$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b10b7a1-a9fc-3eee-b612-daf07c16e4a7.roa File: 1b10b7a1-a9fc-3eee-b612-daf07c16e4a7.roa (raw, json) Hash identifier: 90QzT5sO4NQsko9uX+Vp1E/0qXS9/5OpR04bATe0y+w= Subject key identifier: 30:B6:42:CE:D4:FB:37:02:D6:BE:6A:B5:31:0E:07:56:AE:5C:39:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F5CBCC40A9D50BE02B4F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b10b7a1-a9fc-3eee-b612-daf07c16e4a7.roa Signing time: Wed 05 Feb 2025 11:08:00 +0000 ROA not before: Wed 05 Feb 2025 11:08:00 +0000 ROA not after: Tue 06 May 2025 10:08:00 +0000 asID: 30036 IP address blocks: 173.23.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f5:cb:cc:40:a9:d5:0b:e0:2b:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:08:00 2025 GMT Not After : May 6 10:08:00 2025 GMT Subject: CN=0a47269a-6546-4ccc-a67d-9314ed2376a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c5:a4:f8:30:27:0f:37:11:cf:ba:79:3e:b5: 8b:30:b4:b8:50:b0:df:2a:7d:01:d9:7c:ed:3a:ec: a9:11:87:17:53:58:f1:2a:fc:fd:37:43:76:7d:2a: 23:e0:72:37:a0:d1:53:c7:4b:b2:40:87:77:c1:d0: 81:cc:73:08:30:9a:f6:7c:33:6b:86:ac:c9:6b:d1: 7f:f3:20:d9:24:07:d7:50:d4:63:63:5b:a3:6e:43: cf:cb:95:a3:d2:f5:f1:bf:14:17:70:7a:2b:e1:ae: fc:9c:1a:cb:26:46:5b:e3:9b:76:1c:e6:3a:f5:17: d0:35:ec:00:6d:0a:d2:21:bd:8e:00:4e:7f:d9:1a: 87:2f:6d:1b:a9:32:5b:67:36:43:1f:a2:52:a9:c9: 0d:4d:cf:74:a1:55:aa:c4:5c:57:c1:fd:8a:32:2f: bf:90:c9:1f:bb:7e:fe:4e:88:e9:26:07:27:28:40: dc:15:af:ff:69:e3:fe:57:d5:46:38:8d:15:5b:c0: aa:4d:76:c9:c0:6c:88:68:c3:ed:e3:55:cb:a4:8a: 4e:cd:0e:87:08:c1:78:fa:ef:c3:c0:ad:6e:82:1e: d9:03:ab:6d:8a:f6:90:de:07:d3:c9:6d:51:a3:52: 90:82:99:ab:9e:7b:ce:aa:8f:12:09:5c:d1:91:5f: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B6:42:CE:D4:FB:37:02:D6:BE:6A:B5:31:0E:07:56:AE:5C:39:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b10b7a1-a9fc-3eee-b612-daf07c16e4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f1:d3:c7:77:3b:bf:47:d8:9b:88:76:9e:a0:38:6a:ac:be: 41:20:6f:a1:18:28:b4:f8:80:f8:11:33:64:44:14:7d:9e:28: 63:6f:d5:20:6a:ba:c9:8a:9c:15:89:39:b2:f0:2c:7f:e2:4e: 49:50:45:38:4c:52:ee:15:e1:43:14:f0:cd:ba:e1:00:a0:66: 8f:e0:7a:41:ab:98:bd:4a:5b:11:bc:70:74:92:02:13:b0:99: ec:92:59:fd:d1:82:2a:c8:22:49:ee:c4:91:79:20:5b:8a:e8: 93:c2:1e:29:ef:14:7c:94:9e:f5:1d:dd:df:1d:62:e5:78:27: 6f:20:e2:9e:24:f1:79:f2:9d:6c:90:a1:b4:a8:8e:7b:e7:4e: 18:80:aa:92:ef:b4:49:b3:02:26:92:29:50:e0:e9:8b:5b:e4: f7:3a:dd:e5:b0:36:d3:bb:ab:2e:cd:26:9e:f9:3d:46:c4:e2: 9a:72:fc:11:2f:64:b2:46:a8:a1:a5:8a:fd:55:af:eb:16:5d: bc:8c:f0:cf:a8:0c:95:86:39:de:a4:87:34:66:2f:55:1b:65: f3:70:a1:f1:40:e7:c7:53:6b:27:95:09:a3:ca:54:a2:78:80: e8:f7:6b:c6:26:c4:63:b6:b7:d9:e2:01:cd:69:2b:6f:47:60: 2c:47:13:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9cvMQKnVC+ArT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMDgwMFoXDTI1MDUwNjEwMDgwMFowLzEtMCsGA1UEAxMk MGE0NzI2OWEtNjU0Ni00Y2NjLWE2N2QtOTMxNGVkMjM3NmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Wk+DAnDzcRz7p5PrWLMLS4ULDfKn0B2Xzt OuypEYcXU1jxKvz9N0N2fSoj4HI3oNFTx0uyQId3wdCBzHMIMJr2fDNrhqzJa9F/ 8yDZJAfXUNRjY1ujbkPPy5Wj0vXxvxQXcHor4a78nBrLJkZb45t2HOY69RfQNewA bQrSIb2OAE5/2RqHL20bqTJbZzZDH6JSqckNTc90oVWqxFxXwf2KMi+/kMkfu37+ TojpJgcnKEDcFa//aeP+V9VGOI0VW8CqTXbJwGyIaMPt41XLpIpOzQ6HCMF4+u/D wK1ugh7ZA6ttivaQ3gfTyW1Ro1KQgpmrnnvOqo8SCVzRkV/yGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDC2Qs7U+zcC1r5qtTEOB1auXDmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWIxMGI3YTEtYTlmYy0z ZWVlLWI2MTItZGFmMDdjMTZlNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELx08d3O79H2JuIdp6gOGqsvkEgb6EYKLT4gPgRM2REFH2eKGNv1SBq usmKnBWJObLwLH/iTklQRThMUu4V4UMU8M264QCgZo/gekGrmL1KWxG8cHSSAhOw meySWf3RgirIIknuxJF5IFuK6JPCHinvFHyUnvUd3d8dYuV4J28g4p4k8XnynWyQ obSojnvnThiAqpLvtEmzAiaSKVDg6Ytb5Pc63eWwNtO7qy7NJp75PUbE4ppy/BEv ZLJGqKGliv1Vr+sWXbyM8M+oDJWGOd6khzRmL1UbZfNwofFA58dTayeVCaPKVKJ4 gOj3a8YmxGO2t9niAc1pK29HYCxHE3s= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:27 2025 by rpki-client