$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa File: ce428618-de55-3e8b-b406-5b19a1cf388c.roa (raw, json) Hash identifier: HbE+6pr8bsQIwg7h7FJhznT6p18q7caCAX3queG5SWY= Subject key identifier: E3:0F:29:C7:2E:5C:1D:80:DF:1A:7A:63:1B:98:BF:2B:C8:6D:4D:44 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C584F26017E9CBE107056400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa Signing time: Tue 04 Feb 2025 14:09:00 +0000 ROA not before: Tue 04 Feb 2025 14:09:00 +0000 ROA not after: Mon 05 May 2025 13:09:00 +0000 asID: 30036 IP address blocks: 173.22.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:84:f2:60:17:e9:cb:e1:07:05:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:09:00 2025 GMT Not After : May 5 13:09:00 2025 GMT Subject: CN=e8751d65-5656-412a-8d70-008e2a9600a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:03:49:fe:06:ed:03:c5:15:56:f8:27:46: a1:43:54:5f:47:b2:84:93:96:0d:13:42:5f:6b:4e: 4c:b2:94:82:59:c7:e0:67:6a:fc:07:c8:6f:e6:f7: 33:2f:32:fc:e1:3e:11:77:5f:19:bc:16:21:f2:c3: e3:7e:c4:fc:9b:19:d5:d5:68:df:63:d0:6a:58:7b: 0f:6e:38:99:8f:21:5e:3f:a1:b8:43:82:6d:6c:88: b0:56:49:8d:57:44:19:1a:d1:06:5c:d8:1d:75:d9: 5e:b4:f7:aa:c4:ad:d5:cb:e6:4c:7d:92:10:f8:17: 18:6d:13:ee:e7:78:33:f9:40:9f:c2:39:24:67:38: 40:7a:fa:46:db:f4:dc:3d:3c:7b:19:54:da:c5:59: 8d:1d:1e:6a:6b:c8:b8:03:6b:85:b9:00:2e:00:d9: 49:c7:d8:bd:50:8c:cd:b1:8f:17:2c:94:29:1d:5a: f4:a4:bd:e4:c1:4a:b6:96:b7:35:f4:8d:da:13:21: b9:e9:ef:fb:33:d2:6f:a2:05:78:8c:e6:4c:35:b6: 47:3d:ca:aa:87:a0:fc:2b:07:3d:88:7e:5c:bb:c7: 4b:19:cc:e7:fb:d7:4d:10:b8:aa:d1:28:c6:a1:d7: 05:12:e1:16:b2:20:2b:60:a7:89:e3:e8:fa:93:e5: 9d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0F:29:C7:2E:5C:1D:80:DF:1A:7A:63:1B:98:BF:2B:C8:6D:4D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:96:6e:1a:25:5b:1c:32:7f:87:6b:4e:15:d7:e1:f1:5f:5a: 38:e1:9e:f6:65:2d:56:67:74:63:1c:c9:a6:fb:a9:a0:24:54: 99:89:10:12:21:c7:59:20:8e:5f:65:f9:91:80:d9:fa:2c:dd: 62:42:71:e2:3c:01:88:a6:4e:74:0b:6a:de:15:34:82:03:7f: ec:3b:7a:d7:b2:f5:7a:a6:a5:e9:6f:98:13:ab:ca:03:02:93: 38:09:4a:90:80:24:44:74:a2:eb:e9:4d:92:39:60:50:6b:92: cb:4d:b1:a3:ed:1e:36:7a:41:04:bc:fe:fe:86:84:15:ae:3c: cc:d6:90:14:c2:b5:9e:19:b0:00:0d:06:5d:25:7d:95:04:bc: d6:94:fa:6d:3a:ad:2a:bd:02:f2:5f:57:1b:2c:9d:4f:98:05: 7b:05:6f:28:af:4a:65:ad:10:7a:bb:9e:ca:c9:4b:fa:d4:f6: 8d:2e:3d:83:86:6b:28:87:3f:b4:15:3d:5c:41:97:ad:c3:89: 66:69:8b:95:80:f1:46:6e:05:de:d1:56:5b:c6:76:b4:fd:a6: 54:8c:1b:41:18:bf:2c:38:5c:71:48:6b:70:8d:91:5d:0a:ec: 21:5e:de:5d:ee:43:39:92:75:63:ae:cf:94:df:f0:05:e5:63: 08:27:a8:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFhPJgF+nL4QcFZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MDkwMFoXDTI1MDUwNTEzMDkwMFowLzEtMCsGA1UEAxMk ZTg3NTFkNjUtNTY1Ni00MTJhLThkNzAtMDA4ZTJhOTYwMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAQDSf4G7QPFFVb4J0ahQ1RfR7KEk5YNE0Jf a05MspSCWcfgZ2r8B8hv5vczLzL84T4Rd18ZvBYh8sPjfsT8mxnV1WjfY9BqWHsP bjiZjyFeP6G4Q4JtbIiwVkmNV0QZGtEGXNgdddletPeqxK3Vy+ZMfZIQ+BcYbRPu 53gz+UCfwjkkZzhAevpG2/TcPTx7GVTaxVmNHR5qa8i4A2uFuQAuANlJx9i9UIzN sY8XLJQpHVr0pL3kwUq2lrc19I3aEyG56e/7M9JvogV4jOZMNbZHPcqqh6D8Kwc9 iH5cu8dLGczn+9dNELiq0SjGodcFEuEWsiArYKeJ4+j6k+WdFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMPKccuXB2A3xp6YxuYvyvIbU1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2U0Mjg2MTgtZGU1NS0z ZThiLWI0MDYtNWIxOWExY2YzODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKWbholWxwyf4drThXX4fFfWjjhnvZlLVZndGMcyab7qaAkVJmJEBIh x1kgjl9l+ZGA2fos3WJCceI8AYimTnQLat4VNIIDf+w7etey9XqmpelvmBOrygMC kzgJSpCAJER0ouvpTZI5YFBrkstNsaPtHjZ6QQS8/v6GhBWuPMzWkBTCtZ4ZsAAN Bl0lfZUEvNaU+m06rSq9AvJfVxssnU+YBXsFbyivSmWtEHq7nsrJS/rU9o0uPYOG ayiHP7QVPVxBl63DiWZpi5WA8UZuBd7RVlvGdrT9plSMG0EYvyw4XHFIa3CNkV0K 7CFe3l3uQzmSdWOuz5Tf8AXlYwgnqH8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:50 2025 by rpki-client