$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c04fd2c8-e872-38dc-b55a-8b1773dde455.roa File: c04fd2c8-e872-38dc-b55a-8b1773dde455.roa (raw, json) Hash identifier: A11TtVYNW4W80USOoqHrJgxcAG0rb42xXIOAVT0KslA= Subject key identifier: 7C:4B:1A:5A:A8:F8:2F:D6:B1:4E:52:9A:48:C7:AC:C9:D4:F5:46:01 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FD245B6DA22BD624827E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c04fd2c8-e872-38dc-b55a-8b1773dde455.roa Signing time: Wed 05 Feb 2025 11:22:48 +0000 ROA not before: Wed 05 Feb 2025 11:22:48 +0000 ROA not after: Tue 06 May 2025 10:22:48 +0000 asID: 30036 IP address blocks: 173.22.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:24:5b:6d:a2:2b:d6:24:82:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:22:48 2025 GMT Not After : May 6 10:22:48 2025 GMT Subject: CN=a08e13bb-4279-45e2-864e-c5c2bcbdb364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:c8:7b:8d:2d:08:d6:fa:95:84:e1:05:82: 8f:fb:24:6e:d6:d2:5a:6c:5d:68:89:51:cf:29:ad: f7:89:23:f1:0b:bb:61:cf:c6:14:46:73:3f:3c:aa: a9:04:73:2c:f2:cf:1f:e3:77:e5:ca:85:69:3f:be: 15:20:18:b5:e6:74:ff:2f:ae:85:37:ea:17:8b:84: 57:0b:17:15:b0:0b:b2:0a:b2:65:e3:13:2a:63:6a: 56:10:bc:3a:e4:14:a0:e8:ec:80:bf:ff:3f:f7:e1: 5b:79:d8:8a:57:61:cf:1b:a2:9f:9b:fd:91:28:ef: 15:7f:34:91:14:b4:d1:04:a3:d3:7b:0b:e4:c9:f9: 33:c7:cf:16:77:02:4d:3f:89:28:c3:d5:43:b2:77: 7a:c7:22:27:e0:fb:c4:ba:c5:d3:ae:eb:f2:d0:27: 49:b8:54:9d:c2:9e:47:b7:78:40:8e:96:a6:10:a3: da:64:bc:59:c9:95:0c:17:75:4a:04:81:2c:3d:ce: e8:4a:72:cd:e5:e3:15:da:3f:63:64:4f:89:ea:df: 46:4e:c3:47:4c:70:94:39:ed:9d:90:7d:b1:b8:46: 54:4c:af:e0:29:36:db:6d:80:cb:d9:34:c9:4f:0e: f0:c8:c5:4f:2e:05:56:b8:46:ad:1b:36:d1:25:68: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4B:1A:5A:A8:F8:2F:D6:B1:4E:52:9A:48:C7:AC:C9:D4:F5:46:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c04fd2c8-e872-38dc-b55a-8b1773dde455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2c:77:cf:16:c4:72:c2:98:9b:ce:a1:a3:eb:de:ef:12:aa: 65:19:27:17:d6:a1:3a:93:53:cc:f0:e9:9a:95:3d:48:7c:0c: 10:62:6c:6d:6b:7b:fb:b7:bb:10:db:3e:48:18:2e:30:72:46: b1:6b:14:d9:6d:8b:9a:b1:d1:33:00:bb:7d:c2:6f:24:82:74: be:f9:f8:10:70:65:15:99:af:e4:52:45:8d:a4:28:9b:85:9e: 2d:da:ca:9e:56:9d:85:90:3c:16:d7:9e:76:f8:43:b0:c4:3a: 4d:aa:cf:ba:ad:5e:19:0f:07:26:76:ca:96:97:f9:a2:fd:53: 99:e3:6b:58:03:fd:f1:72:47:5a:ba:37:32:d9:21:ef:d4:d0: 94:91:76:fb:b5:fa:a6:f6:45:37:90:dc:ee:42:01:29:c9:1a: 77:c8:55:28:5d:71:c5:d5:e8:57:4d:ea:81:c6:b7:c9:75:5e: 13:87:e4:e7:d1:95:51:1a:ff:1d:87:93:34:4d:b0:65:14:fb: 9e:19:97:d0:48:54:c2:3b:85:e9:97:82:46:86:6a:dd:28:ef: 61:7b:97:22:3c:a3:e6:4f:28:d4:f7:3e:8c:ba:71:10:38:3e: 48:a3:8c:37:fd:04:38:0e:f0:46:fb:c7:c2:1e:24:e5:ff:6e: 8c:e9:b6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/SRbbaIr1iSCfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjI0OFoXDTI1MDUwNjEwMjI0OFowLzEtMCsGA1UEAxMk YTA4ZTEzYmItNDI3OS00NWUyLTg2NGUtYzVjMmJjYmRiMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxHIe40tCNb6lYThBYKP+yRu1tJabF1oiVHP Ka33iSPxC7thz8YURnM/PKqpBHMs8s8f43flyoVpP74VIBi15nT/L66FN+oXi4RX CxcVsAuyCrJl4xMqY2pWELw65BSg6OyAv/8/9+FbediKV2HPG6Kfm/2RKO8VfzSR FLTRBKPTewvkyfkzx88WdwJNP4kow9VDsnd6xyIn4PvEusXTruvy0CdJuFSdwp5H t3hAjpamEKPaZLxZyZUMF3VKBIEsPc7oSnLN5eMV2j9jZE+J6t9GTsNHTHCUOe2d kH2xuEZUTK/gKTbbbYDL2TTJTw7wyMVPLgVWuEatGzbRJWjB7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxLGlqo+C/WsU5SmkjHrMnU9UYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzA0ZmQyYzgtZTg3Mi0z OGRjLWI1NWEtOGIxNzczZGRlNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACksd88WxHLCmJvOoaPr3u8SqmUZJxfWoTqTU8zw6ZqVPUh8DBBibG1r e/u3uxDbPkgYLjByRrFrFNlti5qx0TMAu33CbySCdL75+BBwZRWZr+RSRY2kKJuF ni3ayp5WnYWQPBbXnnb4Q7DEOk2qz7qtXhkPByZ2ypaX+aL9U5nja1gD/fFyR1q6 NzLZIe/U0JSRdvu1+qb2RTeQ3O5CASnJGnfIVShdccXV6FdN6oHGt8l1XhOH5OfR lVEa/x2HkzRNsGUU+54Zl9BIVMI7hemXgkaGat0o72F7lyI8o+ZPKNT3Poy6cRA4 PkijjDf9BDgO8Eb7x8IeJOX/bozptqo= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:31 2025 by rpki-client