$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa File: 387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa (raw, json) Hash identifier: yKZy1MM+ytPHrUtaU6/LYXeLvtU4HXJQLTgrpU6zgYM= Subject key identifier: 8B:50:4D:69:A4:AB:6D:71:1D:36:7B:FC:4A:86:D2:52:CA:43:77:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57615A86E8952842DAA6680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa Signing time: Tue 04 Feb 2025 13:39:03 +0000 ROA not before: Tue 04 Feb 2025 13:39:03 +0000 ROA not after: Mon 05 May 2025 12:39:03 +0000 asID: 30036 IP address blocks: 173.23.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:76:15:a8:6e:89:52:84:2d:aa:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:39:03 2025 GMT Not After : May 5 12:39:03 2025 GMT Subject: CN=8927f08d-c8bb-482b-86ba-aab3ac4f70e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:4c:c2:66:b2:1f:38:8a:42:4b:5a:fd:19: c5:d4:aa:67:e7:bd:c7:d8:66:77:58:08:73:cc:f5: 7e:8c:c6:c1:16:45:d8:fa:ca:1d:08:7f:02:03:c9: 7d:b5:fd:27:73:51:e3:0f:a5:27:85:ca:2b:f3:06: a8:f4:87:1d:17:82:23:fc:92:00:77:c1:11:34:2d: bc:44:3d:6d:08:a2:66:11:c1:30:82:a0:6f:0e:b1: 35:75:66:45:45:42:49:82:94:00:c5:a2:11:f9:81: 6a:f4:22:e1:b9:84:c5:76:8d:59:7c:5e:97:51:95: 9f:e0:a5:a9:be:44:d3:df:56:87:16:a8:b9:3f:20: fd:1c:4e:85:19:cc:31:d0:65:59:dc:fe:02:2a:f5: d9:5e:54:25:66:17:f9:fc:11:dd:15:15:b6:86:22: 3d:88:6d:88:5e:19:5a:43:1d:16:9a:45:cf:c2:3a: fa:b7:5b:9d:ac:7d:7f:1c:17:07:f5:b6:9e:39:40: 9c:51:9c:e4:47:87:87:f1:eb:18:7e:fe:b9:8f:56: 2f:b3:1e:99:a2:0e:f3:9d:96:f8:77:5e:7f:1c:80: 55:be:03:c8:07:99:65:96:29:41:7e:1b:ea:d2:e3: 3f:c1:6c:06:8c:32:ec:2a:5c:d2:63:e0:04:cb:0c: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:50:4D:69:A4:AB:6D:71:1D:36:7B:FC:4A:86:D2:52:CA:43:77:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e6:c4:e1:2b:f1:c9:86:48:ac:1b:4e:f9:f9:ae:4b:0e:b2: c8:92:e3:bd:51:de:c0:b0:61:7b:4d:5a:5e:77:60:32:5b:8a: 87:19:9e:15:e9:69:2e:3a:ec:43:81:d3:e8:08:48:c4:5a:38: 36:c6:72:ba:f5:5b:e3:96:ac:18:bc:5c:54:c9:70:00:02:44: 90:12:ca:5e:c2:98:dc:48:8c:f0:96:40:c9:24:cc:d6:70:9b: 6f:74:81:bb:e7:ae:d2:e6:7e:ff:5d:2c:fb:bb:24:f8:f3:71: 99:7c:8f:46:68:d6:1a:ee:76:18:19:7f:b5:68:71:d7:38:88: b2:85:ea:bc:82:d5:53:e2:0f:83:2c:01:e7:f0:af:ce:03:af: 96:44:cc:0f:54:ca:01:ca:d5:55:1c:f4:55:c1:26:31:a3:90: ff:b6:52:58:db:41:e5:2c:dd:97:ac:4d:60:90:f2:0a:93:ea: 46:5d:5d:f7:a2:f1:1d:9a:20:24:2d:48:92:c2:71:7e:e5:b7: b4:51:2e:04:14:c3:2f:a6:02:6d:95:81:fb:ce:db:ce:aa:7b: 24:e9:53:c8:30:e5:f2:86:18:a3:8c:70:41:d7:ab:d2:f4:aa: d9:65:91:25:db:43:d3:ea:24:32:06:e6:61:93:2c:af:dd:b4: 90:2e:e2:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdhWobolShC2qZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzMzkwM1oXDTI1MDUwNTEyMzkwM1owLzEtMCsGA1UEAxMk ODkyN2YwOGQtYzhiYi00ODJiLTg2YmEtYWFiM2FjNGY3MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFBMwmayHziKQkta/RnF1Kpn573H2GZ3WAhz zPV+jMbBFkXY+sodCH8CA8l9tf0nc1HjD6Unhcor8wao9IcdF4Ij/JIAd8ERNC28 RD1tCKJmEcEwgqBvDrE1dWZFRUJJgpQAxaIR+YFq9CLhuYTFdo1ZfF6XUZWf4KWp vkTT31aHFqi5PyD9HE6FGcwx0GVZ3P4CKvXZXlQlZhf5/BHdFRW2hiI9iG2IXhla Qx0WmkXPwjr6t1udrH1/HBcH9baeOUCcUZzkR4eH8esYfv65j1Yvsx6Zog7znZb4 d15/HIBVvgPIB5lllilBfhvq0uM/wWwGjDLsKlzSY+AEywxuRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItQTWmkq21xHTZ7/EqG0lLKQ3c+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzg3Y2I4N2QtNmZlNy0z ZWM0LTgwYmYtNjA0YzAwYzkxZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3mxOEr8cmGSKwbTvn5rksOssiS471R3sCwYXtNWl53YDJbiocZnhXp aS467EOB0+gISMRaODbGcrr1W+OWrBi8XFTJcAACRJASyl7CmNxIjPCWQMkkzNZw m290gbvnrtLmfv9dLPu7JPjzcZl8j0Zo1hrudhgZf7Vocdc4iLKF6ryC1VPiD4Ms Aefwr84Dr5ZEzA9UygHK1VUc9FXBJjGjkP+2UljbQeUs3ZesTWCQ8gqT6kZdXfei 8R2aICQtSJLCcX7lt7RRLgQUwy+mAm2VgfvO286qeyTpU8gw5fKGGKOMcEHXq9L0 qtllkSXbQ9PqJDIG5mGTLK/dtJAu4hE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:51 2025 by rpki-client