$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/32662e2c-27f3-3e6e-a313-4fd6e74ce820.roa File: 32662e2c-27f3-3e6e-a313-4fd6e74ce820.roa (raw, json) Hash identifier: wbV9H6hvrWoXdvHytNrCI8BjUod++QypT3fyNFIsP/s= Subject key identifier: 26:12:56:44:A1:33:03:60:70:84:2F:7C:31:07:98:2C:03:70:C7:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B7360EBAACF541BFCBC3D880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/32662e2c-27f3-3e6e-a313-4fd6e74ce820.roa Signing time: Thu 30 Jan 2025 11:08:44 +0000 ROA not before: Thu 30 Jan 2025 11:08:44 +0000 ROA not after: Wed 30 Apr 2025 10:08:44 +0000 asID: 30036 IP address blocks: 173.23.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:0e:ba:ac:f5:41:bf:cb:c3:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:08:44 2025 GMT Not After : Apr 30 10:08:44 2025 GMT Subject: CN=b867805b-4ea7-46d9-b744-a6946f7b866b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:2d:2e:5c:61:0c:f1:c8:d5:a2:a2:fb:46: a0:10:85:bb:e3:63:06:21:0d:12:c3:f6:ce:01:27: 18:b4:04:08:10:4e:5b:c3:2e:d1:6c:76:13:be:37: cf:c4:72:1b:27:3a:19:b8:85:f5:fe:ef:53:39:42: 8e:bb:31:55:64:5f:6c:01:19:86:41:58:b7:da:b0: 90:a6:6b:4e:21:9c:1d:e7:07:6c:02:2a:b3:28:6e: be:2b:3b:e3:64:f7:a3:5a:99:8b:94:fc:4c:6e:ba: df:00:26:39:fb:58:cc:d7:af:d7:9c:6c:14:19:1c: ab:45:3c:a7:ba:a0:33:d2:5b:05:d9:27:4d:d0:ac: 9b:e6:a4:36:2c:7f:46:8b:39:fa:b9:6b:a2:45:bc: 7a:2e:9a:13:bf:a1:23:86:f5:ab:55:23:9c:83:64: 2f:ca:e2:e1:29:b4:fd:1a:cf:04:40:46:cf:47:f9: 5c:b8:f3:ec:be:28:e2:dc:fc:ac:ea:02:82:df:f6: 53:2f:14:96:c5:37:d0:ac:b3:c9:25:fe:ba:a6:9f: 37:f7:c9:a0:e7:09:13:22:de:e6:9e:d7:2a:8a:0b: 8a:de:83:8e:ef:60:f9:e5:bb:0e:72:8b:5e:33:ec: 66:87:7d:c6:00:78:b0:21:41:60:9c:c7:07:00:b8: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:12:56:44:A1:33:03:60:70:84:2F:7C:31:07:98:2C:03:70:C7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/32662e2c-27f3-3e6e-a313-4fd6e74ce820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:33:8d:0a:cc:0a:97:66:58:24:f4:1b:4b:cc:39:26:94:05: fd:6e:10:11:6e:bc:1c:32:a2:95:76:19:8d:a7:4d:e9:76:b0: 62:96:81:0e:c6:ab:c5:48:d7:37:5b:14:21:3b:38:50:30:77: c8:85:a4:2e:f9:0f:4d:f6:5c:55:79:4b:b2:25:c2:e9:29:13: 69:b9:4c:44:d7:46:0d:7b:cf:81:e5:0d:7d:b9:db:4f:a8:23: 82:c6:40:3c:12:d0:82:d7:e4:01:77:d9:85:b2:50:5a:98:0a: 73:ae:ac:13:7a:bf:36:d2:9a:c7:a0:ec:fd:d1:8b:5d:80:5f: 1c:07:cd:bb:86:b9:f5:72:37:fb:82:e3:1c:68:b4:76:8f:05: 8e:4a:7c:a4:4e:31:6d:d2:8c:ce:56:14:a0:0e:db:ef:8f:ac: 26:ea:f2:a7:52:f8:fa:a1:44:c2:e1:66:ef:d2:40:44:23:6e: 90:8e:f8:d1:9c:59:04:0a:68:a2:f8:7c:b7:e8:a3:d5:7d:02: f3:8e:9e:b0:0f:bd:c2:b7:0f:4d:0b:10:1b:d8:48:17:24:75: c3:81:83:2d:18:c3:8d:04:b4:dd:c8:69:13:94:89:a4:83:b7: 7c:d5:80:c8:dd:09:df:61:8c:9b:15:80:11:34:67:e6:0c:3d: 38:67:41:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Ng66rPVBv8vD2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDg0NFoXDTI1MDQzMDEwMDg0NFowLzEtMCsGA1UEAxMk Yjg2NzgwNWItNGVhNy00NmQ5LWI3NDQtYTY5NDZmN2I4NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+YtLlxhDPHI1aKi+0agEIW742MGIQ0Sw/bO AScYtAQIEE5bwy7RbHYTvjfPxHIbJzoZuIX1/u9TOUKOuzFVZF9sARmGQVi32rCQ pmtOIZwd5wdsAiqzKG6+KzvjZPejWpmLlPxMbrrfACY5+1jM16/XnGwUGRyrRTyn uqAz0lsF2SdN0Kyb5qQ2LH9Gizn6uWuiRbx6LpoTv6EjhvWrVSOcg2QvyuLhKbT9 Gs8EQEbPR/lcuPPsviji3Pys6gKC3/ZTLxSWxTfQrLPJJf66pp8398mg5wkTIt7m ntcqiguK3oOO72D55bsOcoteM+xmh33GAHiwIUFgnMcHALhIFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYSVkShMwNgcIQvfDEHmCwDcMdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzI2NjJlMmMtMjdmMy0z ZTZlLWEzMTMtNGZkNmU3NGNlODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4zjQrMCpdmWCT0G0vMOSaUBf1uEBFuvBwyopV2GY2nTel2sGKWgQ7G q8VI1zdbFCE7OFAwd8iFpC75D032XFV5S7IlwukpE2m5TETXRg17z4HlDX2520+o I4LGQDwS0ILX5AF32YWyUFqYCnOurBN6vzbSmseg7P3Ri12AXxwHzbuGufVyN/uC 4xxotHaPBY5KfKROMW3SjM5WFKAO2++PrCbq8qdS+PqhRMLhZu/SQEQjbpCO+NGc WQQKaKL4fLfoo9V9AvOOnrAPvcK3D00LEBvYSBckdcOBgy0Yw40EtN3IaROUiaSD t3zVgMjdCd9hjJsVgBE0Z+YMPThnQd0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:43 2025 by rpki-client