$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c35d561e-1ce2-36f9-921b-c03b2c616554.roa File: c35d561e-1ce2-36f9-921b-c03b2c616554.roa (raw, json) Hash identifier: tx2GmDt8sQOLgcMxQTxJkSsc31498oEJhX8Hyrzejig= Subject key identifier: 8A:0A:E7:D8:66:AB:9E:58:54:C4:50:92:FD:91:0A:FA:29:87:72:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4FF1A6E7DDB6ADB16B454 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c35d561e-1ce2-36f9-921b-c03b2c616554.roa Signing time: Tue 22 Apr 2025 09:37:45 +0000 ROA not before: Tue 22 Apr 2025 09:37:45 +0000 ROA not after: Mon 21 Jul 2025 09:37:45 +0000 asID: 19905 IP address blocks: 173.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:ff:1a:6e:7d:db:6a:db:16:b4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:45 2025 GMT Not After : Jul 21 09:37:45 2025 GMT Subject: CN=973aaf81-34ab-46ed-85ae-a2573260d1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:80:cf:75:a5:21:a8:d4:5d:70:14:20:da:86: 02:fc:28:47:5b:30:8a:7b:67:cc:ca:29:9b:77:7b: da:32:01:02:5a:61:db:cc:ba:d8:1c:6d:4e:3d:a8: c7:10:5d:75:1d:31:ad:eb:21:c5:cb:a4:cf:87:fa: bc:49:68:88:c4:79:ad:6d:ed:45:b6:c1:26:fa:58: 67:9a:7a:9a:b1:04:12:fa:82:94:c7:16:ba:09:0f: 86:b8:9f:87:dd:fa:56:ba:85:79:9f:e5:46:33:8f: 18:a2:ee:15:45:83:77:c6:81:0b:6a:48:38:4d:5e: 27:72:b8:1b:01:8c:81:68:c6:17:5e:2d:33:4c:e0: f5:34:1c:1b:be:07:f6:75:b2:86:67:4a:ed:9a:6c: 52:54:61:12:76:2b:bf:52:6e:c0:42:6d:02:c1:e3: 18:61:64:d8:18:47:a0:b9:0d:21:5d:e4:21:d3:72: 0b:79:23:36:fb:c8:b5:e4:77:32:b8:d0:fa:48:b3: 96:2a:ef:26:28:d7:0d:eb:41:0d:fa:51:70:56:c0: 94:6c:cb:3a:20:75:ed:76:0b:7e:43:1c:05:ed:02: 5f:d0:72:98:7b:30:dc:59:7e:78:97:5e:42:33:b1: 0d:58:14:bd:5d:88:50:90:48:7c:4c:de:eb:bc:1d: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0A:E7:D8:66:AB:9E:58:54:C4:50:92:FD:91:0A:FA:29:87:72:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c35d561e-1ce2-36f9-921b-c03b2c616554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:96:d1:0d:48:d9:fb:f5:df:c9:6c:b8:d8:ce:53:af:28:38: c0:b9:08:45:ca:7a:cf:87:b9:38:bd:f5:3d:d5:22:b7:6e:87: 6c:59:24:6c:c4:9e:ce:ad:03:fc:f2:ac:60:76:52:9c:9e:31: 98:4a:e7:a9:ff:c5:e4:5b:12:e8:4c:1f:5d:15:e0:99:bd:8d: b6:47:18:cf:c7:20:47:65:3e:df:e2:08:41:8b:a8:70:7d:d7: c6:0f:31:e2:50:02:12:31:85:2f:5f:6e:d0:1b:29:db:fb:c0: 27:11:e1:2e:eb:1e:83:26:1b:e5:50:89:48:ba:6b:97:20:7c: 98:ef:71:82:d4:42:06:54:6d:25:38:c1:1f:eb:3f:45:a6:67: 01:02:a9:89:5d:d8:0e:56:cf:ef:74:8e:36:4b:9f:83:0b:29: 42:5d:ba:b2:cc:df:7b:d3:91:09:7e:96:52:d5:7d:2a:35:40: 4b:89:ff:fc:72:27:eb:6c:d2:b4:76:63:b0:ad:69:de:e3:c6: db:c2:aa:b9:e6:62:8f:17:0e:c9:4a:63:00:82:5c:57:ac:c5: 14:d9:ae:7d:71:be:31:7a:52:30:d2:9c:47:b5:ae:9e:4e:b6: 5b:34:52:5d:65:0c:cb:ea:80:e7:4e:4a:a8:dd:62:07:7e:e1: ad:e9:5a:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9P8abn3batsWtFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5Mzc0NVoXDTI1MDcyMTA5Mzc0NVowLzEtMCsGA1UEAxMk OTczYWFmODEtMzRhYi00NmVkLTg1YWUtYTI1NzMyNjBkMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoDPdaUhqNRdcBQg2oYC/ChHWzCKe2fMyimb d3vaMgECWmHbzLrYHG1OPajHEF11HTGt6yHFy6TPh/q8SWiIxHmtbe1FtsEm+lhn mnqasQQS+oKUxxa6CQ+GuJ+H3fpWuoV5n+VGM48You4VRYN3xoELakg4TV4ncrgb AYyBaMYXXi0zTOD1NBwbvgf2dbKGZ0rtmmxSVGESdiu/Um7AQm0CweMYYWTYGEeg uQ0hXeQh03ILeSM2+8i15HcyuND6SLOWKu8mKNcN60EN+lFwVsCUbMs6IHXtdgt+ QxwF7QJf0HKYezDcWX54l15CM7ENWBS9XYhQkEh8TN7rvB1U9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoK59hmq55YVMRQkv2RCvoph3KDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzM1ZDU2MWUtMWNlMi0z NmY5LTkyMWItYzAzYjJjNjE2NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6W0Q1I2fv138lsuNjOU68oOMC5CEXKes+HuTi99T3VIrduh2xZJGzE ns6tA/zyrGB2UpyeMZhK56n/xeRbEuhMH10V4Jm9jbZHGM/HIEdlPt/iCEGLqHB9 18YPMeJQAhIxhS9fbtAbKdv7wCcR4S7rHoMmG+VQiUi6a5cgfJjvcYLUQgZUbSU4 wR/rP0WmZwECqYld2A5Wz+90jjZLn4MLKUJdurLM33vTkQl+llLVfSo1QEuJ//xy J+ts0rR2Y7Ctad7jxtvCqrnmYo8XDslKYwCCXFesxRTZrn1xvjF6UjDSnEe1rp5O tls0Ul1lDMvqgOdOSqjdYgd+4a3pWuw= -----END CERTIFICATE-----Generated at Sun Jun 15 01:51:46 2025 by rpki-client