$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57e62e99-03d4-33c8-964a-1992c54ce0c4.roa File: 57e62e99-03d4-33c8-964a-1992c54ce0c4.roa (raw, json) Hash identifier: ZWheuVxrLPBsofjOPm7GWfQbPIXK8v8g8WhF8hFAtLQ= Subject key identifier: C1:BA:26:07:C1:BF:73:1E:72:B2:E1:77:D5:50:F3:28:B6:23:04:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55F0D233D9216BD69F6BF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57e62e99-03d4-33c8-964a-1992c54ce0c4.roa Signing time: Tue 04 Feb 2025 12:52:39 +0000 ROA not before: Tue 04 Feb 2025 12:52:39 +0000 ROA not after: Mon 05 May 2025 11:52:39 +0000 asID: 30036 IP address blocks: 173.16.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:0d:23:3d:92:16:bd:69:f6:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:52:39 2025 GMT Not After : May 5 11:52:39 2025 GMT Subject: CN=1e47ac5f-a608-41b8-a297-0400d33b8465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:9e:f9:d9:62:87:41:b8:2b:6b:fe:e2:dd: 92:c6:88:7e:e8:34:44:2e:be:02:ef:fd:d5:09:55: 7c:05:d0:d0:dc:31:1f:63:1c:ef:32:37:b3:30:50: 65:15:00:0a:b7:ae:56:ef:cc:fd:79:3b:09:8a:88: bf:7f:d7:c3:05:9e:5d:26:ad:c4:7e:3d:b1:b1:88: 03:aa:1e:f8:18:d0:65:51:76:87:16:d6:3a:fb:c1: e4:a8:b9:23:15:8a:c0:cd:1f:33:b9:2b:70:b2:a9: a1:a3:40:fe:7c:d0:df:98:1b:50:5c:e7:53:a0:57: 66:d2:bc:a1:f7:ec:87:64:65:15:36:99:0e:35:ff: d2:29:b4:a1:df:ed:b1:42:cf:fc:f2:8f:b6:70:d6: 73:c3:64:7c:49:10:81:c6:dc:c7:d0:9c:14:05:f1: b0:19:11:77:5c:5a:88:2a:a4:ff:e9:f8:9c:9c:4f: a7:ae:ca:eb:89:be:e2:1f:94:44:c3:0c:65:5e:a9: b5:2e:91:6a:18:25:1b:2c:c3:65:41:18:2b:ac:4c: 8f:5a:b4:57:5a:ad:f4:ed:37:59:38:5b:58:21:da: 62:f3:6f:e5:79:58:31:9b:72:8e:6d:2c:8c:42:33: ac:d6:ec:cf:ed:f4:9b:a6:1c:ab:a6:e2:6c:a1:1d: 0b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BA:26:07:C1:BF:73:1E:72:B2:E1:77:D5:50:F3:28:B6:23:04:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57e62e99-03d4-33c8-964a-1992c54ce0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e0:0a:64:3f:dc:b2:f3:0c:32:42:38:cc:44:8f:99:8e:29: a9:66:e4:cd:c6:7d:75:b0:1e:66:4b:37:e3:6b:c3:fe:f5:ec: 78:2e:5c:30:a2:59:10:f8:7e:28:ff:2b:25:d0:57:1e:32:2b: 8f:22:ff:e4:d7:39:8b:18:9a:51:88:5b:ac:0e:30:a0:27:65: bd:c7:52:42:a6:95:63:d1:81:a7:28:79:f1:29:16:99:c0:3b: ac:93:9c:e7:35:bc:5c:58:2e:9d:cd:09:9a:99:d1:b6:81:4d: 93:16:8b:b1:82:2e:42:43:f1:b7:f9:88:d0:d0:f3:f0:33:3f: 93:a7:36:83:21:06:44:94:d9:3c:c7:76:a5:c1:37:7c:37:46: db:6d:87:ca:70:19:6f:79:1d:bd:73:65:07:32:d0:1b:84:09: c3:4d:d8:71:e3:d0:46:df:06:81:b5:b2:58:0a:9b:97:fd:86: ff:1d:49:f7:25:0e:da:9f:61:74:10:c7:20:d2:af:d5:bb:db: 72:10:4a:36:97:cd:3c:40:50:3e:64:a3:2a:ff:6a:1c:85:86: 83:cc:4b:57:67:29:bd:35:94:c8:5a:ae:ee:53:50:8c:b7:b4: 81:1c:3d:4d:1a:7b:5e:dc:c4:d9:cb:10:72:c4:29:f8:3e:fb: 16:ac:12:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFXw0jPZIWvWn2vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNTIzOVoXDTI1MDUwNTExNTIzOVowLzEtMCsGA1UEAxMk MWU0N2FjNWYtYTYwOC00MWI4LWEyOTctMDQwMGQzM2I4NDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptie+dlih0G4K2v+4t2Sxoh+6DRELr4C7/3V CVV8BdDQ3DEfYxzvMjezMFBlFQAKt65W78z9eTsJioi/f9fDBZ5dJq3Efj2xsYgD qh74GNBlUXaHFtY6+8HkqLkjFYrAzR8zuStwsqmho0D+fNDfmBtQXOdToFdm0ryh 9+yHZGUVNpkONf/SKbSh3+2xQs/88o+2cNZzw2R8SRCBxtzH0JwUBfGwGRF3XFqI KqT/6ficnE+nrsrrib7iH5REwwxlXqm1LpFqGCUbLMNlQRgrrEyPWrRXWq307TdZ OFtYIdpi82/leVgxm3KObSyMQjOs1uzP7fSbphyrpuJsoR0LEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG6JgfBv3MecrLhd9VQ8yi2IwT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTdlNjJlOTktMDNkNC0z M2M4LTk2NGEtMTk5MmM1NGNlMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDgCmQ/3LLzDDJCOMxEj5mOKalm5M3GfXWwHmZLN+Nrw/717HguXDCi WRD4fij/KyXQVx4yK48i/+TXOYsYmlGIW6wOMKAnZb3HUkKmlWPRgacoefEpFpnA O6yTnOc1vFxYLp3NCZqZ0baBTZMWi7GCLkJD8bf5iNDQ8/AzP5OnNoMhBkSU2TzH dqXBN3w3Rttth8pwGW95Hb1zZQcy0BuECcNN2HHj0EbfBoG1slgKm5f9hv8dSfcl DtqfYXQQxyDSr9W723IQSjaXzTxAUD5koyr/ahyFhoPMS1dnKb01lMharu5TUIy3 tIEcPU0ae17cxNnLEHLEKfg++xasEgE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:15 2025 by rpki-client