$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa File: 37fb6013-32c5-3358-99f2-57e7e2f87612.roa (raw, json) Hash identifier: CFK25bJwUBSIKIqW+LW0lWmxkm3eW0JkawU9PX6R3A0= Subject key identifier: 1E:9F:58:C7:94:0D:31:99:8D:1A:64:8F:8C:DB:7E:D0:87:B9:43:20 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C26339411F7E2EEFE06EDE50 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa Signing time: Mon 03 Feb 2025 11:13:38 +0000 ROA not before: Mon 03 Feb 2025 11:13:38 +0000 ROA not after: Sun 04 May 2025 10:13:38 +0000 asID: 30036 IP address blocks: 173.20.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:63:39:41:1f:7e:2e:ef:e0:6e:de:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:13:38 2025 GMT Not After : May 4 10:13:38 2025 GMT Subject: CN=27c06a3b-a14a-4183-9deb-18507ccab648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:ca:18:17:2b:b5:e4:a5:95:13:6f:8a:67: cb:e2:25:7f:8d:63:9c:63:d2:31:e9:5a:f1:1a:cc: fc:0b:0d:af:54:98:e5:be:1e:cf:3e:ec:f7:15:d9: b4:71:d0:d6:d4:96:be:77:a3:ba:7a:94:9a:05:4a: 9b:ac:2b:fb:85:8c:91:98:2a:13:a6:70:78:16:e9: b6:d0:01:e1:72:7c:63:c0:f9:e3:6a:ef:fa:12:dc: fa:8a:91:99:a9:25:dc:1d:16:be:bb:0c:41:de:80: 06:dd:ef:29:f6:14:34:52:e4:5e:ef:a5:3a:8a:d0: 38:c3:68:ee:a0:3f:73:fe:b4:2a:97:1d:f2:80:96: 5c:e7:ca:5e:3d:f5:af:1e:57:7f:d5:dd:61:89:46: 69:85:42:35:af:4f:0a:de:7e:62:f1:68:f9:81:b9: 45:1d:9c:26:35:05:50:8b:06:aa:e3:c1:71:32:79: 09:c0:3f:d5:14:55:c1:ea:8b:cb:fd:dc:3c:4d:81: b7:0a:9b:eb:f0:72:4d:06:cf:7a:ee:22:d9:77:89: fe:d2:db:83:7a:c3:6e:a9:d1:c1:9d:07:47:d0:f6: 5a:65:21:ec:bc:44:3e:85:3b:8b:dc:17:07:98:1f: 8d:db:e5:ac:c4:6b:9d:8c:61:4f:ef:43:1b:93:ed: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9F:58:C7:94:0D:31:99:8D:1A:64:8F:8C:DB:7E:D0:87:B9:43:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f6:5e:fd:0f:9f:47:23:e1:de:1d:8f:8d:89:d6:f2:fd:7c: 79:8b:80:c9:9d:80:44:d4:f2:20:ae:bb:57:9b:54:fd:5e:43: d4:57:ce:73:59:b2:b5:0f:63:b7:07:98:e4:40:97:5f:9c:db: 9d:6e:44:5d:01:a6:e7:ac:6a:46:43:06:07:72:13:55:44:8b: 70:b9:37:eb:ad:1a:82:f3:76:e8:2c:cf:1c:fa:b2:4c:d8:5e: ab:3b:22:54:8d:9d:64:3a:fd:b2:e6:89:fd:39:67:38:e2:6d: 5c:6c:b4:cb:f3:45:bb:ef:cb:0c:4f:5a:6a:08:f1:36:2e:31: dd:f2:46:ed:05:68:0d:bd:86:a0:c2:85:bc:0f:da:ea:d3:a2: 37:83:e4:98:01:71:44:3c:93:fe:b4:99:f5:32:25:6f:cd:df: df:8a:32:fa:2a:c5:8e:78:00:dc:dc:e5:c5:ef:54:dc:db:ae: df:8a:c8:77:de:63:f7:b1:96:94:a1:ea:f1:6c:90:4f:cc:2e: 48:76:38:12:12:a6:1a:95:38:82:24:71:d2:16:c2:52:72:c1: 06:27:a4:d4:2a:28:a8:69:6e:89:3b:7b:f9:35:d1:5c:0e:97: a9:d5:18:52:1d:50:4b:78:b5:1b:2b:f4:c0:dc:6c:15:25:c0: 4f:66:5e:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYzlBH34u7+Bu3lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTMzOFoXDTI1MDUwNDEwMTMzOFowLzEtMCsGA1UEAxMk MjdjMDZhM2ItYTE0YS00MTgzLTlkZWItMTg1MDdjY2FiNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+fKGBcrteSllRNvimfL4iV/jWOcY9Ix6Vrx Gsz8Cw2vVJjlvh7PPuz3Fdm0cdDW1Ja+d6O6epSaBUqbrCv7hYyRmCoTpnB4Fum2 0AHhcnxjwPnjau/6Etz6ipGZqSXcHRa+uwxB3oAG3e8p9hQ0UuRe76U6itA4w2ju oD9z/rQqlx3ygJZc58pePfWvHld/1d1hiUZphUI1r08K3n5i8Wj5gblFHZwmNQVQ iwaq48FxMnkJwD/VFFXB6ovL/dw8TYG3Cpvr8HJNBs967iLZd4n+0tuDesNuqdHB nQdH0PZaZSHsvEQ+hTuL3BcHmB+N2+WsxGudjGFP70Mbk+1FxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6fWMeUDTGZjRpkj4zbftCHuUMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzdmYjYwMTMtMzJjNS0z MzU4LTk5ZjItNTdlN2UyZjg3NjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr2Xv0Pn0cj4d4dj42J1vL9fHmLgMmdgETU8iCuu1ebVP1eQ9RXznNZ srUPY7cHmORAl1+c251uRF0BpuesakZDBgdyE1VEi3C5N+utGoLzdugszxz6skzY Xqs7IlSNnWQ6/bLmif05ZzjibVxstMvzRbvvywxPWmoI8TYuMd3yRu0FaA29hqDC hbwP2urTojeD5JgBcUQ8k/60mfUyJW/N39+KMvoqxY54ANzc5cXvVNzbrt+KyHfe Y/exlpSh6vFskE/MLkh2OBISphqVOIIkcdIWwlJywQYnpNQqKKhpbok7e/k10VwO l6nVGFIdUEt4tRsr9MDcbBUlwE9mXm8= -----END CERTIFICATE-----Generated at Wed Apr 9 05:17:09 2025 by rpki-client