$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa File: 2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa (raw, json) Hash identifier: a2zjImdR4kqzMMv2djcg7FhzVy7WufhDgoTJz453oFg= Subject key identifier: 05:D5:94:8B:D3:80:E9:D5:8B:80:1F:DE:D6:1E:55:81:8B:D1:E4:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584906484DB28A7142DBB83DE380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa Signing time: Thu 27 Feb 2025 18:54:21 +0000 ROA not before: Thu 27 Feb 2025 18:54:21 +0000 ROA not after: Wed 28 May 2025 17:54:21 +0000 asID: 30036 IP address blocks: 173.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:48:4d:b2:8a:71:42:db:b8:3d:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 27 18:54:21 2025 GMT Not After : May 28 17:54:21 2025 GMT Subject: CN=dd51677a-5d10-40bf-b461-0a482b8c76ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:46:c3:7f:3f:7d:3e:37:9e:37:49:ab:0e: e1:7d:e7:1a:a5:1e:4f:a1:92:aa:13:fd:1d:d9:c9: 46:0a:6d:a1:88:43:e5:2c:cf:57:3b:91:ba:56:67: 1d:69:f3:0c:9b:47:24:c3:5c:24:01:6a:7a:29:6e: 29:86:91:1b:8c:19:6a:dd:06:a2:de:f2:b5:09:4c: bf:cc:9c:3d:93:7a:71:9c:d3:71:ae:eb:10:d2:e7: 48:74:a6:31:50:67:6e:4d:4b:de:66:18:19:5b:36: bf:45:0d:93:98:89:69:0e:77:b1:68:5e:9a:94:ed: 76:03:1d:ad:f5:96:c5:0b:dc:fb:2c:0a:a8:62:aa: c8:c6:c3:ea:6f:8e:c9:bd:a0:59:fe:0d:bf:6c:28: 27:04:d6:9e:06:f2:33:8c:40:b6:b2:c6:5f:97:6f: f4:8e:30:e9:1c:f2:00:87:fe:58:90:b4:b7:82:37: 5a:07:7a:6d:45:0c:91:f0:fe:55:64:e2:e1:08:4f: fc:c6:50:25:d2:4c:6c:4b:f4:89:73:8f:31:44:53: 2c:db:10:4d:58:fe:58:df:f6:f8:d6:cc:6b:2d:56: b5:3a:eb:c8:c7:74:6f:10:64:14:6a:f7:ea:89:90: 4a:e5:4e:96:19:9e:76:fb:60:dc:5b:ed:77:9e:f1: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D5:94:8B:D3:80:E9:D5:8B:80:1F:DE:D6:1E:55:81:8B:D1:E4:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9f:89:d8:37:a5:a8:17:51:e5:49:89:80:27:84:df:3c:87: c0:f2:fe:29:89:15:7e:5d:58:00:3a:79:db:90:d6:0a:7c:d9: b5:5c:1e:76:ad:73:f6:1e:fd:26:a1:c2:2c:06:2a:10:09:ac: ce:8c:b1:54:09:a3:2a:2c:67:4f:c6:33:fe:e8:d0:c6:ba:b9: c9:6a:f5:c9:6f:00:d7:a1:1d:43:35:69:d5:24:3c:41:3e:52: 10:02:6d:e5:e8:8b:e5:12:56:53:99:fb:44:aa:23:ef:3c:50: 20:f2:7c:de:2e:b7:e8:13:f5:9b:67:d1:0b:5f:65:cd:4f:f1: 02:4a:af:49:35:ba:7f:fe:e0:81:78:07:1a:75:21:46:05:77: 68:f6:e3:e6:00:76:85:22:a3:cd:10:0f:d5:ab:6b:51:24:85: 38:14:d5:af:2f:a2:48:98:73:9b:ec:4e:27:5b:be:55:9b:b9: 3f:72:fc:dc:c4:01:c0:76:b7:f5:a4:48:2e:66:24:41:c4:cf: 1e:61:6d:b1:58:e9:3b:ca:3c:fb:6f:12:24:ce:23:cd:39:fb: b1:1c:62:4d:fc:97:4d:b3:e5:3e:1a:b6:94:f2:c1:90:ec:05: b6:a8:49:3e:a2:73:02:e3:ea:f6:9b:5e:5f:0e:2e:ed:4b:6d: d8:70:f2:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGSE2yinFC27g944AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIyNzE4NTQyMVoXDTI1MDUyODE3NTQyMVowLzEtMCsGA1UEAxMk ZGQ1MTY3N2EtNWQxMC00MGJmLWI0NjEtMGE0ODJiOGM3NmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoABGw38/fT43njdJqw7hfecapR5PoZKqE/0d 2clGCm2hiEPlLM9XO5G6VmcdafMMm0ckw1wkAWp6KW4phpEbjBlq3Qai3vK1CUy/ zJw9k3pxnNNxrusQ0udIdKYxUGduTUveZhgZWza/RQ2TmIlpDnexaF6alO12Ax2t 9ZbFC9z7LAqoYqrIxsPqb47JvaBZ/g2/bCgnBNaeBvIzjEC2ssZfl2/0jjDpHPIA h/5YkLS3gjdaB3ptRQyR8P5VZOLhCE/8xlAl0kxsS/SJc48xRFMs2xBNWP5Y3/b4 1sxrLVa1OuvIx3RvEGQUavfqiZBK5U6WGZ52+2DcW+13nvG87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXVlIvTgOnVi4Af3tYeVYGL0eSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjUwNmMzZTAtYTU2YS0z MTQyLThkYTktM2M4YWJlOWQwODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2fidg3pagXUeVJiYAnhN88h8Dy/imJFX5dWAA6eduQ1gp82bVcHnat c/Ye/SahwiwGKhAJrM6MsVQJoyosZ0/GM/7o0Ma6uclq9clvANehHUM1adUkPEE+ UhACbeXoi+USVlOZ+0SqI+88UCDyfN4ut+gT9Ztn0QtfZc1P8QJKr0k1un/+4IF4 Bxp1IUYFd2j24+YAdoUio80QD9Wra1EkhTgU1a8vokiYc5vsTidbvlWbuT9y/NzE AcB2t/WkSC5mJEHEzx5hbbFY6TvKPPtvEiTOI805+7EcYk38l02z5T4atpTywZDs BbaoST6icwLj6vabXl8OLu1Lbdhw8hs= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:53 2025 by rpki-client