$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/deaa97b8-195a-3960-b879-d8793e965c68.roa File: deaa97b8-195a-3960-b879-d8793e965c68.roa (raw, json) Hash identifier: Zg/FmNaZ0kV73NfFnkm7iJDP+d/q4DVywoobEp6EveY= Subject key identifier: 9A:04:D2:7A:CF:82:8E:86:D3:00:48:A0:2B:33:7F:A0:81:B1:FA:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3BF2626BB2675DC3A980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/deaa97b8-195a-3960-b879-d8793e965c68.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.22.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3b:f2:62:6b:b2:67:5d:c3:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e489a1b4-8ea3-4b4f-8aeb-48fd879d69c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:f2:f7:37:54:f8:09:f9:4b:69:a9:18:45: b1:7c:8e:ce:2d:fc:1c:0b:be:bd:82:fc:67:5a:9b: 69:63:26:e7:e6:80:46:b8:64:d0:7d:bc:7a:f4:72: d0:d8:e2:bc:4d:db:11:0f:90:9c:83:1d:a7:55:41: 36:bb:d4:ad:d7:4d:e7:84:52:4f:07:fd:8b:e6:d5: bd:45:73:d0:29:e5:bd:88:3e:48:47:13:f3:1e:99: 73:19:fc:aa:dd:93:42:c6:94:22:03:c9:87:16:34: 87:7c:8e:22:95:40:6e:14:a6:97:34:cb:32:a2:96: d1:5c:d7:6d:59:d9:4a:df:dc:51:66:97:21:7d:bc: 1c:c8:28:d0:17:08:4e:53:d9:61:47:e8:20:67:eb: 0e:0c:3f:6a:23:22:bc:12:f7:ea:64:40:91:a6:b7: 90:04:f4:2c:63:ed:b2:22:a8:f4:4c:de:8e:82:d3: 3f:83:2b:71:e5:f4:bd:3a:48:05:25:07:d0:41:8d: d3:f3:ab:99:c2:25:99:99:48:e4:9f:d2:64:96:38: a5:23:4d:8e:26:16:01:3b:85:77:62:5f:c4:e3:90: ed:80:54:af:6f:3d:33:a9:21:89:b0:4e:58:79:f6: 08:de:77:7e:c1:f7:10:08:9c:39:84:d2:ac:8f:76: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:D2:7A:CF:82:8E:86:D3:00:48:A0:2B:33:7F:A0:81:B1:FA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/deaa97b8-195a-3960-b879-d8793e965c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c5:a8:69:8b:14:8f:57:2e:63:ca:39:e1:2f:dc:7f:0d:1e: 74:67:b1:60:ba:3b:a6:d7:17:54:46:33:05:69:c5:db:23:f8: 99:46:c3:62:f8:60:9d:49:2f:c4:47:fe:5a:25:26:e2:7e:46: cf:94:61:c5:6c:ad:08:4b:b0:a2:3c:ad:69:c2:19:25:fa:ac: 7b:19:63:f2:62:dd:a2:fe:8a:ad:95:a2:99:c1:2a:41:f5:4c: 52:27:7f:37:06:0a:8b:73:56:56:c6:12:79:d3:e6:19:f0:aa: 2f:83:ef:87:a3:3e:f5:32:c1:47:01:91:52:79:4d:29:44:f3: 2b:23:11:5c:bd:0e:8a:b7:3f:5e:33:22:8e:64:02:a2:49:a0: 0c:b7:40:1d:a1:e6:3c:89:0a:36:6e:18:54:2d:68:16:77:01: af:55:be:8a:cf:67:2b:eb:ad:d0:d1:0b:06:1d:41:53:d6:6e: 5a:fb:8b:0f:d6:72:d6:42:50:dd:6e:13:41:23:b1:64:5c:e6: f1:a8:2d:aa:e4:41:21:65:1e:90:6d:d4:73:36:38:90:24:46: 85:9a:c1:5d:28:7b:2d:89:1e:97:07:40:8b:2e:d5:ad:c5:f3: 59:70:9f:e4:35:e6:b3:f2:71:1c:16:6d:db:9d:d4:eb:aa:3d: 41:ab:12:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujvyYmuyZ13DqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTQ4OWExYjQtOGVhMy00YjRmLThhZWItNDhmZDg3OWQ2OWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYLy9zdU+An5S2mpGEWxfI7OLfwcC769gvxn WptpYybn5oBGuGTQfbx69HLQ2OK8TdsRD5Ccgx2nVUE2u9St103nhFJPB/2L5tW9 RXPQKeW9iD5IRxPzHplzGfyq3ZNCxpQiA8mHFjSHfI4ilUBuFKaXNMsyopbRXNdt WdlK39xRZpchfbwcyCjQFwhOU9lhR+ggZ+sODD9qIyK8EvfqZECRpreQBPQsY+2y Iqj0TN6OgtM/gytx5fS9OkgFJQfQQY3T86uZwiWZmUjkn9JkljilI02OJhYBO4V3 Yl/E45DtgFSvbz0zqSGJsE5YefYI3nd+wfcQCJw5hNKsj3ZIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoE0nrPgo6G0wBIoCszf6CBsfqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGVhYTk3YjgtMTk1YS0z OTYwLWI4NzktZDg3OTNlOTY1YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrFqGmLFI9XLmPKOeEv3H8NHnRnsWC6O6bXF1RGMwVpxdsj+JlGw2L4 YJ1JL8RH/lolJuJ+Rs+UYcVsrQhLsKI8rWnCGSX6rHsZY/Ji3aL+iq2VopnBKkH1 TFInfzcGCotzVlbGEnnT5hnwqi+D74ejPvUywUcBkVJ5TSlE8ysjEVy9Doq3P14z Io5kAqJJoAy3QB2h5jyJCjZuGFQtaBZ3Aa9VvorPZyvrrdDRCwYdQVPWblr7iw/W ctZCUN1uE0EjsWRc5vGoLarkQSFlHpBt1HM2OJAkRoWawV0oey2JHpcHQIsu1a3F 81lwn+Q15rPycRwWbdud1OuqPUGrEuA= -----END CERTIFICATE-----Generated at Sun Apr 27 05:50:55 2025 by rpki-client