$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa File: cbac3622-d922-3d32-93c8-7b1c3832c248.roa (raw, json) Hash identifier: X8Wth3COP4PbJR1lA7oDRgf69OobylcXQBJ7d9l5Qdo= Subject key identifier: 2B:03:0C:2B:31:4E:8A:E9:00:2C:02:C8:F0:D4:59:54:8C:15:BF:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4A40E1AA160DDB1A1980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4a:40:e1:aa:16:0d:db:1a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=046e8d86-e35c-430e-918e-a0ad67812773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:1a:b4:63:10:84:82:fa:18:f4:14:61:b5: 46:5d:16:3e:07:7d:bf:c6:54:79:6b:19:8e:d0:72: 88:be:e4:0e:bd:57:e2:6a:d2:dc:6d:33:15:d1:a8: db:62:84:ed:40:2b:8b:44:65:4a:f8:f6:51:ce:60: ae:e9:ef:f0:fa:34:5c:88:35:08:20:b5:c4:09:26: 8b:04:8d:3b:c2:ce:e6:4b:6e:c3:de:b6:6a:98:2f: c3:a0:15:29:86:7f:16:3c:46:b7:22:36:6b:10:71: 47:f2:f9:65:13:d0:af:97:14:96:2a:c8:bd:de:16: 52:ff:c0:7d:84:8e:7a:bc:b5:44:d0:96:8a:89:43: 28:4d:d7:e8:60:7e:ea:d3:59:4b:82:b2:ee:1f:d1: 73:fb:42:d1:b6:a8:4a:de:22:ad:bd:1d:93:52:68: d9:45:10:33:b3:c4:ae:46:3f:a8:82:ab:40:0c:1e: f0:8d:17:e5:28:7f:05:2d:f8:63:83:e9:e8:58:72: e3:c4:89:3c:bd:19:3f:ee:37:8c:7a:06:56:2f:40: 16:8a:a4:c5:44:d0:91:ba:48:10:df:a5:e1:6f:8b: 94:62:65:1f:6c:15:11:9a:10:32:4b:2f:09:44:ed: 11:94:b0:41:28:cd:3a:10:4a:5d:5a:cd:e5:ba:52: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:03:0C:2B:31:4E:8A:E9:00:2C:02:C8:F0:D4:59:54:8C:15:BF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d9:a3:2d:80:98:27:a1:aa:1e:7e:64:4b:e0:79:34:b1:60: 33:1c:2b:5c:62:2f:a5:5a:dc:f5:43:c5:7c:42:59:c7:e0:37: 31:a4:c2:2a:f4:bb:76:3e:55:aa:94:d9:56:9f:d8:14:db:1d: e4:e6:4a:13:41:e9:60:9a:de:2f:3a:a3:c4:37:cc:93:55:1d: be:19:51:9d:f6:d6:63:16:e3:dd:10:8b:82:22:86:75:39:4a: ab:fc:fd:a2:2c:35:84:00:48:3c:12:ab:d2:91:a1:f3:ba:03: 96:c6:f5:bf:a3:63:f2:4c:91:56:51:b0:7d:8b:2d:40:4f:5b: 54:70:e4:17:8c:74:77:8a:76:d2:c5:ef:a8:66:d8:50:24:f3: 97:1f:4c:02:bf:65:c0:36:95:5e:5c:91:75:f1:77:4d:fd:3f: ae:59:63:01:9b:aa:71:3f:30:10:00:07:dd:9c:af:bf:60:0d: 88:72:96:78:8d:dd:7a:6a:67:f9:4d:c1:fb:12:79:5c:ff:6b: 3b:a3:f1:c0:2a:d5:c2:89:28:ff:d6:12:c7:a7:c2:71:46:3e: bb:4e:b7:fc:23:ed:99:c3:b5:6e:49:d3:8e:4b:bf:f1:b1:4d: ac:b3:a8:0a:70:80:c0:10:ba:d4:8c:59:f1:11:33:a7:9f:0f: 82:3a:3c:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70pA4aoWDdsaGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MDQ2ZThkODYtZTM1Yy00MzBlLTkxOGUtYTBhZDY3ODEyNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvscatGMQhIL6GPQUYbVGXRY+B32/xlR5axmO 0HKIvuQOvVfiatLcbTMV0ajbYoTtQCuLRGVK+PZRzmCu6e/w+jRciDUIILXECSaL BI07ws7mS27D3rZqmC/DoBUphn8WPEa3IjZrEHFH8vllE9CvlxSWKsi93hZS/8B9 hI56vLVE0JaKiUMoTdfoYH7q01lLgrLuH9Fz+0LRtqhK3iKtvR2TUmjZRRAzs8Su Rj+ogqtADB7wjRflKH8FLfhjg+noWHLjxIk8vRk/7jeMegZWL0AWiqTFRNCRukgQ 36Xhb4uUYmUfbBURmhAySy8JRO0RlLBBKM06EEpdWs3lulIF4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsDDCsxTorpACwCyPDUWVSMFb+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JhYzM2MjItZDkyMi0z ZDMyLTkzYzgtN2IxYzM4MzJjMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPZoy2AmCehqh5+ZEvgeTSxYDMcK1xiL6Va3PVDxXxCWcfgNzGkwir0 u3Y+VaqU2Vaf2BTbHeTmShNB6WCa3i86o8Q3zJNVHb4ZUZ321mMW490Qi4IihnU5 Sqv8/aIsNYQASDwSq9KRofO6A5bG9b+jY/JMkVZRsH2LLUBPW1Rw5BeMdHeKdtLF 76hm2FAk85cfTAK/ZcA2lV5ckXXxd039P65ZYwGbqnE/MBAAB92cr79gDYhylniN 3XpqZ/lNwfsSeVz/azuj8cAq1cKJKP/WEsenwnFGPrtOt/wj7ZnDtW5J045Lv/Gx TayzqApwgMAQutSMWfERM6efD4I6PJM= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:18 2025 by rpki-client