$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa File: d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa (raw, json) Hash identifier: yMyQHy0s/lg+UJLN3LTafkMDgybFBRFYR5ArL6k4Ho4= Subject key identifier: A9:BC:50:EF:62:05:AB:D2:CD:51:99:6D:32:5B:D9:55:14:7F:D7:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C488A1F86128F0B743C160 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.22.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:88:a1:f8:61:28:f0:b7:43:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=e6a73d99-ce1e-4d57-a83a-a6ed421d1349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9e:e3:d7:51:55:24:4c:d3:c8:17:e1:8b:d5: 76:46:13:cd:7c:04:9a:97:28:d8:ff:94:ed:50:01: 53:20:cb:b3:5f:65:93:33:0e:2f:1f:7c:55:8b:5f: e1:e6:b6:de:76:07:84:bb:30:80:eb:e1:bf:a6:c1: b7:99:81:cc:e0:8c:9c:b2:89:20:dc:ed:b1:5f:9a: c0:21:58:3c:3a:c9:42:17:2a:9f:21:ee:aa:c6:eb: f1:02:67:51:df:b2:f4:47:bb:6f:95:01:a2:52:db: 5a:49:f7:30:1d:2b:a8:ef:ee:f1:4a:dd:cb:83:44: b4:89:04:26:d4:df:fe:5f:8b:f3:fc:9a:16:7b:30: bd:c5:e0:27:cd:4d:e2:e6:89:82:f0:6e:39:dd:95: 47:3a:14:00:8f:51:46:cc:df:a1:fc:19:e8:5c:7d: 62:40:0b:e5:5b:15:cd:0e:09:c6:9e:62:55:e6:fc: 9c:34:02:f0:97:02:96:57:48:ae:6c:04:08:bf:4d: 9b:a5:62:65:5d:08:aa:35:2a:94:bb:80:b3:78:64: 28:b2:f2:ff:df:90:31:09:19:58:8f:db:21:f2:f3: f2:87:46:cf:c9:67:94:6a:b7:26:1c:57:29:fb:c6: e4:b4:8a:00:0c:b3:04:e5:73:3c:0c:77:dc:67:58: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BC:50:EF:62:05:AB:D2:CD:51:99:6D:32:5B:D9:55:14:7F:D7:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0b:7f:0d:f3:f0:e4:b8:d8:ee:c2:5b:d8:38:74:6f:2c:c0: ba:7b:04:77:6b:da:1b:91:d1:0a:16:b4:ea:53:a1:17:1a:d5: ee:9b:b8:88:8d:ec:2a:6d:7f:31:cf:8b:e0:14:51:48:09:65: 54:8c:e2:60:9b:1e:9d:0f:6c:5f:0b:a7:d4:ac:d9:b2:eb:67: f9:63:51:a1:04:e2:4e:67:4d:a2:b5:e7:15:0d:3b:5e:73:9d: c2:e2:e2:20:15:bb:6d:f2:95:69:70:5e:9c:75:ec:b5:67:03: 92:5e:ba:11:df:21:c9:75:57:87:42:a0:7c:ad:0a:d0:90:27: 38:d1:65:eb:bb:08:28:d8:88:18:87:35:8e:9b:ae:b7:4c:24: f5:80:3f:07:1d:01:cd:81:ee:13:3b:e0:8b:20:ef:e1:bf:dd: b7:73:74:f5:5d:a3:f5:32:3a:94:fb:af:d1:3d:ed:cb:f8:34: 94:5b:70:f2:42:98:f9:7e:ca:0e:63:29:02:e2:ce:40:89:25: ca:e5:71:08:fd:b6:4f:f6:c6:10:4c:01:9a:1c:36:30:44:cc: 40:2f:57:93:57:75:60:6f:e3:54:5e:ac:10:e9:19:7a:93:88: cb:4b:6a:6a:89:51:b4:11:7b:1d:0f:84:26:5f:1d:a9:3a:7e: 0a:1a:cd:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIih+GEo8LdDwWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZTZhNzNkOTktY2UxZS00ZDU3LWE4M2EtYTZlZDQyMWQxMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg57j11FVJEzTyBfhi9V2RhPNfASalyjY/5Tt UAFTIMuzX2WTMw4vH3xVi1/h5rbedgeEuzCA6+G/psG3mYHM4Iycsokg3O2xX5rA IVg8OslCFyqfIe6qxuvxAmdR37L0R7tvlQGiUttaSfcwHSuo7+7xSt3Lg0S0iQQm 1N/+X4vz/JoWezC9xeAnzU3i5omC8G453ZVHOhQAj1FGzN+h/BnoXH1iQAvlWxXN DgnGnmJV5vycNALwlwKWV0iubAQIv02bpWJlXQiqNSqUu4CzeGQosvL/35AxCRlY j9sh8vPyh0bPyWeUarcmHFcp+8bktIoADLME5XM8DHfcZ1ha6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKm8UO9iBavSzVGZbTJb2VUUf9c+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM4MDkwZmQtMWRkYS0z YzJlLWE0Y2MtNGE0ZDI4MmJjNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkLfw3z8OS42O7CW9g4dG8swLp7BHdr2huR0QoWtOpToRca1e6buIiN 7CptfzHPi+AUUUgJZVSM4mCbHp0PbF8Lp9Ss2bLrZ/ljUaEE4k5nTaK15xUNO15z ncLi4iAVu23ylWlwXpx17LVnA5JeuhHfIcl1V4dCoHytCtCQJzjRZeu7CCjYiBiH NY6brrdMJPWAPwcdAc2B7hM74Isg7+G/3bdzdPVdo/UyOpT7r9E97cv4NJRbcPJC mPl+yg5jKQLizkCJJcrlcQj9tk/2xhBMAZocNjBEzEAvV5NXdWBv41RerBDpGXqT iMtLamqJUbQRex0PhCZfHak6fgoazTI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:55:19 2025 by rpki-client