$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82f4e267-2b72-3607-ad81-7ac5f2ac8e55.roa File: 82f4e267-2b72-3607-ad81-7ac5f2ac8e55.roa (raw, json) Hash identifier: /boe0yFRheu4N8bE2YpLBVnKBW9HO7APVhAzDHEznD4= Subject key identifier: 66:C6:F7:EC:B9:B7:24:A7:D5:BB:C0:33:AB:26:B3:97:B0:3B:E2:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5589654E599C5DCD5562980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82f4e267-2b72-3607-ad81-7ac5f2ac8e55.roa Signing time: Tue 04 Feb 2025 12:39:37 +0000 ROA not before: Tue 04 Feb 2025 12:39:37 +0000 ROA not after: Mon 05 May 2025 11:39:37 +0000 asID: 30036 IP address blocks: 173.22.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:58:96:54:e5:99:c5:dc:d5:56:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:39:37 2025 GMT Not After : May 5 11:39:37 2025 GMT Subject: CN=fa0b46f7-d6c5-45bf-a62f-4b8e5a9c739f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8c:8b:09:52:8d:1a:0c:88:48:4c:98:2a:b0: 43:7b:50:e1:86:d8:81:00:84:bb:4a:b1:84:a2:9a: db:f8:a1:98:cd:e3:35:a8:8d:4d:06:4f:f8:d3:2e: c8:a8:d9:95:9b:63:b9:a8:a8:00:51:38:1f:f7:3b: 87:17:c6:14:80:bb:33:11:c1:3a:ae:d8:68:13:43: 89:43:13:d1:ae:61:f4:ef:e7:67:15:9a:3d:12:b6: 0d:04:5e:59:88:a6:b3:53:45:aa:e3:59:a7:78:af: ae:52:93:e6:ab:72:93:d5:e8:56:98:ec:fa:d8:96: a6:7a:d1:47:5d:91:cc:53:58:7f:0a:55:6d:ad:65: e9:55:d1:6e:6d:10:91:f6:11:a2:ee:58:24:33:1f: dc:4e:5e:2f:64:52:fc:55:9a:7a:35:89:e9:50:81: 9d:5c:9d:5c:22:65:76:e4:02:1c:f8:56:e5:4d:ec: f4:f5:21:56:c8:99:8e:d2:0a:af:7f:6b:c2:43:6a: 98:ed:08:2b:4c:bb:60:72:fd:c0:1f:4f:1c:70:79: 75:05:56:29:5e:78:27:55:87:fb:3f:93:48:e7:09: 2b:11:00:77:fd:3d:0a:1c:fe:91:d9:1a:50:2d:9a: 51:b7:3a:12:36:de:a0:22:23:16:db:d7:23:04:3a: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C6:F7:EC:B9:B7:24:A7:D5:BB:C0:33:AB:26:B3:97:B0:3B:E2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82f4e267-2b72-3607-ad81-7ac5f2ac8e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4f:0f:59:c5:ca:1d:4d:81:e7:e9:24:de:b2:5d:6d:13:0a: ef:69:8f:4f:6c:71:88:a5:b1:59:b1:65:4f:17:d9:e0:77:27: 11:8c:52:59:47:c8:77:4c:25:c5:6d:93:87:bc:f1:be:c0:7d: 50:c3:e8:52:90:d3:4d:f4:f8:ea:dc:52:4e:5a:7e:9e:a1:89: 31:b9:e9:f0:90:2e:50:e3:2c:82:57:56:1c:99:91:28:9a:e0: bc:cb:1c:8d:bb:1d:d6:be:57:c2:d0:32:c4:a5:0f:0a:a9:6c: 5e:bf:18:79:30:f2:0f:28:42:c4:31:69:80:6d:a4:ed:4c:f2: 2c:fc:cc:a5:77:7e:3f:a9:14:ef:56:02:e4:f8:7c:53:4a:e5: 82:f3:f3:28:2c:d1:b3:72:f8:91:50:e8:fc:7c:0e:98:44:f7: 7e:2a:1c:b1:c1:1f:db:2b:e8:f3:f3:d6:8f:e2:ad:7e:51:fd: 51:c4:8c:d5:1b:a3:8c:c7:aa:a5:4c:7d:0a:3a:26:ec:4f:c6: 0e:7f:db:d1:38:23:43:b5:21:63:62:7a:4b:32:13:30:34:5f: b6:38:05:25:ba:c4:1d:f6:7d:e5:b9:ae:d0:cb:08:66:ed:3c: 7d:62:ca:77:a1:e6:e4:56:b3:fb:05:f4:41:52:0d:ba:08:91: c8:15:cb:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWJZU5ZnF3NVWKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzkzN1oXDTI1MDUwNTExMzkzN1owLzEtMCsGA1UEAxMk ZmEwYjQ2ZjctZDZjNS00NWJmLWE2MmYtNGI4ZTVhOWM3MzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oyLCVKNGgyISEyYKrBDe1DhhtiBAIS7SrGE oprb+KGYzeM1qI1NBk/40y7IqNmVm2O5qKgAUTgf9zuHF8YUgLszEcE6rthoE0OJ QxPRrmH07+dnFZo9ErYNBF5ZiKazU0Wq41mneK+uUpPmq3KT1ehWmOz62JametFH XZHMU1h/ClVtrWXpVdFubRCR9hGi7lgkMx/cTl4vZFL8VZp6NYnpUIGdXJ1cImV2 5AIc+FblTez09SFWyJmO0gqvf2vCQ2qY7QgrTLtgcv3AH08ccHl1BVYpXngnVYf7 P5NI5wkrEQB3/T0KHP6R2RpQLZpRtzoSNt6gIiMW29cjBDpWZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbG9+y5tySn1bvAM6sms5ewO+IbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODJmNGUyNjctMmI3Mi0z NjA3LWFkODEtN2FjNWYyYWM4ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9PD1nFyh1NgefpJN6yXW0TCu9pj09scYilsVmxZU8X2eB3JxGMUllH yHdMJcVtk4e88b7AfVDD6FKQ0030+OrcUk5afp6hiTG56fCQLlDjLIJXVhyZkSia 4LzLHI27Hda+V8LQMsSlDwqpbF6/GHkw8g8oQsQxaYBtpO1M8iz8zKV3fj+pFO9W AuT4fFNK5YLz8ygs0bNy+JFQ6Px8DphE934qHLHBH9sr6PPz1o/irX5R/VHEjNUb o4zHqqVMfQo6JuxPxg5/29E4I0O1IWNieksyEzA0X7Y4BSW6xB32feW5rtDLCGbt PH1iyneh5uRWs/sF9EFSDboIkcgVy8o= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:41 2025 by rpki-client