$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d44a5361-ba17-3f99-a91e-89acc7590a49.roa File: d44a5361-ba17-3f99-a91e-89acc7590a49.roa (raw, json) Hash identifier: qhbFaVZUti+w3v9QRMwVfG0MaqqFNiyxeROS/MOH1UM= Subject key identifier: 6D:9B:FD:E3:7D:E6:BF:60:ED:53:9F:56:3F:73:6B:69:83:AD:7F:3B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDB52949A2ECA5E9104A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d44a5361-ba17-3f99-a91e-89acc7590a49.roa Signing time: Thu 24 Apr 2025 11:53:27 +0000 ROA not before: Thu 24 Apr 2025 11:53:27 +0000 ROA not after: Wed 23 Jul 2025 11:53:27 +0000 asID: 19905 IP address blocks: 173.22.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:b5:29:49:a2:ec:a5:e9:10:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:27 2025 GMT Not After : Jul 23 11:53:27 2025 GMT Subject: CN=597dda36-01a8-4767-9375-6736f5194b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:78:40:7a:14:ca:7c:5e:db:a1:0c:8d:6f:ee: 45:72:42:50:a3:71:94:cb:8a:18:28:1a:4c:30:3c: 29:58:ea:21:5e:01:18:1f:b0:d0:cd:3c:fc:ab:d8: 9b:01:a4:09:96:e4:55:1f:9d:98:4c:c2:a9:8d:59: e3:45:c9:fa:ec:5e:c4:68:71:d6:2e:ce:cc:10:d0: 02:a2:7b:35:e0:b2:87:66:59:13:50:64:9c:15:6a: a7:21:91:d2:16:81:36:64:c6:d0:c6:c2:1e:08:63: c5:bf:09:0d:54:41:5e:c5:66:4a:64:f8:d2:59:8d: 0f:9f:5f:1e:50:8e:25:b2:24:86:d5:e9:3d:e6:c1: be:4c:82:d0:56:48:80:7e:0d:38:1b:9d:31:80:e1: a2:ba:c4:a6:a4:b2:d0:5c:ff:f4:14:f9:95:c6:8a: 84:d5:53:43:77:15:5a:e2:75:47:29:a3:fe:00:7c: af:7c:c0:b7:4c:ab:5d:3a:12:cd:d2:4c:df:0f:3e: 6d:61:50:a2:50:14:25:89:7e:f7:60:50:86:d1:da: 59:0b:4d:57:4f:92:9d:60:49:3a:22:bd:10:1d:22: ef:63:a4:ae:fa:c7:c5:2a:e6:7a:12:a3:79:bb:1a: 00:3c:67:2c:57:10:dd:82:bd:38:1e:55:4f:3a:99: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9B:FD:E3:7D:E6:BF:60:ED:53:9F:56:3F:73:6B:69:83:AD:7F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d44a5361-ba17-3f99-a91e-89acc7590a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:23:7a:b1:e1:7f:5a:f2:e9:4f:89:34:ec:46:3f:fd:eb:70: 6f:12:e8:84:d5:ae:d6:c6:c9:dd:08:07:73:53:ae:10:cf:5b: 22:3b:2f:ec:b6:37:a4:a1:9b:91:fe:c5:a4:6b:85:5b:cc:15: 62:1d:6f:76:bd:02:f0:5b:e7:b8:78:ce:f4:b3:54:b4:01:43: 7f:3d:a0:27:6e:35:0b:d9:90:9d:f6:23:4d:9a:f9:b0:33:65: d3:16:e0:ff:41:cc:1d:cc:b5:50:c4:45:88:96:d3:f0:52:88: 05:ee:e5:d7:5c:29:e9:cb:ba:4c:8a:c3:53:6f:87:40:37:b5: a5:e2:87:8c:89:db:82:82:96:3e:02:8b:32:f4:b7:d3:cd:99: e8:1c:22:8e:c6:5e:99:e1:27:26:81:a9:e4:b1:9e:a3:bd:ff: 85:11:46:57:a9:73:de:31:d5:df:b6:3e:1c:34:99:86:63:be: b3:bf:16:be:e1:32:ce:15:46:69:90:54:d1:de:83:05:53:fd: d0:dc:6c:00:e2:64:8f:eb:7c:16:e5:51:39:a4:0c:c2:4d:5a: 06:45:c5:5c:f3:aa:bd:9d:56:7a:37:70:b5:47:a4:20:21:e0: b7:54:90:19:ba:89:ef:eb:55:19:cd:20:74:0a:3d:95:61:79: 32:c8:82:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzbUpSaLspekQSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTMyN1oXDTI1MDcyMzExNTMyN1owLzEtMCsGA1UEAxMk NTk3ZGRhMzYtMDFhOC00NzY3LTkzNzUtNjczNmY1MTk0YjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23hAehTKfF7boQyNb+5FckJQo3GUy4oYKBpM MDwpWOohXgEYH7DQzTz8q9ibAaQJluRVH52YTMKpjVnjRcn67F7EaHHWLs7MENAC ons14LKHZlkTUGScFWqnIZHSFoE2ZMbQxsIeCGPFvwkNVEFexWZKZPjSWY0Pn18e UI4lsiSG1ek95sG+TILQVkiAfg04G50xgOGiusSmpLLQXP/0FPmVxoqE1VNDdxVa 4nVHKaP+AHyvfMC3TKtdOhLN0kzfDz5tYVCiUBQliX73YFCG0dpZC01XT5KdYEk6 Ir0QHSLvY6Su+sfFKuZ6EqN5uxoAPGcsVxDdgr04HlVPOpkxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2b/eN95r9g7VOfVj9za2mDrX87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ0YTUzNjEtYmExNy0z Zjk5LWE5MWUtODlhY2M3NTkwYTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkjerHhf1ry6U+JNOxGP/3rcG8S6ITVrtbGyd0IB3NTrhDPWyI7L+y2 N6Shm5H+xaRrhVvMFWIdb3a9AvBb57h4zvSzVLQBQ389oCduNQvZkJ32I02a+bAz ZdMW4P9BzB3MtVDERYiW0/BSiAXu5ddcKenLukyKw1Nvh0A3taXih4yJ24KClj4C izL0t9PNmegcIo7GXpnhJyaBqeSxnqO9/4URRlepc94x1d+2Phw0mYZjvrO/Fr7h Ms4VRmmQVNHegwVT/dDcbADiZI/rfBblUTmkDMJNWgZFxVzzqr2dVno3cLVHpCAh 4LdUkBm6ie/rVRnNIHQKPZVheTLIgnI= -----END CERTIFICATE-----Generated at Fri May 9 12:40:00 2025 by rpki-client