$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd26b31-d265-3664-8295-0e8593ce1dff.roa File: 8cd26b31-d265-3664-8295-0e8593ce1dff.roa (raw, json) Hash identifier: jJ/GQiu1BNduI0Ox9fBh1oWeP4JArzHoygJI5DwauDI= Subject key identifier: D5:AC:6F:56:DF:FC:AC:A3:C1:90:9F:7F:39:14:D9:D0:7C:90:C7:12 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B735B37C9BE6D91DBEE84100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd26b31-d265-3664-8295-0e8593ce1dff.roa Signing time: Thu 30 Jan 2025 11:08:01 +0000 ROA not before: Thu 30 Jan 2025 11:08:01 +0000 ROA not after: Wed 30 Apr 2025 10:08:01 +0000 asID: 30036 IP address blocks: 173.22.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:35:b3:7c:9b:e6:d9:1d:be:e8:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:08:01 2025 GMT Not After : Apr 30 10:08:01 2025 GMT Subject: CN=821e8bbb-1610-429d-a7dd-610d1777e4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:f3:e9:42:63:73:bf:b4:1e:d8:81:3a:d7: 2a:47:66:8b:77:2a:62:49:58:b6:52:1c:92:6a:44: 19:6a:a0:80:c2:14:eb:ed:7f:7b:76:95:f2:34:a0: 73:b3:90:a4:be:c1:e4:2e:01:ce:83:26:ce:d0:aa: a6:9f:19:00:67:05:7a:65:37:e0:fd:ed:75:3f:ea: 6f:43:55:a2:c3:70:d3:02:5e:c2:51:d9:ac:99:78: 6f:1d:f1:d8:af:c3:b5:85:65:67:e2:f0:ee:c2:57: 49:12:f8:c7:a3:3a:9c:88:a5:c8:8f:75:5d:36:85: d7:61:f5:bc:4c:3c:de:f8:1a:fc:1b:e6:b4:fd:4d: bf:5e:c5:70:d4:4b:de:1d:3e:b8:9b:1a:e9:8e:10: 79:f1:72:45:aa:c1:24:28:68:ae:23:5d:65:94:43: 90:fe:73:31:b1:75:81:a6:0b:12:7d:c2:3a:ee:e2: d4:0b:c7:ed:81:a6:00:17:fb:ad:6f:0a:05:dc:9b: 90:68:5c:7d:4c:21:e1:60:fb:c2:0a:77:48:42:a1: d5:c0:f9:7a:18:51:e6:15:62:a7:c2:f3:1e:a7:90: 82:cb:42:d4:16:2b:2d:47:10:9f:a1:d0:19:e9:a6: bc:2c:6f:dc:34:82:36:41:bd:53:52:7d:5e:bf:8f: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AC:6F:56:DF:FC:AC:A3:C1:90:9F:7F:39:14:D9:D0:7C:90:C7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd26b31-d265-3664-8295-0e8593ce1dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d8:ae:53:74:72:86:1f:d9:83:51:65:28:87:65:56:03:86: fd:55:36:78:61:72:79:8e:f7:df:42:a8:cd:77:ce:08:51:f4: 92:71:da:90:5f:9d:65:50:eb:9a:91:07:1c:eb:dc:1d:2a:8b: 89:57:2a:19:d4:26:b8:54:17:d6:4b:7f:aa:9a:90:1f:ec:84: be:02:1d:28:64:04:ae:55:31:5c:c1:bb:b0:42:c3:0c:80:5d: 6d:44:06:b8:70:a7:4d:6d:95:e9:e5:1b:0a:1f:12:cf:43:ba: 31:31:51:d3:49:34:ac:ff:30:4a:07:4c:f9:ba:6d:be:64:0c: 80:84:6d:0a:bc:20:06:af:89:19:69:e9:6c:e6:01:ae:83:44: 15:c8:bd:1a:f6:dd:2e:6f:0e:79:f9:93:81:13:c0:c1:98:67: 79:2f:cc:3b:b6:ad:a5:65:53:89:fd:c5:b9:0c:98:99:15:a2: 9d:e9:88:c8:a4:d3:cb:07:74:3a:84:b3:6f:f5:28:d0:06:df: 4d:11:0b:17:5e:38:8d:f7:06:18:67:d6:d1:98:44:cb:09:93: 7b:c0:9c:e3:46:8b:98:7d:a4:68:7e:dd:af:47:03:d2:92:16: 56:e4:10:26:ef:a5:79:45:2f:39:f6:ac:9e:14:9f:0a:53:3c: 45:72:62:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NbN8m+bZHb7oQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDgwMVoXDTI1MDQzMDEwMDgwMVowLzEtMCsGA1UEAxMk ODIxZThiYmItMTYxMC00MjlkLWE3ZGQtNjEwZDE3NzdlNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja/z6UJjc7+0HtiBOtcqR2aLdypiSVi2UhyS akQZaqCAwhTr7X97dpXyNKBzs5CkvsHkLgHOgybO0KqmnxkAZwV6ZTfg/e11P+pv Q1Wiw3DTAl7CUdmsmXhvHfHYr8O1hWVn4vDuwldJEvjHozqciKXIj3VdNoXXYfW8 TDze+Br8G+a0/U2/XsVw1EveHT64mxrpjhB58XJFqsEkKGiuI11llEOQ/nMxsXWB pgsSfcI67uLUC8ftgaYAF/utbwoF3JuQaFx9TCHhYPvCCndIQqHVwPl6GFHmFWKn wvMep5CCy0LUFistRxCfodAZ6aa8LG/cNII2Qb1TUn1ev4+0AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWsb1bf/KyjwZCffzkU2dB8kMcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGNkMjZiMzEtZDI2NS0z NjY0LTgyOTUtMGU4NTkzY2UxZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfYrlN0coYf2YNRZSiHZVYDhv1VNnhhcnmO999CqM13zghR9JJx2pBf nWVQ65qRBxzr3B0qi4lXKhnUJrhUF9ZLf6qakB/shL4CHShkBK5VMVzBu7BCwwyA XW1EBrhwp01tlenlGwofEs9DujExUdNJNKz/MEoHTPm6bb5kDICEbQq8IAaviRlp 6WzmAa6DRBXIvRr23S5vDnn5k4ETwMGYZ3kvzDu2raVlU4n9xbkMmJkVop3piMik 08sHdDqEs2/1KNAG300RCxdeOI33Bhhn1tGYRMsJk3vAnONGi5h9pGh+3a9HA9KS FlbkECbvpXlFLzn2rJ4UnwpTPEVyYv8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:15 2025 by rpki-client