$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d990a77e-531f-315b-803b-8600fcb9ae69.roa File: d990a77e-531f-315b-803b-8600fcb9ae69.roa (raw, json) Hash identifier: LJ9LLqYZo7xXyB4CkXUzUxHGKoLA88a2fvtutbUUfj0= Subject key identifier: 05:DA:C0:9A:40:BF:F5:2A:8C:58:A4:C7:2F:7D:69:B9:BC:8A:27:5F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B885E88C6622D85ABF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d990a77e-531f-315b-803b-8600fcb9ae69.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.22.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b8:85:e8:8c:66:22:d8:5a:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=60bcd4d1-7f45-4fe5-95c9-5c6259d074d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:eb:1c:91:ef:3f:4e:90:ef:95:02:67:82: 2e:15:e7:bd:fa:73:2c:36:1a:6c:02:c4:c7:bf:d6: a5:3f:39:d7:dd:3d:cf:33:fb:89:79:d5:97:82:2c: 74:93:d7:78:11:4d:a5:2c:ec:aa:e7:2d:2e:e3:59: f2:bb:10:b3:0d:fb:07:94:13:ed:73:be:8e:a8:d1: a1:c2:31:46:23:ac:75:c8:e9:9e:1c:f0:55:80:2e: c5:59:7e:7b:a4:85:38:96:6c:a6:ff:db:20:c0:fe: e0:59:d3:11:04:db:55:2e:8e:9f:46:a1:20:a4:e3: 9f:91:48:d1:8e:cf:2a:89:cd:30:be:1d:c0:bd:be: 8f:52:89:a3:df:9e:72:13:03:10:b2:90:72:54:c0: dd:be:3f:3d:2c:d6:3b:a0:af:76:bb:c2:41:fa:ba: d3:24:6c:d4:9a:76:f3:b6:15:e1:ce:0c:70:ca:44: a1:90:a2:77:0d:c2:e1:ee:98:b0:d3:ab:d4:2a:13: 36:ec:be:8d:68:ae:17:2a:1d:8e:23:9e:1d:5a:ed: 5f:02:28:ab:e6:93:f6:20:ec:38:b0:af:31:38:e0: af:1c:d9:18:40:8a:1e:f7:ec:af:81:a7:44:f1:56: 36:ea:8a:4c:b6:a1:f8:36:24:46:eb:54:7e:f2:cf: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DA:C0:9A:40:BF:F5:2A:8C:58:A4:C7:2F:7D:69:B9:BC:8A:27:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d990a77e-531f-315b-803b-8600fcb9ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:1d:0d:66:bf:3b:23:a5:3d:68:b9:5a:8b:74:22:91:1b:43: b7:18:3b:a3:15:cf:8e:66:25:26:2c:02:26:18:e4:53:49:63: a5:a7:56:65:c0:2f:e8:07:b0:01:c0:53:c5:96:ae:f0:9d:ff: 95:41:65:e5:f2:02:24:fa:92:80:4d:5f:9b:0d:ce:b4:12:fb: e8:a2:13:ba:54:d4:1b:b1:45:3b:9d:34:6e:5b:1c:8b:ca:e4: d8:b3:29:a4:e1:cb:e5:9b:1b:aa:dc:d5:37:ed:5d:cd:81:8f: 71:6c:38:04:0c:5d:47:c2:57:89:b1:89:f7:fb:d9:21:f0:c5: 1b:8e:c3:8f:88:0a:2a:52:ca:6b:37:d7:22:16:b6:d1:9b:3e: 23:47:1f:5c:2a:aa:79:0d:ca:90:1e:ae:14:08:f5:31:85:2a: be:fb:b1:a1:9e:5f:f7:c4:ff:f4:02:db:f6:bb:f4:49:0b:de: ba:cb:1f:46:70:9b:1e:83:f0:a8:bb:f6:2b:b1:d7:93:1b:bb: 2b:4c:2f:a6:01:b5:1e:83:a1:03:e6:91:e0:64:93:21:71:81: 39:2e:84:f7:2a:1b:90:49:7d:74:1e:b0:c0:d0:d9:4a:72:11: 2d:2a:5f:22:45:bf:aa:96:8b:66:a1:e6:a8:5e:74:e5:54:02: c6:cb:ad:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLiF6IxmIthav4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjBiY2Q0ZDEtN2Y0NS00ZmU1LTk1YzktNWM2MjU5ZDA3NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6jrHJHvP06Q75UCZ4IuFee9+nMsNhpsAsTH v9alPznX3T3PM/uJedWXgix0k9d4EU2lLOyq5y0u41nyuxCzDfsHlBPtc76OqNGh wjFGI6x1yOmeHPBVgC7FWX57pIU4lmym/9sgwP7gWdMRBNtVLo6fRqEgpOOfkUjR js8qic0wvh3Avb6PUomj355yEwMQspByVMDdvj89LNY7oK92u8JB+rrTJGzUmnbz thXhzgxwykShkKJ3DcLh7piw06vUKhM27L6NaK4XKh2OI54dWu1fAiir5pP2IOw4 sK8xOOCvHNkYQIoe9+yvgadE8VY26opMtqH4NiRG61R+8s8m3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXawJpAv/UqjFikxy99abm8iidfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDk5MGE3N2UtNTMxZi0z MTViLTgwM2ItODYwMGZjYjlhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAdDWa/OyOlPWi5Wot0IpEbQ7cYO6MVz45mJSYsAiYY5FNJY6WnVmXA L+gHsAHAU8WWrvCd/5VBZeXyAiT6koBNX5sNzrQS++iiE7pU1BuxRTudNG5bHIvK 5NizKaThy+WbG6rc1TftXc2Bj3FsOAQMXUfCV4mxiff72SHwxRuOw4+ICipSyms3 1yIWttGbPiNHH1wqqnkNypAerhQI9TGFKr77saGeX/fE//QC2/a79EkL3rrLH0Zw mx6D8Ki79iux15MbuytML6YBtR6DoQPmkeBkkyFxgTkuhPcqG5BJfXQesMDQ2Upy ES0qXyJFv6qWi2ah5qhedOVUAsbLrYA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:12:58 2025 by rpki-client