$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa File: ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa (raw, json) Hash identifier: aBmcALZLiJjiUAY1VORyZtN2cCau62GtPyilzx9CS0Q= Subject key identifier: 0B:D0:9B:50:77:0E:4F:BA:49:9B:B1:26:44:8C:2A:B8:E6:20:85:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F2E5443436A51E31D4B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.16.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:2e:54:43:43:6a:51:e3:1d:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=c3588d94-f815-485c-88cc-0988e477c0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:6e:c6:a8:c0:e6:d7:42:ab:05:f4:2a:c8: 8b:19:f5:85:0d:49:3e:11:a5:27:d9:e6:f5:9c:e0: 13:cb:ba:04:eb:0f:57:14:4a:7a:6b:cf:21:b5:8a: 01:49:49:52:31:16:98:7e:0c:8a:8c:1a:8c:f4:b7: 24:cd:22:0f:09:ae:cd:f0:42:11:3b:97:1c:74:07: 5c:56:08:51:f5:74:90:b6:98:ec:eb:b9:10:34:f7: 02:95:cf:6a:04:b0:64:83:f9:bb:ac:aa:04:9f:ce: 48:c4:7f:3e:77:65:01:ae:2b:6d:04:86:b0:b8:82: f2:10:1b:56:b4:3e:89:bb:82:49:9a:68:33:ef:92: aa:e4:1e:6a:82:81:f2:e4:9d:1e:e0:e8:41:c3:04: 7f:ce:0d:73:af:19:29:a6:8b:30:13:8a:35:a1:74: b3:ab:b3:03:43:94:03:fa:80:d3:2a:ca:ab:6a:6c: 23:92:5a:fa:18:cf:29:09:f4:95:c1:69:6d:19:76: 81:6c:c7:06:44:94:cd:ba:46:93:81:cc:45:42:30: f6:00:5b:9d:13:06:40:dc:60:e3:16:e2:b0:9e:b3: 2a:4c:83:50:ef:8e:08:64:cd:e2:69:04:9c:22:0e: 71:e7:93:8c:63:26:57:85:91:b2:eb:f0:0f:c3:9b: 8e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D0:9B:50:77:0E:4F:BA:49:9B:B1:26:44:8C:2A:B8:E6:20:85:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8e:a5:65:93:37:48:21:90:c5:cf:18:a1:c5:18:e7:3e:2e: a0:62:40:38:1a:dc:39:f3:2e:c2:4e:d4:fe:b1:15:59:9a:87: 37:69:09:0c:b7:99:3c:56:4a:e9:a5:4b:38:fe:1a:c3:69:47: f1:16:4c:0f:f8:a2:62:4c:5b:d0:ee:8b:88:20:7e:e3:e7:14: 36:be:c6:d2:62:68:9e:63:61:4c:ff:bf:c4:4e:8d:a9:63:c1: 00:96:c1:a9:3a:f9:18:69:a7:63:6a:97:4a:5d:02:1c:c0:98: 1e:da:cc:e0:a6:d5:da:6e:e4:f3:3e:73:39:1d:ce:70:8d:d1: 69:2d:94:5a:a8:d3:7f:81:49:55:f4:91:59:20:ee:76:1e:f0: 7c:d3:cf:40:2d:ed:06:d6:46:68:8c:b5:b4:f7:68:d8:ed:4a: 8b:dd:bf:30:2f:6d:38:5f:3b:c9:a0:58:a3:ff:9a:e2:fa:33: 19:57:ff:ba:1f:ee:63:ec:b2:3a:0d:57:ce:94:fb:60:24:8b: 92:90:dd:92:90:4e:65:96:49:7c:82:77:a9:a7:fa:c7:93:34: 70:1d:91:da:69:26:c2:d8:3f:bf:e0:c2:5a:87:b7:b8:b0:c0: 41:17:6d:9d:9d:be:10:64:13:20:57:e4:1c:47:99:4a:33:97: 2e:12:8e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHy5UQ0NqUeMdS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YzM1ODhkOTQtZjgxNS00ODVjLTg4Y2MtMDk4OGU0NzdjMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J5uxqjA5tdCqwX0KsiLGfWFDUk+EaUn2eb1 nOATy7oE6w9XFEp6a88htYoBSUlSMRaYfgyKjBqM9LckzSIPCa7N8EIRO5ccdAdc VghR9XSQtpjs67kQNPcClc9qBLBkg/m7rKoEn85IxH8+d2UBrittBIawuILyEBtW tD6Ju4JJmmgz75Kq5B5qgoHy5J0e4OhBwwR/zg1zrxkpposwE4o1oXSzq7MDQ5QD +oDTKsqramwjklr6GM8pCfSVwWltGXaBbMcGRJTNukaTgcxFQjD2AFudEwZA3GDj FuKwnrMqTINQ744IZM3iaQScIg5x55OMYyZXhZGy6/APw5uOwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvQm1B3Dk+6SZuxJkSMKrjmIIUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGRiZmU3ZTgtZTczOC0z YTdiLTlmNTMtNTlhMjY3N2EwNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSOpWWTN0ghkMXPGKHFGOc+LqBiQDga3DnzLsJO1P6xFVmahzdpCQy3 mTxWSumlSzj+GsNpR/EWTA/4omJMW9Dui4ggfuPnFDa+xtJiaJ5jYUz/v8ROjalj wQCWwak6+Rhpp2Nql0pdAhzAmB7azOCm1dpu5PM+czkdznCN0WktlFqo03+BSVX0 kVkg7nYe8HzTz0At7QbWRmiMtbT3aNjtSovdvzAvbThfO8mgWKP/muL6MxlX/7of 7mPssjoNV86U+2Aki5KQ3ZKQTmWWSXyCd6mn+seTNHAdkdppJsLYP7/gwlqHt7iw wEEXbZ2dvhBkEyBX5BxHmUozly4Sjto= -----END CERTIFICATE-----Generated at Fri May 9 08:33:37 2025 by rpki-client