$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa File: f1b86a0a-93ba-368e-9650-058271f8c2a3.roa (raw, json) Hash identifier: pRiZ5m2gQQlogsWvrRLaGx7JASMzMiY2oSNji9o+3I4= Subject key identifier: 44:92:B5:CA:37:17:F9:AC:3A:2C:93:C2:15:D8:CF:42:AA:29:FD:B7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA43EFBA7AF733DC6B2D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:43:ef:ba:7a:f7:33:dc:6b:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=dcb15cf8-14c5-4922-81ff-7fb2e3ada8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:20:67:03:4a:34:60:6f:e1:61:45:53:54: bb:af:bf:32:12:8c:74:43:27:35:3f:67:a7:23:cc: 1c:1a:b8:77:e4:ce:65:49:9a:45:08:d4:50:86:fa: 2a:ec:9d:f3:fd:80:78:88:6b:07:fb:d4:2c:11:36: 1b:c7:a1:99:ce:d2:95:35:84:4d:75:c9:82:a3:8b: 20:32:ff:3b:80:b3:17:d6:90:7f:6b:c6:01:18:c2: 61:aa:56:ec:9f:a9:36:98:8f:4c:be:9f:70:d6:b0: 84:96:5d:c2:d0:bc:4a:16:46:89:fb:9a:23:2e:d6: 20:20:bf:4a:c6:08:1a:b8:ef:fa:77:ec:c1:af:28: 40:81:fd:a8:00:ed:f7:81:c2:ff:22:be:fa:e7:e9: 3f:cc:e6:1d:66:5a:bb:04:5d:cc:af:d5:54:41:0b: 3d:13:56:a2:5d:fb:a6:c8:e4:0e:a3:f9:94:10:a7: 98:80:e3:f3:e8:a3:97:7e:ec:a7:af:5a:05:f9:b4: 54:ab:65:52:92:d3:d1:08:bd:fa:8d:d3:d9:3e:5a: 28:70:1c:76:83:88:ca:29:45:c6:f8:58:01:fc:37: 3a:b3:11:72:97:a7:2d:bc:b1:eb:4c:70:5a:29:b4: 0b:7b:15:71:e8:46:07:5f:c3:d9:65:d4:e1:56:e5: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:92:B5:CA:37:17:F9:AC:3A:2C:93:C2:15:D8:CF:42:AA:29:FD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fd:6c:b3:d6:6d:de:e5:eb:b9:c0:08:57:af:00:58:27:fd: e9:6b:0d:a1:58:f9:16:c6:da:8c:e2:e3:9f:8e:6d:4b:dc:99: 5d:a0:d2:33:90:6a:6d:11:f3:6e:c7:4c:d8:65:fc:d6:65:05: d7:33:6b:d5:99:74:07:70:e7:b5:e4:2f:00:1a:7d:a6:57:dd: 8f:c0:5d:5b:d9:af:af:91:b9:c1:47:15:79:91:8c:1f:e8:a4: eb:33:ec:5e:4d:11:bc:e5:e8:4e:ec:42:4e:92:15:1b:75:90: 9e:6c:a0:23:ab:3c:0b:57:40:2b:c4:b3:09:fd:2d:f7:51:ce: 2f:24:8b:4d:67:8b:1d:99:c6:c9:1b:b9:7e:bf:dd:76:1c:4e: 15:a1:b8:fd:19:0f:5b:b6:93:fe:51:99:8e:10:94:31:bf:73: 9a:0d:a3:5c:21:0a:06:5e:2b:95:b3:21:4f:8f:06:22:10:95: e9:92:5e:ad:e7:6c:f3:d2:35:f6:2a:8b:56:89:ad:d0:b0:23: 49:cf:5c:e7:fa:52:4e:7a:56:a4:a6:4f:01:93:c9:8b:c9:02: 25:38:8f:e0:48:7b:5e:21:d8:02:09:8d:32:37:be:90:7e:d1: 8a:0a:1c:3b:97:9f:61:53:86:dd:1b:ea:a3:13:f2:77:81:70: 61:28:ac:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukPvunr3M9xrLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGNiMTVjZjgtMTRjNS00OTIyLTgxZmYtN2ZiMmUzYWRhOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNUgZwNKNGBv4WFFU1S7r78yEox0Qyc1P2en I8wcGrh35M5lSZpFCNRQhvoq7J3z/YB4iGsH+9QsETYbx6GZztKVNYRNdcmCo4sg Mv87gLMX1pB/a8YBGMJhqlbsn6k2mI9Mvp9w1rCEll3C0LxKFkaJ+5ojLtYgIL9K xggauO/6d+zBryhAgf2oAO33gcL/Ir765+k/zOYdZlq7BF3Mr9VUQQs9E1aiXfum yOQOo/mUEKeYgOPz6KOXfuynr1oF+bRUq2VSktPRCL36jdPZPloocBx2g4jKKUXG +FgB/Dc6sxFyl6ctvLHrTHBaKbQLexVx6EYHX8PZZdThVuWGFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESStco3F/msOiyTwhXYz0KqKf23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjFiODZhMGEtOTNiYS0z NjhlLTk2NTAtMDU4MjcxZjhjMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn9bLPWbd7l67nACFevAFgn/elrDaFY+RbG2ozi45+ObUvcmV2g0jOQ am0R827HTNhl/NZlBdcza9WZdAdw57XkLwAafaZX3Y/AXVvZr6+RucFHFXmRjB/o pOsz7F5NEbzl6E7sQk6SFRt1kJ5soCOrPAtXQCvEswn9LfdRzi8ki01nix2Zxskb uX6/3XYcThWhuP0ZD1u2k/5RmY4QlDG/c5oNo1whCgZeK5WzIU+PBiIQlemSXq3n bPPSNfYqi1aJrdCwI0nPXOf6Uk56VqSmTwGTyYvJAiU4j+BIe14h2AIJjTI3vpB+ 0YoKHDuXn2FTht0b6qMT8neBcGEorPQ= -----END CERTIFICATE-----Generated at Fri May 9 04:37:10 2025 by rpki-client