$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb06f178-60be-39dc-a362-a505aef92158.roa File: fb06f178-60be-39dc-a362-a505aef92158.roa (raw, json) Hash identifier: 2pkVMyHwIvpYjqqOXJdHhfUK4gA/gKfL5L0Zh4lK3os= Subject key identifier: 73:F4:CB:14:FF:8A:47:23:AF:28:93:EC:77:3E:03:D1:62:DB:C8:91 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1C8732AD701E67F74760 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb06f178-60be-39dc-a362-a505aef92158.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.22.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1c:87:32:ad:70:1e:67:f7:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f23d4bd8-2a1a-4e44-a257-a080ecda7a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:67:30:80:b5:83:dd:e2:87:7a:90:65:47: 17:c9:ac:ab:f7:b2:16:dc:84:e5:27:c5:d4:7a:08: 48:5e:77:8f:c9:a8:b5:b9:39:f5:74:0d:e3:49:67: c5:3e:3f:91:dd:da:e5:ec:ce:71:a1:fe:ef:9d:c8: 86:1c:6c:11:b6:14:f2:c7:fa:b7:51:3f:c4:40:1d: 3c:89:b1:79:61:f4:09:26:27:3f:80:ba:0c:55:ff: b0:a5:b9:bb:80:13:33:72:cf:05:46:83:ce:c5:77: 6d:fc:c2:90:ed:43:6e:39:bb:e4:3b:e9:3f:1a:ef: bc:e7:c1:8b:18:38:2e:c4:d7:c1:a7:7d:c5:b5:ee: f6:79:e7:96:97:6a:9e:4d:d6:e4:68:08:44:30:c4: 20:b7:19:73:57:3d:01:20:68:ec:4c:7f:84:cf:88: 31:39:3d:84:b8:67:41:b4:cd:24:de:39:63:3c:f2: 80:5a:1b:7c:46:00:f2:59:6b:50:15:ab:36:da:0a: 7e:84:c5:14:59:0c:60:2b:f0:93:97:07:3c:78:b6: ec:21:4c:3b:ec:06:ca:b1:ac:bf:6c:e1:65:da:63: fc:56:ba:bc:70:eb:3d:e7:8a:c3:aa:fa:94:86:dd: 6b:bb:ac:dd:80:b3:90:68:11:af:73:36:4c:61:31: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:CB:14:FF:8A:47:23:AF:28:93:EC:77:3E:03:D1:62:DB:C8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb06f178-60be-39dc-a362-a505aef92158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a8:c2:84:2c:5f:de:85:59:63:5c:27:c1:96:cb:4f:ef:87: 1e:bf:77:70:7f:8c:ad:6e:5c:3a:5e:dc:78:1c:62:0b:d5:d1: 6f:6b:dc:03:96:5f:46:b8:54:66:2b:12:8e:2e:91:a3:d0:49: 08:be:e6:3d:f6:51:b4:8d:5d:57:05:bd:d7:6b:03:fb:6c:a1: 25:73:2b:84:0f:07:84:df:0d:92:8d:37:13:0b:f4:5f:5c:7d: b0:25:0c:31:c4:fb:32:b2:6f:da:cf:3b:6e:d2:51:27:bb:c7: e1:a1:2c:47:c2:66:af:95:31:50:bb:d0:f6:4c:35:b3:48:d1: 50:be:c5:e0:71:2f:54:5d:6a:ab:71:da:10:3d:20:fa:7f:4f: 6d:af:5b:09:27:b0:91:a2:a5:e8:09:47:b2:60:49:a6:5a:22: 77:c8:d2:94:1c:8e:88:aa:dc:2c:3a:ff:fc:cc:10:7b:d9:95: b4:72:60:b4:7e:2f:03:07:cc:29:d2:94:e3:d6:1e:65:b1:83: 8b:c5:8d:a7:ce:c4:37:5f:fb:56:c8:43:8b:de:1b:fc:56:13: 2d:d3:11:f1:04:22:50:74:7c:01:55:68:19:58:10:c9:40:23: eb:d8:40:f9:3d:e5:7b:5b:40:90:5b:9f:40:58:8d:a5:67:45: 9b:4d:3c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhyHMq1wHmf3R2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjIzZDRiZDgtMmExYS00ZTQ0LWEyNTctYTA4MGVjZGE3YTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXRnMIC1g93ih3qQZUcXyayr97IW3ITlJ8XU eghIXnePyai1uTn1dA3jSWfFPj+R3drl7M5xof7vnciGHGwRthTyx/q3UT/EQB08 ibF5YfQJJic/gLoMVf+wpbm7gBMzcs8FRoPOxXdt/MKQ7UNuObvkO+k/Gu+858GL GDguxNfBp33Fte72eeeWl2qeTdbkaAhEMMQgtxlzVz0BIGjsTH+Ez4gxOT2EuGdB tM0k3jljPPKAWht8RgDyWWtQFas22gp+hMUUWQxgK/CTlwc8eLbsIUw77AbKsay/ bOFl2mP8Vrq8cOs954rDqvqUht1ru6zdgLOQaBGvczZMYTFQOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP0yxT/ikcjryiT7Hc+A9Fi28iRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmIwNmYxNzgtNjBiZS0z OWRjLWEzNjItYTUwNWFlZjkyMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiowoQsX96FWWNcJ8GWy0/vhx6/d3B/jK1uXDpe3HgcYgvV0W9r3AOW X0a4VGYrEo4ukaPQSQi+5j32UbSNXVcFvddrA/tsoSVzK4QPB4TfDZKNNxML9F9c fbAlDDHE+zKyb9rPO27SUSe7x+GhLEfCZq+VMVC70PZMNbNI0VC+xeBxL1Rdaqtx 2hA9IPp/T22vWwknsJGipegJR7JgSaZaInfI0pQcjoiq3Cw6//zMEHvZlbRyYLR+ LwMHzCnSlOPWHmWxg4vFjafOxDdf+1bIQ4veG/xWEy3TEfEEIlB0fAFVaBlYEMlA I+vYQPk95XtbQJBbn0BYjaVnRZtNPMs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:58:22 2025 by rpki-client