$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c22957df-7bf4-38cf-a806-342b81d590c6.roa File: c22957df-7bf4-38cf-a806-342b81d590c6.roa (raw, json) Hash identifier: 70QqGBuhgjYh6JPp3j60Ko1x5YwFmcDcXwgpuDrAkA4= Subject key identifier: 89:B8:41:2F:04:C6:B3:04:DC:54:93:CF:4B:93:82:D2:14:1C:B5:FF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B7A5FE6191ADA29C4380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c22957df-7bf4-38cf-a806-342b81d590c6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.24.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b7:a5:fe:61:91:ad:a2:9c:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d6bdbf10-634b-4a7d-ba29-9932de8717a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:e2:35:cc:01:97:a9:79:3a:68:07:c3:04: d2:ea:fa:15:99:0c:d2:5c:c0:51:9c:8f:e9:81:8d: 4c:7e:11:72:6d:52:b8:fa:b3:1f:2e:39:a0:5b:7b: cc:aa:4d:ba:ad:1a:c7:10:a9:4e:e6:b8:14:94:49: b5:49:20:fa:f1:d3:56:39:a9:f5:1f:6b:29:00:7b: aa:e8:bf:67:22:bb:cd:42:9f:87:af:99:2f:8b:e0: 39:51:af:8f:1b:89:59:24:30:17:06:1b:ee:a7:26: 95:ac:f3:8b:98:1c:3d:5d:0a:d9:8f:0a:79:1f:4f: 89:b5:4a:b0:a9:71:9f:05:56:cd:c4:c4:63:dd:42: 6f:e2:c5:3d:a6:e1:2a:9a:12:80:c8:2e:42:59:5a: 25:57:e6:70:d1:b5:0e:0d:67:51:ce:6a:ab:77:0f: eb:5e:a8:fe:8b:6c:89:29:bd:e0:4e:e2:2c:a2:93: 9a:54:40:bb:1d:1d:bb:6d:60:af:38:85:b2:bd:25: ad:f3:bb:da:65:72:44:a9:18:de:bd:0e:e1:82:2c: 20:b6:6d:0c:b3:fd:42:46:00:4a:df:cb:06:f8:bf: f5:59:b0:e0:fc:f7:ec:c0:22:66:3f:d3:e2:b8:1f: 61:f6:8e:9f:45:9a:8b:70:16:f7:d3:e4:97:2f:7c: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B8:41:2F:04:C6:B3:04:DC:54:93:CF:4B:93:82:D2:14:1C:B5:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c22957df-7bf4-38cf-a806-342b81d590c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:52:06:47:1b:d6:2d:b7:9e:73:ae:b1:a4:5a:a0:d4:97:ed: cc:46:b9:5f:2f:e8:8d:bf:01:7c:01:23:0d:24:e2:5e:04:e1: 2f:07:24:56:bf:d2:cf:b6:81:08:f2:da:50:c5:31:17:76:4f: c0:d1:2e:a1:70:50:30:17:82:21:73:0b:e0:2e:ca:17:08:6f: 6b:4f:5c:fd:9b:dc:fd:b1:82:18:2c:df:f7:1c:22:cd:6c:27: 8a:59:c7:6e:45:29:45:f9:68:28:e6:a3:4a:9f:4a:7a:13:65: b9:42:23:eb:36:15:3f:6b:ec:16:9c:1a:24:a4:96:bc:4f:44: 25:7b:4b:01:77:9e:54:72:53:78:95:e5:8c:c9:09:b3:3a:c7: 25:cc:02:5d:67:e3:ba:59:61:de:a4:59:4a:df:4f:8e:c8:36: ed:90:2e:72:29:68:29:10:80:88:a3:ba:c1:42:f5:2d:5f:5c: 1e:54:c6:60:1f:55:20:e4:78:d8:77:ea:22:74:80:99:b5:53: 20:3c:8c:3c:18:df:fb:b8:35:16:66:ca:15:11:90:b1:e9:ff: 4b:b3:03:90:64:44:e6:23:8b:ba:43:f1:de:a0:a0:33:4d:de: c2:03:1d:25:f5:be:8b:c9:90:f6:0a:d1:71:c7:ae:3a:1c:35: aa:11:fe:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLel/mGRraKcQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDZiZGJmMTAtNjM0Yi00YTdkLWJhMjktOTkzMmRlODcxN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dHiNcwBl6l5OmgHwwTS6voVmQzSXMBRnI/p gY1MfhFybVK4+rMfLjmgW3vMqk26rRrHEKlO5rgUlEm1SSD68dNWOan1H2spAHuq 6L9nIrvNQp+Hr5kvi+A5Ua+PG4lZJDAXBhvupyaVrPOLmBw9XQrZjwp5H0+JtUqw qXGfBVbNxMRj3UJv4sU9puEqmhKAyC5CWVolV+Zw0bUODWdRzmqrdw/rXqj+i2yJ Kb3gTuIsopOaVEC7HR27bWCvOIWyvSWt87vaZXJEqRjevQ7hgiwgtm0Ms/1CRgBK 38sG+L/1WbDg/PfswCJmP9PiuB9h9o6fRZqLcBb30+SXL3xV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm4QS8ExrME3FSTz0uTgtIUHLX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzIyOTU3ZGYtN2JmNC0z OGNmLWE4MDYtMzQyYjgxZDU5MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJSBkcb1i23nnOusaRaoNSX7cxGuV8v6I2/AXwBIw0k4l4E4S8HJFa/ 0s+2gQjy2lDFMRd2T8DRLqFwUDAXgiFzC+AuyhcIb2tPXP2b3P2xghgs3/ccIs1s J4pZx25FKUX5aCjmo0qfSnoTZblCI+s2FT9r7BacGiSklrxPRCV7SwF3nlRyU3iV 5YzJCbM6xyXMAl1n47pZYd6kWUrfT47INu2QLnIpaCkQgIijusFC9S1fXB5UxmAf VSDkeNh36iJ0gJm1UyA8jDwY3/u4NRZmyhURkLHp/0uzA5BkROYji7pD8d6goDNN 3sIDHSX1vovJkPYK0XHHrjocNaoR/qQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:05 2025 by rpki-client