:4e: 65:0b:1f:e9:8d:4b:bd:28:b5:bb:fc:3b:6f:05:a4:54:a8:4c: 8f:00:fc:5b:26:3e:a8:56:2b:2c:68:51:40:ad:e3:d1:ce:bf: b2:5d:1f:0c:bb:3a:ab:48:c6:1f:4c:68:ac:53:53:5b:14:31: 23:f7:c8:39:1f:90:e7:1f:0a:57:d0:23:36:63:4a:6e:c8:fd: fc:73:67:03:21:28:e0:f8:c9:03:fd:f9:49:b8:3f:89:32:bc: cd:f5:78:34:a1:80:d5:12:14:99:2c:04:44:72:85:47:c4:bd: 30:c2:08:b1:61:39:af:1d:c7:15:0e:8f:7b:df:be:04:03:04: 8c:d7:ff:0c:eb:bf:2f:f0:3e:5d:15:9d:a8:84:f2:44:fc:ca: d4:32:2d:a2:32:b1:87:a4:47:43:30:dc:9f:24:3a:87:6d:a1: ce:65:01:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhezw+3WJNBfX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWQ2OWI4ZDItMDE2Yy00MGJiLWFiMzAtMjYxNGNkMWM2NTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZeFFxjISyXLZV2veQQdUtabSKnr2x0hHi1Q tFvK7mg9crS1I6RdJKGU5jVPV8vspL98hU6Y1pFB5zQEN+UgQfKScaep9TH7/Pec MlALpPNCxfjChkIh3+hEwJiPivfTz+vOUKnnio1hhDnA5bztuY5mZWD3QfWui82O 35AnnsrE1Dh3uHDp9bQhnNN5NQ3XDPxvJyaeT+k43zrSVsiSvA5b/bUEgGCk+uB4 0PpBc8Csas9lOnrwqcVAUhK2poTQuTTBoKAj6zg1HG4QF1UBj+NnIQQ4F5QCogvS g1qu2DD35N8Ru/U7jQFaWzGxhOHl4xjZ5ubTvoEk7CyED29XmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy9LngcT2sAYC7DZEiBr1E6TPqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTFjNzYwMzctMGE5ZS0z MzdkLWJmNjAtNzgwZGRlYWFkZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhgVdevuIWbTZR7HlOH2TMMivmvUHcPqVqqZX9TCpd1FM+zX5Dt7+ue sEB7oIOtoAaKPWmotvJrg96HSGyKUyOuAzRmpF+vuby1N2ZQQ++ME1pbhr6CfqGD TmULH+mNS70otbv8O28FpFSoTI8A/FsmPqhWKyxoUUCt49HOv7JdHwy7OqtIxh9M aKxTU1sUMSP3yDkfkOcfClfQIzZjSm7I/fxzZwMhKOD4yQP9+Um4P4kyvM31eDSh gNUSFJksBERyhUfEvTDCCLFhOa8dxxUOj3vfvgQDBIzX/wzrvy/wPl0VnaiE8kT8 ytQyLaIysYekR0Mw3J8kOodtoc5lAVQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:05:24 2025 by rpki-client