$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cd3c3fe-fa20-3513-96d8-0c74edf10413.roa File: 0cd3c3fe-fa20-3513-96d8-0c74edf10413.roa (raw, json) Hash identifier: JbYIGlwfB+hnT0EYAb3kboVinQl3T1l6K9gygV0h8ZY= Subject key identifier: B5:68:0F:5D:94:DB:DD:62:8D:67:D9:6D:6A:BD:7B:92:50:39:0F:E3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5757FD7DB1FF771D5528EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cd3c3fe-fa20-3513-96d8-0c74edf10413.roa Signing time: Tue 04 Feb 2025 13:37:53 +0000 ROA not before: Tue 04 Feb 2025 13:37:53 +0000 ROA not after: Mon 05 May 2025 12:37:53 +0000 asID: 30036 IP address blocks: 173.18.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:75:7f:d7:db:1f:f7:71:d5:52:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:37:53 2025 GMT Not After : May 5 12:37:53 2025 GMT Subject: CN=f826fd27-17c5-43bf-a236-c9a64845c095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:35:0a:30:1d:01:f6:6a:f6:74:f8:e4:20: 57:7e:d7:0d:e1:e9:a2:07:e7:d7:7c:2c:5e:b6:24: d6:4c:71:cd:bb:09:9a:63:96:75:25:77:58:37:3a: ea:52:cf:20:cd:f2:c2:d1:43:c0:0e:cf:dc:be:d4: e5:7f:1d:1a:dd:2f:aa:e7:d4:cf:6e:f5:c7:4e:f4: 63:c8:fa:3e:0c:5a:c2:38:7f:e7:47:a3:0d:c0:c8: c8:9a:38:4e:d3:94:f0:ad:12:3f:ae:93:53:eb:20: a0:de:e1:da:80:0b:44:04:2a:64:a8:24:97:8e:50: 9f:39:60:7e:9f:dc:d9:58:28:90:ed:fb:75:9d:11: 9d:5b:7a:2a:8e:1c:9d:ab:c8:13:5d:c0:89:b5:3b: 67:8f:a8:fc:e4:30:80:eb:21:63:70:86:59:47:36: d2:2c:bc:25:81:a4:96:47:2d:64:93:55:f9:39:8a: 62:1b:72:65:29:00:dc:63:73:ef:96:51:fa:1b:16: 00:6b:ee:64:e6:69:4b:04:f3:06:f6:49:7e:36:cb: 8a:40:6b:f7:2f:09:f5:73:da:77:5f:e9:d7:61:1e: 2e:32:b2:f0:9d:1d:57:5b:56:ba:19:f0:d3:98:0a: 84:1d:a8:44:45:03:fc:b4:1f:91:c6:26:bb:80:d1: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:68:0F:5D:94:DB:DD:62:8D:67:D9:6D:6A:BD:7B:92:50:39:0F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cd3c3fe-fa20-3513-96d8-0c74edf10413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:24:50:4f:a8:d1:1f:b0:be:40:b3:ff:54:33:a0:28:5c:53: 14:71:5a:df:81:fe:10:16:f3:d9:4e:6b:e0:d2:1b:11:a4:22: e4:7e:8f:b8:25:68:dc:1b:95:e3:be:7a:43:9f:63:71:75:7d: 5a:79:a5:fa:8a:56:8e:57:ed:75:e2:84:cf:a4:a2:ae:8e:9e: 8a:b3:06:0f:22:e7:c6:e0:d2:3d:d9:00:be:f4:b0:bd:1b:59: 14:77:30:dd:48:cc:c9:c4:f8:09:70:58:dc:a5:29:14:ea:5d: 81:43:3c:7f:c1:1c:22:68:cc:e6:34:39:56:02:98:48:46:ae: 66:e1:8b:d1:94:a1:e3:b9:80:55:c1:13:0c:56:4e:fc:26:a8: 51:85:c0:47:25:14:12:3e:4d:2b:0c:c6:ff:67:ac:44:fb:31: d7:91:2f:b2:a8:c7:dd:5e:9c:3c:7d:47:b3:07:0a:04:51:67: b9:82:a2:c3:f2:90:d9:60:2a:44:59:54:55:23:77:36:49:e1: 0b:87:70:33:e8:a9:a8:8a:ee:b4:a1:80:aa:bc:6e:ad:9e:e0: bd:e7:0a:33:5e:7b:0a:9a:2a:e4:5e:08:5e:4c:74:3a:1e:4e: db:0c:43:70:5d:54:c8:60:d4:cb:79:53:fa:fa:3b:0e:9f:98: 42:6b:0f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdX/X2x/3cdVSjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzMzc1M1oXDTI1MDUwNTEyMzc1M1owLzEtMCsGA1UEAxMk ZjgyNmZkMjctMTdjNS00M2JmLWEyMzYtYzlhNjQ4NDVjMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvg1CjAdAfZq9nT45CBXftcN4emiB+fXfCxe tiTWTHHNuwmaY5Z1JXdYNzrqUs8gzfLC0UPADs/cvtTlfx0a3S+q59TPbvXHTvRj yPo+DFrCOH/nR6MNwMjImjhO05TwrRI/rpNT6yCg3uHagAtEBCpkqCSXjlCfOWB+ n9zZWCiQ7ft1nRGdW3oqjhydq8gTXcCJtTtnj6j85DCA6yFjcIZZRzbSLLwlgaSW Ry1kk1X5OYpiG3JlKQDcY3PvllH6GxYAa+5k5mlLBPMG9kl+NsuKQGv3Lwn1c9p3 X+nXYR4uMrLwnR1XW1a6GfDTmAqEHahERQP8tB+Rxia7gNGjvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVoD12U291ijWfZbWq9e5JQOQ/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGNkM2MzZmUtZmEyMC0z NTEzLTk2ZDgtMGM3NGVkZjEwNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgkUE+o0R+wvkCz/1QzoChcUxRxWt+B/hAW89lOa+DSGxGkIuR+j7gl aNwbleO+ekOfY3F1fVp5pfqKVo5X7XXihM+koq6OnoqzBg8i58bg0j3ZAL70sL0b WRR3MN1IzMnE+AlwWNylKRTqXYFDPH/BHCJozOY0OVYCmEhGrmbhi9GUoeO5gFXB EwxWTvwmqFGFwEclFBI+TSsMxv9nrET7MdeRL7Kox91enDx9R7MHCgRRZ7mCosPy kNlgKkRZVFUjdzZJ4QuHcDPoqaiK7rShgKq8bq2e4L3nCjNeewqaKuReCF5MdDoe TtsMQ3BdVMhg1Mt5U/r6Ow6fmEJrD3c= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:23 2025 by rpki-client