$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16bd5c01-ade6-389c-9cb8-7845c40af91a.roa File: 16bd5c01-ade6-389c-9cb8-7845c40af91a.roa (raw, json) Hash identifier: XWsQnca4QZzAkiBhxJSA0Ehn/RoIZ1Oh4/BZzh0ut94= Subject key identifier: 53:5D:20:81:05:02:B1:4D:F8:B9:71:A0:FE:9E:2F:31:A3:45:4C:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA127016C5F120BE542240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16bd5c01-ade6-389c-9cb8-7845c40af91a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:12:70:16:c5:f1:20:be:54:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fa12d4f1-5d45-4214-8d05-90398dfb0fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:96:9c:c9:2e:df:4e:32:92:f2:69:94:42: db:4e:e8:cf:06:3a:25:02:d4:4d:55:fa:3f:d1:1e: 3d:bc:e4:15:ff:65:61:98:ab:a3:38:3d:62:e8:96: 3b:de:cb:51:60:1c:26:65:14:1e:de:89:43:ae:60: 29:c9:07:68:fd:c8:2e:3e:a7:21:da:6d:05:7d:db: 03:3a:c0:7c:12:96:35:98:f2:3f:b9:d1:ec:c6:5e: a6:b0:79:e0:fa:18:8b:e2:c5:53:99:d9:ea:37:ea: 32:c3:dc:88:a9:90:93:20:d0:f3:bb:54:27:4e:3b: 2a:c0:2c:c6:fd:76:e5:71:48:3c:82:14:42:5a:7a: e3:4f:8e:2d:cc:e8:5d:3f:38:ee:28:ab:23:8a:6b: 95:a2:50:c9:63:ca:ed:b3:e5:32:07:2a:7e:78:8d: 6c:5c:97:53:2b:eb:fd:04:c1:b0:75:68:69:43:fb: 07:cb:4e:c8:89:75:54:58:7c:b2:52:b3:5a:1c:dc: fe:59:de:08:ee:bc:8b:b1:de:e9:c7:60:b5:11:cb: 6e:e8:a5:53:38:fa:72:c2:db:80:93:a8:f1:8b:17: 5a:32:40:be:2e:24:49:21:b6:2d:b3:05:77:26:51: 99:18:21:f5:36:b3:1d:1e:b4:71:bf:64:ce:9e:66: 6a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:20:81:05:02:B1:4D:F8:B9:71:A0:FE:9E:2F:31:A3:45:4C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16bd5c01-ade6-389c-9cb8-7845c40af91a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1f:77:0b:5b:33:e1:c3:67:bc:86:8e:90:d6:d4:e8:1f:e2: 76:48:c1:96:81:78:23:8d:9b:01:8e:d8:7e:a9:72:08:1e:a6: bd:7c:96:2a:6f:84:55:19:74:9c:d8:c4:45:d8:0a:6b:2d:aa: b9:10:59:ac:b5:de:34:26:fe:31:5d:b9:30:1d:69:8d:fa:68: 46:24:3e:84:00:9c:c5:71:e1:c7:37:11:c7:e6:b1:b1:4b:e6: 99:22:ea:ce:38:12:d4:dc:ae:9f:09:10:fb:b2:91:2f:d0:e8: 25:0d:dd:ea:60:3f:9f:fd:00:7f:77:59:f8:e1:cc:0b:43:37: d6:3c:e7:b1:22:ca:2e:2a:21:d2:b1:31:45:af:f0:ea:58:36: e7:41:b7:2b:37:2f:68:23:c6:28:89:89:05:0f:f6:be:71:12: af:53:7e:51:40:f6:96:fb:b8:93:a1:19:e2:0a:f6:57:72:76: 0d:fd:ed:a6:a9:f5:a5:5a:a9:d8:61:0e:cb:fa:f9:ce:92:b6: 28:56:72:15:7c:7c:6c:f5:8d:7b:74:3c:02:e1:f9:a8:69:b5: 6f:49:1f:7f:1b:2e:2c:9f:c1:04:7f:d4:ba:38:c2:e1:3f:c5: fc:a2:6f:c8:31:43:3f:d3:50:17:2b:64:d2:72:b2:8d:d8:d7: 46:6d:8d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhJwFsXxIL5UIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmExMmQ0ZjEtNWQ0NS00MjE0LThkMDUtOTAzOThkZmIwZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArASWnMku304ykvJplELbTujPBjolAtRNVfo/ 0R49vOQV/2VhmKujOD1i6JY73stRYBwmZRQe3olDrmApyQdo/cguPqch2m0FfdsD OsB8EpY1mPI/udHsxl6msHng+hiL4sVTmdnqN+oyw9yIqZCTINDzu1QnTjsqwCzG /XblcUg8ghRCWnrjT44tzOhdPzjuKKsjimuVolDJY8rts+UyByp+eI1sXJdTK+v9 BMGwdWhpQ/sHy07IiXVUWHyyUrNaHNz+Wd4I7ryLsd7px2C1Ectu6KVTOPpywtuA k6jxixdaMkC+LiRJIbYtswV3JlGZGCH1NrMdHrRxv2TOnmZqrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNdIIEFArFN+LlxoP6eLzGjRUxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTZiZDVjMDEtYWRlNi0z ODljLTljYjgtNzg0NWM0MGFmOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwfdwtbM+HDZ7yGjpDW1Ogf4nZIwZaBeCONmwGO2H6pcggepr18lipv hFUZdJzYxEXYCmstqrkQWay13jQm/jFduTAdaY36aEYkPoQAnMVx4cc3EcfmsbFL 5pki6s44EtTcrp8JEPuykS/Q6CUN3epgP5/9AH93WfjhzAtDN9Y857Eiyi4qIdKx MUWv8OpYNudBtys3L2gjxiiJiQUP9r5xEq9TflFA9pb7uJOhGeIK9ldydg397aap 9aVaqdhhDsv6+c6StihWchV8fGz1jXt0PALh+ahptW9JH38bLiyfwQR/1Lo4wuE/ xfyib8gxQz/TUBcrZNJyso3Y10ZtjZI= -----END CERTIFICATE-----Generated at Fri May 9 09:09:19 2025 by rpki-client