$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa File: 09de78f4-20f4-3844-a639-a328eb5db662.roa (raw, json) Hash identifier: V7rZCh73QDNvFDeDUB95GeviKZr2sBL5SHIa3QJ/bfU= Subject key identifier: 36:D3:AC:96:85:CC:16:04:B7:79:91:D4:F2:0E:92:28:FB:55:00:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57DEF4455A918DA4CB3CD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa Signing time: Tue 04 Feb 2025 13:54:52 +0000 ROA not before: Tue 04 Feb 2025 13:54:52 +0000 ROA not after: Mon 05 May 2025 12:54:52 +0000 asID: 30036 IP address blocks: 173.21.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:ef:44:55:a9:18:da:4c:b3:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:54:52 2025 GMT Not After : May 5 12:54:52 2025 GMT Subject: CN=638eb743-fd80-4fc6-96db-4e9cb272265e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:ee:0d:46:03:92:ba:0a:c0:fd:f9:ff:04: 57:40:94:fe:f4:93:78:8a:90:76:0b:63:3d:8b:50: 96:2d:44:dd:32:68:52:6d:29:ee:3a:b8:21:9e:3a: d9:3d:4f:da:b2:a5:5c:df:4d:f3:37:18:56:38:80: c1:f7:e7:01:a0:44:62:62:fc:ac:78:26:65:21:0e: a0:58:68:f3:b0:e6:82:77:64:a9:3e:cf:e2:97:a9: 43:67:3a:e7:a0:fa:d5:77:6c:7d:a5:f9:62:36:1d: fa:7d:15:a2:87:a3:ce:a3:ba:bf:0e:88:d1:1b:2a: 0b:70:0d:08:49:21:ce:cb:8a:dd:ed:58:72:b1:a9: a5:92:9f:c5:1a:8b:94:78:d7:af:4a:0c:3e:c8:5e: c7:53:a1:08:1b:8c:c5:a4:15:19:19:71:45:00:de: 17:06:c5:9c:7e:2c:f9:37:21:85:48:f8:84:80:31: b9:7f:c2:88:8b:d6:06:d5:ae:40:24:5a:5b:4e:78: 32:a2:b4:d5:2c:47:2f:30:1a:3c:e5:4b:4d:6f:70: 1b:c5:31:3b:26:92:0e:bb:e1:c8:b4:71:29:7a:e1: 8c:21:6e:74:63:0b:fe:bd:16:88:14:30:01:9e:74: fb:fb:d8:32:90:93:12:1a:18:6f:d1:0d:87:98:02: 3f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D3:AC:96:85:CC:16:04:B7:79:91:D4:F2:0E:92:28:FB:55:00:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8c:60:0d:7d:2c:98:f1:3c:a3:d9:5a:8c:e9:fb:b3:e4:df: 45:39:21:98:48:76:f7:18:f3:0b:6f:71:70:f6:da:4b:08:24: 35:f3:81:b6:a4:e0:d3:93:59:a4:dc:c8:e9:8a:59:4a:42:60: 38:ab:7a:1b:ae:df:b4:5f:df:99:80:26:e2:91:e1:83:83:97: e0:53:5c:5b:2b:e5:b7:b1:c1:a3:14:64:6a:79:7a:23:04:d0: 22:e7:ca:43:f2:8c:d7:40:a8:fd:e4:30:67:93:3b:76:8f:e1: e1:9e:e9:9e:fd:7c:f9:40:7b:66:10:6b:4e:50:08:34:c2:4b: af:e6:23:d3:42:40:ee:ca:bd:03:1d:2b:ca:9b:98:81:c6:3e: 82:53:f8:16:72:ff:78:bd:30:30:59:18:a7:5d:59:da:78:58: 83:44:52:af:88:24:08:96:82:32:54:a7:70:3c:f1:70:1b:75: 05:89:0b:37:fa:67:84:f0:26:39:44:7f:dd:e5:3e:c3:e4:a2: fc:c9:d0:da:6d:25:7b:32:79:ad:7b:17:e0:4b:e6:ed:4a:b8: bd:4a:3b:77:23:17:b7:c1:14:55:55:d6:14:14:d4:fd:cf:5f: 5e:1a:96:1f:fb:00:55:b9:47:8b:e7:2b:3e:b2:69:ca:30:7a: 71:96:ab:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfe9EVakY2kyzzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTQ1MloXDTI1MDUwNTEyNTQ1MlowLzEtMCsGA1UEAxMk NjM4ZWI3NDMtZmQ4MC00ZmM2LTk2ZGItNGU5Y2IyNzIyNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ7uDUYDkroKwP35/wRXQJT+9JN4ipB2C2M9 i1CWLUTdMmhSbSnuOrghnjrZPU/asqVc303zNxhWOIDB9+cBoERiYvyseCZlIQ6g WGjzsOaCd2SpPs/il6lDZzrnoPrVd2x9pfliNh36fRWih6POo7q/DojRGyoLcA0I SSHOy4rd7Vhysamlkp/FGouUeNevSgw+yF7HU6EIG4zFpBUZGXFFAN4XBsWcfiz5 NyGFSPiEgDG5f8KIi9YG1a5AJFpbTngyorTVLEcvMBo85UtNb3AbxTE7JpIOu+HI tHEpeuGMIW50Ywv+vRaIFDABnnT7+9gykJMSGhhv0Q2HmAI/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbTrJaFzBYEt3mR1PIOkij7VQAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDlkZTc4ZjQtMjBmNC0z ODQ0LWE2MzktYTMyOGViNWRiNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGMYA19LJjxPKPZWozp+7Pk30U5IZhIdvcY8wtvcXD22ksIJDXzgbak 4NOTWaTcyOmKWUpCYDirehuu37Rf35mAJuKR4YODl+BTXFsr5bexwaMUZGp5eiME 0CLnykPyjNdAqP3kMGeTO3aP4eGe6Z79fPlAe2YQa05QCDTCS6/mI9NCQO7KvQMd K8qbmIHGPoJT+BZy/3i9MDBZGKddWdp4WINEUq+IJAiWgjJUp3A88XAbdQWJCzf6 Z4TwJjlEf93lPsPkovzJ0NptJXsyea17F+BL5u1KuL1KO3cjF7fBFFVV1hQU1P3P X14alh/7AFW5R4vnKz6yacowenGWq4Q= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:15 2025 by rpki-client