$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e9af73-c731-3f54-ba56-3a1652f647a3.roa File: 93e9af73-c731-3f54-ba56-3a1652f647a3.roa (raw, json) Hash identifier: gipCHlpvxinbRC/oE6OcC41xU+xmaUMLM3tfmoMoW4U= Subject key identifier: AD:FD:5E:D1:01:50:3E:33:BD:60:AD:EF:02:D0:B4:B2:07:B3:0C:8B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57D5D556AB5D2D252F42B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e9af73-c731-3f54-ba56-3a1652f647a3.roa Signing time: Tue 04 Feb 2025 13:53:44 +0000 ROA not before: Tue 04 Feb 2025 13:53:44 +0000 ROA not after: Mon 05 May 2025 12:53:44 +0000 asID: 30036 IP address blocks: 173.23.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:5d:55:6a:b5:d2:d2:52:f4:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:53:44 2025 GMT Not After : May 5 12:53:44 2025 GMT Subject: CN=ddaef0ab-f1bc-4363-a5fd-a971c6288c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d2:c0:1e:2a:41:fe:71:0c:0c:e8:df:6d:12: a9:6a:27:9d:f9:8c:ae:06:85:17:4a:61:da:57:bb: e2:6e:5e:f4:d1:3e:63:2d:72:d6:09:1c:dc:0d:d7: 41:9c:09:92:e6:a6:66:a2:80:c4:b0:1d:e0:6b:2a: 22:3b:f2:b0:87:70:00:95:17:ce:a2:34:4c:05:22: 77:f7:1e:bd:70:6a:90:a1:94:eb:e8:9b:06:02:65: 6a:7a:e2:99:f4:58:0d:35:dd:90:a1:13:ed:19:c9: 9d:a5:b5:d5:23:40:d3:6b:33:e3:78:98:79:8f:97: 45:38:0d:df:97:7a:0f:65:78:e9:91:32:b4:39:a0: 25:ac:41:12:3f:aa:c6:43:c5:81:a2:53:c8:75:63: 94:a8:67:52:37:cc:03:0b:ad:f8:f9:70:a7:aa:18: 58:eb:de:f2:ab:2c:27:a8:a7:99:c1:85:14:a3:d1: c0:46:67:ff:9b:d5:13:0d:73:d0:ab:42:bf:3d:ad: 84:a0:74:ab:6a:26:25:85:f5:1f:34:ef:66:25:bf: 27:c8:99:f0:9c:92:43:09:e3:bb:8f:30:22:63:be: ff:79:c6:27:fe:2f:83:59:d7:8c:12:ea:2b:a7:cf: 3d:d4:37:61:9d:f8:9f:2d:1a:58:a5:5b:b1:26:6d: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FD:5E:D1:01:50:3E:33:BD:60:AD:EF:02:D0:B4:B2:07:B3:0C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e9af73-c731-3f54-ba56-3a1652f647a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:91:a4:89:72:b6:7c:0a:ab:3b:16:d7:d6:e2:d1:f1:d7:b8: c1:fc:83:26:75:e1:c3:67:f7:3f:cb:03:76:2d:ae:80:77:04: d5:3a:2d:f3:ed:ad:33:6a:b3:ba:ec:49:e3:61:1e:54:7a:14: 16:7d:76:87:0c:04:6d:3c:d2:af:72:f1:50:e6:08:6c:71:69: d2:dd:ab:eb:cd:3a:e7:3b:9d:3b:88:3c:9f:64:d7:75:21:97: 3e:e5:22:e3:7a:07:25:0a:86:5f:8d:e3:26:b9:41:f7:cb:97: f1:26:84:e9:06:c7:a9:77:ed:37:ba:2a:9b:5a:31:89:d4:e5: 54:bd:9e:75:a9:99:39:6a:72:ba:05:8a:06:39:91:93:2d:12: 6e:cd:f6:50:a3:07:40:16:93:40:7d:09:aa:4e:9a:84:89:f7: aa:ff:68:47:41:cd:60:c0:b9:06:79:cd:f0:dc:51:aa:5d:2a: ff:55:90:2c:62:0d:e3:cd:fd:c8:41:8a:18:38:ab:0e:d6:b9: e7:2d:ab:5a:ef:3e:50:55:06:dd:71:ef:50:6c:0c:0e:60:96: e9:2d:21:1c:8c:4e:62:6c:ae:32:7d:91:ae:65:01:24:ee:34: 20:70:22:00:f1:e8:22:85:0a:da:57:1a:3b:fe:1a:db:a6:0d: 63:2b:b6:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfV1VarXS0lL0K0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTM0NFoXDTI1MDUwNTEyNTM0NFowLzEtMCsGA1UEAxMk ZGRhZWYwYWItZjFiYy00MzYzLWE1ZmQtYTk3MWM2Mjg4YzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dLAHipB/nEMDOjfbRKpaied+YyuBoUXSmHa V7vibl700T5jLXLWCRzcDddBnAmS5qZmooDEsB3gayoiO/Kwh3AAlRfOojRMBSJ3 9x69cGqQoZTr6JsGAmVqeuKZ9FgNNd2QoRPtGcmdpbXVI0DTazPjeJh5j5dFOA3f l3oPZXjpkTK0OaAlrEESP6rGQ8WBolPIdWOUqGdSN8wDC634+XCnqhhY697yqywn qKeZwYUUo9HARmf/m9UTDXPQq0K/Pa2EoHSraiYlhfUfNO9mJb8nyJnwnJJDCeO7 jzAiY77/ecYn/i+DWdeMEuorp8891DdhnfifLRpYpVuxJm3StQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK39XtEBUD4zvWCt7wLQtLIHswyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTNlOWFmNzMtYzczMS0z ZjU0LWJhNTYtM2ExNjUyZjY0N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKRpIlytnwKqzsW19bi0fHXuMH8gyZ14cNn9z/LA3YtroB3BNU6LfPt rTNqs7rsSeNhHlR6FBZ9docMBG080q9y8VDmCGxxadLdq+vNOuc7nTuIPJ9k13Uh lz7lIuN6ByUKhl+N4ya5QffLl/EmhOkGx6l37Te6KptaMYnU5VS9nnWpmTlqcroF igY5kZMtEm7N9lCjB0AWk0B9CapOmoSJ96r/aEdBzWDAuQZ5zfDcUapdKv9VkCxi DePN/chBihg4qw7Wuectq1rvPlBVBt1x71BsDA5gluktIRyMTmJsrjJ9ka5lASTu NCBwIgDx6CKFCtpXGjv+GtumDWMrtiA= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:34 2025 by rpki-client