$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16bd5c01-ade6-389c-9cb8-7845c40af91a.roa File: 16bd5c01-ade6-389c-9cb8-7845c40af91a.roa (raw, json) Hash identifier: kCkbR39b8491ZzdGnP37Rde8qebKHlSYHZZ4UtFj0/s= Subject key identifier: 3F:F6:3A:B9:E2:E5:1E:A2:70:D9:5F:00:87:08:74:C2:31:75:3E:5F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C557B267DCC8932256BB8180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16bd5c01-ade6-389c-9cb8-7845c40af91a.roa Signing time: Tue 04 Feb 2025 12:37:50 +0000 ROA not before: Tue 04 Feb 2025 12:37:50 +0000 ROA not after: Mon 05 May 2025 11:37:50 +0000 asID: 30036 IP address blocks: 173.23.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:57:b2:67:dc:c8:93:22:56:bb:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:37:50 2025 GMT Not After : May 5 11:37:50 2025 GMT Subject: CN=e65fae4c-31ca-4856-aab0-aad99eb6e6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:f0:4e:be:1b:a5:53:3e:c3:c9:93:15:98: 2d:0e:6c:4e:a3:bd:ad:a3:26:8d:0a:97:35:9a:2f: b2:92:50:43:45:51:64:6d:fb:3d:72:93:ec:af:f7: 66:5e:5a:72:af:d1:0f:ae:ab:35:d8:cc:69:40:8f: 74:92:4e:95:aa:04:70:19:d6:4a:78:44:08:40:12: 6e:19:fb:f0:e8:53:98:d4:e7:31:80:5e:77:9a:e4: 63:69:cd:06:08:ce:22:27:15:f6:2b:5c:c0:2e:c8: eb:e4:0e:6a:52:aa:fd:64:32:f9:33:9d:77:d0:d2: 77:35:9f:32:eb:f7:01:e4:26:a8:70:dd:24:b2:46: 98:d1:99:f7:35:ec:0b:26:5a:85:f6:e0:81:6b:d2: b1:a5:4a:c6:0a:03:ee:9d:bc:63:96:ed:18:32:43: 73:e6:1e:fd:61:6b:44:e8:a2:15:1a:9d:6e:4b:11: 15:ae:14:6b:8a:a4:5c:e4:46:eb:23:68:4b:34:a5: 7f:da:ad:1e:6c:d8:74:29:f3:23:8c:1a:fb:c2:5f: 96:cd:25:d0:72:25:96:a3:16:0c:25:47:09:f8:e5: 3a:8b:51:46:68:6d:9f:13:6e:d1:7d:dd:ce:71:a2: 88:6f:93:24:ef:16:94:f3:07:28:ff:07:cb:6a:c5: 59:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F6:3A:B9:E2:E5:1E:A2:70:D9:5F:00:87:08:74:C2:31:75:3E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16bd5c01-ade6-389c-9cb8-7845c40af91a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a7:eb:2b:3a:4c:b9:fe:5d:5a:fb:05:ab:65:da:84:5f:66: 3f:d9:66:28:18:01:eb:e1:e2:2e:60:34:36:a1:93:cf:45:48: dc:cd:8f:23:30:1e:f4:46:d8:52:6e:57:47:df:17:ce:4d:e5: 19:77:22:d2:52:2f:0b:13:f0:3f:c0:90:8d:21:d9:cb:76:8d: eb:de:3d:ff:16:90:46:b3:98:b1:2e:a6:42:52:46:6f:e4:f6: 75:b7:c1:06:d0:8b:84:f9:b7:e0:f8:70:e7:ee:1f:16:78:60: a8:9b:f8:b8:f3:ab:01:20:d7:d6:77:74:b1:32:27:05:ab:fb: c1:33:05:52:a7:bc:a0:5d:4b:97:e0:d9:d3:02:30:be:68:8f: 71:1d:9b:d6:66:ea:53:e3:ee:16:3c:ca:cd:02:35:ce:84:05: 31:4b:f9:c4:66:7f:51:80:ac:e3:cf:52:79:e2:86:c3:58:df: f3:6d:d6:34:90:d1:6d:c4:77:8f:9d:8b:6f:22:4c:09:97:9f: 26:00:7e:1a:67:fc:8d:8c:0f:fb:23:8d:9d:3e:be:35:0f:a0: f5:e9:6b:e0:38:73:0f:6f:4e:b9:18:0f:bc:94:ea:86:e6:b0: 6f:19:1c:84:19:14:4a:15:37:a2:dc:7e:a5:e8:0d:2b:ec:9e: 48:7c:81:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFV7Jn3MiTIla7gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzc1MFoXDTI1MDUwNTExMzc1MFowLzEtMCsGA1UEAxMk ZTY1ZmFlNGMtMzFjYS00ODU2LWFhYjAtYWFkOTllYjZlNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVHwTr4bpVM+w8mTFZgtDmxOo72toyaNCpc1 mi+yklBDRVFkbfs9cpPsr/dmXlpyr9EPrqs12MxpQI90kk6VqgRwGdZKeEQIQBJu Gfvw6FOY1OcxgF53muRjac0GCM4iJxX2K1zALsjr5A5qUqr9ZDL5M5130NJ3NZ8y 6/cB5CaocN0kskaY0Zn3NewLJlqF9uCBa9KxpUrGCgPunbxjlu0YMkNz5h79YWtE 6KIVGp1uSxEVrhRriqRc5EbrI2hLNKV/2q0ebNh0KfMjjBr7wl+WzSXQciWWoxYM JUcJ+OU6i1FGaG2fE27Rfd3OcaKIb5Mk7xaU8wco/wfLasVZfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/2Orni5R6icNlfAIcIdMIxdT5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTZiZDVjMDEtYWRlNi0z ODljLTljYjgtNzg0NWM0MGFmOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEen6ys6TLn+XVr7Batl2oRfZj/ZZigYAevh4i5gNDahk89FSNzNjyMw HvRG2FJuV0ffF85N5Rl3ItJSLwsT8D/AkI0h2ct2jevePf8WkEazmLEupkJSRm/k 9nW3wQbQi4T5t+D4cOfuHxZ4YKib+LjzqwEg19Z3dLEyJwWr+8EzBVKnvKBdS5fg 2dMCML5oj3Edm9Zm6lPj7hY8ys0CNc6EBTFL+cRmf1GArOPPUnnihsNY3/Nt1jSQ 0W3Ed4+di28iTAmXnyYAfhpn/I2MD/sjjZ0+vjUPoPXpa+A4cw9vTrkYD7yU6obm sG8ZHIQZFEoVN6LcfqXoDSvsnkh8gao= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:47 2025 by rpki-client