$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/554598bb-eb5a-3f02-bfcb-7819d32fd3ec.roa File: 554598bb-eb5a-3f02-bfcb-7819d32fd3ec.roa (raw, json) Hash identifier: MAPz26YXByjLMrTNzIChzuwCmgv5QznW4q86uZb/tGw= Subject key identifier: C9:FC:5D:C2:8B:54:0E:71:F3:E3:F4:C4:D7:E3:BD:AA:8C:55:30:DF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C491641F703B391971F080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/554598bb-eb5a-3f02-bfcb-7819d32fd3ec.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:91:64:1f:70:3b:39:19:71:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=5accaa44-87f4-4e3f-9437-61221ea821ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:af:fe:8e:bd:09:23:e3:ac:90:63:7e:94: 5b:d9:fb:07:1e:82:4e:70:9b:32:d2:58:e8:5e:cf: 5b:19:07:3a:5e:e9:d5:84:15:71:d9:55:6d:7e:50: 74:e7:6d:ac:db:be:17:39:cd:d5:6e:bd:c6:ad:44: 78:25:f1:2f:ec:8c:01:6f:8e:47:6e:c4:ef:1a:b4: 20:90:00:96:5f:86:73:ef:31:a7:30:e7:89:b5:97: 76:81:40:4a:65:10:50:fe:b8:68:a4:0f:ae:e5:de: 41:0e:df:8c:46:a4:db:99:6c:45:65:e5:b5:fe:0e: 42:c4:11:48:f9:39:27:24:da:d0:12:6a:db:ee:c3: 8c:8b:3d:e4:b6:0e:ef:77:62:9f:82:5c:64:4b:e4: 28:d6:1f:b1:01:42:7d:87:50:f8:d1:6f:13:1c:28: e2:7c:1f:c0:95:fb:06:38:27:da:9b:ec:29:44:e7: ea:8d:1a:a0:af:11:23:f1:f6:59:19:4b:03:fc:7b: 47:af:c4:b8:42:7a:4b:a5:26:4b:00:9c:8e:5d:dc: 17:ce:db:42:86:6e:74:45:b7:f6:2e:24:e0:b8:15: c1:81:df:a6:3b:04:9e:71:a6:c2:d1:07:0c:2d:8d: 52:2a:30:86:cb:a6:b8:8d:86:3e:79:d7:53:5d:7a: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FC:5D:C2:8B:54:0E:71:F3:E3:F4:C4:D7:E3:BD:AA:8C:55:30:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/554598bb-eb5a-3f02-bfcb-7819d32fd3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:60:a7:45:1b:61:f2:4b:ef:d8:be:51:44:f1:5e:0d:7d:25: 84:43:f3:af:ad:a3:94:b6:d9:12:8c:d1:19:53:a9:eb:a8:2d: d3:c7:7f:5a:79:af:d4:22:67:78:b8:4b:b4:e1:68:4a:8d:78: ac:2a:93:ce:c8:0f:23:67:2e:76:d2:0b:84:a4:41:4a:a6:20: a0:94:55:3d:f9:bc:62:6f:91:d5:dc:e8:ab:9b:94:ab:39:26: 70:f1:5a:b8:a5:25:2e:82:1b:62:e0:de:d0:61:b5:96:f1:98: ad:71:7f:16:4e:1d:47:51:2a:89:85:e0:57:d7:69:22:bb:fd: a3:9b:38:6b:4a:fa:33:69:1d:f6:c8:8e:a6:87:b6:c3:9d:fb: ad:27:17:d0:6a:19:51:1a:e6:de:e6:1b:49:bd:0a:af:5b:9c: cc:74:10:84:d0:cc:d6:fa:64:44:db:06:a2:3a:2a:a6:8d:11: a9:63:0d:d0:51:0e:c8:19:f5:ef:57:87:4d:d9:2a:47:e9:31: 94:47:ba:d5:42:da:20:c6:59:8f:ef:8f:4f:07:af:09:0e:e1: 8d:aa:01:0b:a9:00:71:e0:79:10:cb:60:fe:0d:71:f3:fd:5c: 3f:7d:e5:06:3b:47:e3:b3:20:0f:e8:4d:1d:7b:0e:89:1d:e4: d9:42:d2:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJFkH3A7ORlx8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NWFjY2FhNDQtODdmNC00ZTNmLTk0MzctNjEyMjFlYTgyMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZav/o69CSPjrJBjfpRb2fsHHoJOcJsy0ljo Xs9bGQc6XunVhBVx2VVtflB0522s274XOc3Vbr3GrUR4JfEv7IwBb45HbsTvGrQg kACWX4Zz7zGnMOeJtZd2gUBKZRBQ/rhopA+u5d5BDt+MRqTbmWxFZeW1/g5CxBFI +TknJNrQEmrb7sOMiz3ktg7vd2KfglxkS+Qo1h+xAUJ9h1D40W8THCjifB/AlfsG OCfam+wpROfqjRqgrxEj8fZZGUsD/HtHr8S4QnpLpSZLAJyOXdwXzttChm50Rbf2 LiTguBXBgd+mOwSecabC0QcMLY1SKjCGy6a4jYY+eddTXXo+SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMn8XcKLVA5x8+P0xNfjvaqMVTDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTU0NTk4YmItZWI1YS0z ZjAyLWJmY2ItNzgxOWQzMmZkM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRd6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRgp0UbYfJL79i+UUTxXg19JYRD86+to5S22RKM0RlTqeuoLdPHf1p5 r9QiZ3i4S7ThaEqNeKwqk87IDyNnLnbSC4SkQUqmIKCUVT35vGJvkdXc6KublKs5 JnDxWrilJS6CG2Lg3tBhtZbxmK1xfxZOHUdRKomF4FfXaSK7/aObOGtK+jNpHfbI jqaHtsOd+60nF9BqGVEa5t7mG0m9Cq9bnMx0EITQzNb6ZETbBqI6KqaNEaljDdBR DsgZ9e9Xh03ZKkfpMZRHutVC2iDGWY/vj08HrwkO4Y2qAQupAHHgeRDLYP4NcfP9 XD995QY7R+OzIA/oTR17Dokd5NlC0q4= -----END CERTIFICATE-----Generated at Sat May 10 16:39:11 2025 by rpki-client