$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3cd6359-f339-393c-bf6c-d1d473b04ec1.roa File: b3cd6359-f339-393c-bf6c-d1d473b04ec1.roa (raw, json) Hash identifier: KnmBIdXZA7nTSbuyATeYmEyB9wxAm0fO+Pzf/uqHVbk= Subject key identifier: 23:D9:7C:32:DE:B7:EC:D8:21:1E:91:8E:2B:D8:85:14:34:69:9E:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F2EA480F1FE843C8E1700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3cd6359-f339-393c-bf6c-d1d473b04ec1.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.18.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:2e:a4:80:f1:fe:84:3c:8e:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=22096a3a-bbe9-48f7-a659-ebc4b8897b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7b:19:f7:9b:7c:b4:af:38:01:54:86:9b:bb: e8:91:62:77:93:d5:a6:93:97:30:4c:14:94:26:9e: dd:4e:0f:a9:cd:23:b3:ae:2d:fc:ac:5c:4c:7e:c1: 84:b9:26:8f:56:cf:b4:8e:8d:53:22:b8:b0:4b:8c: b7:6d:bb:37:24:46:cc:b2:8c:ac:5a:bc:55:cf:5a: ea:79:55:5a:63:43:9b:4b:3f:c4:6c:84:c5:e0:de: fd:10:6b:c7:c1:46:93:3b:ed:e8:98:0b:54:13:ca: b9:a0:a8:f1:ce:71:41:18:76:6e:94:be:84:01:03: 47:1b:32:87:02:70:51:91:ee:d9:f2:57:60:8e:59: da:89:c8:65:77:51:de:5e:e9:a7:94:a1:c3:aa:8e: 90:e4:e4:c9:08:28:62:b8:fb:48:9c:86:2a:b4:98: 02:da:ca:f0:c3:d1:b6:78:c9:4f:f3:65:5f:d5:70: f9:ed:4f:80:23:22:3e:de:25:ce:f5:ef:9d:a7:0f: c2:94:86:af:4d:04:6e:42:a2:66:72:e6:25:65:95: de:b8:e3:99:f5:4c:ed:f4:e0:9e:1c:db:10:12:b2: 01:75:be:aa:66:d0:0b:a9:d0:56:83:93:1f:ae:8d: 9f:34:37:6e:51:20:de:de:cc:38:0c:da:fc:87:b7: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D9:7C:32:DE:B7:EC:D8:21:1E:91:8E:2B:D8:85:14:34:69:9E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3cd6359-f339-393c-bf6c-d1d473b04ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ab:a2:54:0d:2b:43:7d:59:35:82:d1:60:12:6c:09:33:9d: 9a:b7:bc:77:93:d5:a1:d6:6f:70:c2:d1:22:5c:a0:11:f3:17: 94:dd:52:bb:41:29:ac:77:ce:da:69:19:76:8a:b8:b4:21:45: 2d:37:fd:c1:ba:54:68:e7:fe:96:8c:4f:0e:14:aa:88:5c:c9: 21:ed:b2:e9:43:19:01:89:67:62:0c:e3:a9:89:04:98:7b:d4: da:65:4a:11:e6:fe:96:90:4b:62:39:8b:48:26:80:ba:78:10: 5c:3e:e7:17:25:b5:d1:47:76:7e:21:b0:38:03:16:27:de:a3: 41:44:80:7b:08:6e:7a:08:d6:1a:59:08:8a:be:bb:05:49:ca: da:a8:94:24:c3:02:e3:0e:5f:7e:2d:d6:62:54:c3:c8:bc:a2: 5c:7d:52:f2:60:f9:81:77:36:df:28:a1:35:c4:07:4f:37:ec: f1:c8:2f:35:56:73:5f:e1:da:be:1a:82:51:cc:61:9f:a4:84: dd:db:26:a7:05:f0:1e:a2:84:9d:e4:98:47:0e:cb:f4:7f:62: 33:85:90:12:18:07:dd:9a:32:5a:a5:30:76:ab:0c:3e:8d:de: 67:af:aa:d6:cb:35:ba:4e:ab:20:f4:4c:08:8f:54:7f:3c:c9: 78:44:96:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHy6kgPH+hDyOFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MjIwOTZhM2EtYmJlOS00OGY3LWE2NTktZWJjNGI4ODk3YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHsZ95t8tK84AVSGm7vokWJ3k9Wmk5cwTBSU Jp7dTg+pzSOzri38rFxMfsGEuSaPVs+0jo1TIriwS4y3bbs3JEbMsoysWrxVz1rq eVVaY0ObSz/EbITF4N79EGvHwUaTO+3omAtUE8q5oKjxznFBGHZulL6EAQNHGzKH AnBRke7Z8ldgjlnaichld1HeXumnlKHDqo6Q5OTJCChiuPtInIYqtJgC2srww9G2 eMlP82Vf1XD57U+AIyI+3iXO9e+dpw/ClIavTQRuQqJmcuYlZZXeuOOZ9Uzt9OCe HNsQErIBdb6qZtALqdBWg5Mfro2fNDduUSDe3sw4DNr8h7cAbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPZfDLet+zYIR6RjivYhRQ0aZ5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjNjZDYzNTktZjMzOS0z OTNjLWJmNmMtZDFkNDczYjA0ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRLUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGrolQNK0N9WTWC0WASbAkznZq3vHeT1aHWb3DC0SJcoBHzF5TdUrtB Kax3ztppGXaKuLQhRS03/cG6VGjn/paMTw4UqohcySHtsulDGQGJZ2IM46mJBJh7 1NplShHm/paQS2I5i0gmgLp4EFw+5xcltdFHdn4hsDgDFifeo0FEgHsIbnoI1hpZ CIq+uwVJytqolCTDAuMOX34t1mJUw8i8olx9UvJg+YF3Nt8ooTXEB0837PHILzVW c1/h2r4aglHMYZ+khN3bJqcF8B6ihJ3kmEcOy/R/YjOFkBIYB92aMlqlMHarDD6N 3mevqtbLNbpOqyD0TAiPVH88yXhElkY= -----END CERTIFICATE-----Generated at Sun Apr 27 00:33:38 2025 by rpki-client