$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa File: 39051ff4-e3bd-3767-be38-89a0f13f363b.roa (raw, json) Hash identifier: 9PaarBZtq1yiKXtIC3Rf+jd3SWQKpE2AjpCZm8taAmk= Subject key identifier: EC:9C:18:4A:F4:CA:DC:1A:02:3B:3C:FF:C7:50:4D:AC:2D:A0:40:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C558940BF4F47033D7C06820 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa Signing time: Tue 04 Feb 2025 12:39:36 +0000 ROA not before: Tue 04 Feb 2025 12:39:36 +0000 ROA not after: Mon 05 May 2025 11:39:36 +0000 asID: 30036 IP address blocks: 173.22.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:58:94:0b:f4:f4:70:33:d7:c0:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:39:36 2025 GMT Not After : May 5 11:39:36 2025 GMT Subject: CN=22f0aacf-588c-4e0e-a408-43d771f5494d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:73:d0:84:25:1e:d1:c6:c7:d7:b6:23:1f:29: 2f:ac:85:cc:00:5e:5b:eb:71:44:b0:57:5d:70:e4: a9:a7:4f:8d:82:0c:c7:14:16:e6:46:64:13:d2:1a: ce:16:17:d5:09:b9:4a:b3:b1:bf:e9:be:f8:81:8a: 7e:c8:da:70:ee:2c:dd:06:73:e7:03:02:b1:81:95: ab:39:ba:fb:b6:57:40:b9:90:d2:4a:f7:09:60:dc: 53:37:e6:f6:93:2d:24:8f:f9:81:8e:2f:5d:bc:bd: 04:b4:39:0a:01:9c:dd:47:ad:b9:d5:f1:89:e7:ee: d7:8a:13:8d:71:7e:02:6a:92:25:6d:c4:8f:12:29: fd:76:b7:cb:30:70:f2:3c:bb:66:fe:88:4d:5f:d2: e9:4d:fd:53:da:b6:03:8f:8a:ff:21:33:43:e5:97: b8:19:cc:59:cf:5c:de:ab:cf:35:61:36:aa:19:f5: 83:06:21:65:75:ea:4f:e5:ec:aa:03:45:93:dc:94: f2:50:79:b0:c7:93:ab:7e:79:69:fb:df:18:5e:8e: d6:70:0b:d2:39:9e:11:04:12:4b:ff:d4:f1:62:4e: 89:3c:15:ad:c6:4b:24:c5:9a:ad:b4:d6:cd:ed:aa: 00:4a:44:d9:b6:ba:6b:7e:c8:68:18:36:4c:55:27: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:18:4A:F4:CA:DC:1A:02:3B:3C:FF:C7:50:4D:AC:2D:A0:40:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:29:82:81:75:6d:ef:13:f2:e0:34:f7:46:c3:ed:5f:6d:61: 4c:19:0b:24:ac:85:7e:be:66:fc:f8:c6:5c:4a:95:bb:95:af: d1:8e:15:62:9e:ba:7f:a5:67:42:57:91:66:c8:e3:5c:f7:20: 0e:05:cb:27:d7:6f:0e:42:22:d5:a3:c4:65:a7:de:e9:0d:2e: 9a:fa:9b:91:8e:7c:8f:97:d6:41:a3:da:53:2c:7f:7d:2d:ad: 0a:a2:f2:7f:ca:e8:d9:e4:00:c0:9f:ec:1e:12:bc:1a:41:67: 83:4c:56:7d:32:ec:81:11:3c:47:eb:f8:0e:60:79:12:6f:db: 43:a4:35:f3:47:7d:d4:3a:62:83:df:6c:1f:14:28:ae:e6:71: 25:df:0a:01:97:1d:bc:c3:63:43:64:c3:44:01:12:a3:21:3d: 0b:6e:2c:ce:ff:7b:28:8e:c8:cc:40:37:12:6a:56:bc:fb:ed: 5b:dd:7f:75:c2:4c:6b:81:29:34:f1:13:11:d3:04:93:b0:76: 16:a4:14:f2:61:9b:26:d7:92:e8:4f:2b:7a:b0:c0:b3:44:4b: 55:05:55:41:ae:98:6f:32:58:c2:87:f4:4d:89:fb:ee:c6:f5: 44:af:0f:3e:59:f2:53:8e:12:14:70:69:28:89:96:f1:3f:a3: 18:e1:8d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWJQL9PRwM9fAaCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzkzNloXDTI1MDUwNTExMzkzNlowLzEtMCsGA1UEAxMk MjJmMGFhY2YtNTg4Yy00ZTBlLWE0MDgtNDNkNzcxZjU0OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinPQhCUe0cbH17YjHykvrIXMAF5b63FEsFdd cOSpp0+NggzHFBbmRmQT0hrOFhfVCblKs7G/6b74gYp+yNpw7izdBnPnAwKxgZWr Obr7tldAuZDSSvcJYNxTN+b2ky0kj/mBji9dvL0EtDkKAZzdR6251fGJ5+7XihON cX4CapIlbcSPEin9drfLMHDyPLtm/ohNX9LpTf1T2rYDj4r/ITND5Ze4GcxZz1ze q881YTaqGfWDBiFldepP5eyqA0WT3JTyUHmwx5Orfnlp+98YXo7WcAvSOZ4RBBJL /9TxYk6JPBWtxkskxZqttNbN7aoASkTZtrprfshoGDZMVSdwJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOycGEr0ytwaAjs8/8dQTawtoEAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzkwNTFmZjQtZTNiZC0z NzY3LWJlMzgtODlhMGYxM2YzNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkpgoF1be8T8uA090bD7V9tYUwZCySshX6+Zvz4xlxKlbuVr9GOFWKe un+lZ0JXkWbI41z3IA4FyyfXbw5CItWjxGWn3ukNLpr6m5GOfI+X1kGj2lMsf30t rQqi8n/K6NnkAMCf7B4SvBpBZ4NMVn0y7IERPEfr+A5geRJv20OkNfNHfdQ6YoPf bB8UKK7mcSXfCgGXHbzDY0Nkw0QBEqMhPQtuLM7/eyiOyMxANxJqVrz77Vvdf3XC TGuBKTTxExHTBJOwdhakFPJhmybXkuhPK3qwwLNES1UFVUGumG8yWMKH9E2J++7G 9USvDz5Z8lOOEhRwaSiJlvE/oxjhjc0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:47 2025 by rpki-client