$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dd7ebf7-6314-3608-a413-157ddb99ed9e.roa File: 3dd7ebf7-6314-3608-a413-157ddb99ed9e.roa (raw, json) Hash identifier: RSS+mcGtb1qIaka8abT+3NG9wkFPlecuJCaz1UuEJDI= Subject key identifier: BD:A2:6E:14:8E:41:E1:9D:73:18:D3:F0:0B:72:7D:84:02:A4:E5:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2639471A77F7A94D7D17D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dd7ebf7-6314-3608-a413-157ddb99ed9e.roa Signing time: Mon 03 Feb 2025 11:14:21 +0000 ROA not before: Mon 03 Feb 2025 11:14:21 +0000 ROA not after: Sun 04 May 2025 10:14:21 +0000 asID: 30036 IP address blocks: 173.25.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:63:94:71:a7:7f:7a:94:d7:d1:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:14:21 2025 GMT Not After : May 4 10:14:21 2025 GMT Subject: CN=6d96b585-8d7a-42a9-a5eb-560031841c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:c8:39:93:87:8b:80:7f:39:39:6a:69:fb: 18:e1:47:81:fb:6b:66:d5:94:7b:8e:2d:6e:55:b9: 6c:26:05:b9:28:63:61:e4:f3:11:91:d6:ef:64:26: 1f:ad:1d:80:83:0e:ea:fa:e4:35:16:63:8c:43:da: f4:e5:59:c6:17:ab:dd:b5:0c:01:37:c2:f8:c3:bd: 32:cd:3b:a0:8a:ec:1c:14:d5:71:8b:e9:1b:a2:f0: 55:3f:57:d4:c7:45:0b:be:24:64:ff:f9:ce:7b:14: db:bf:6a:51:2f:f3:71:69:0c:0b:f4:d0:36:f3:7c: 10:2f:0c:7a:95:46:5e:f3:6e:a6:05:3e:96:cf:91: 18:c1:41:c5:28:b6:39:bd:6b:fa:b1:27:47:52:a4: 63:5c:5f:58:d9:d7:a1:60:f4:83:18:e7:ed:10:d7: b2:36:62:ae:e6:7f:ee:af:83:7a:8f:39:6a:10:3b: da:18:7f:ad:b5:14:f1:54:43:a0:41:f7:07:e5:7e: ed:34:d2:ec:4a:98:92:30:07:4a:0a:35:00:33:48: 31:8d:92:5c:92:d7:70:cf:95:10:b5:6d:85:e8:73: 2b:e0:9d:a8:a5:ea:b1:5f:ce:a0:38:41:8d:77:4a: 8a:f5:32:34:46:ca:40:6f:96:ec:00:8f:3f:d2:00: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A2:6E:14:8E:41:E1:9D:73:18:D3:F0:0B:72:7D:84:02:A4:E5:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dd7ebf7-6314-3608-a413-157ddb99ed9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:44:a0:42:3d:75:c5:82:17:82:2f:16:e2:e2:d2:d2:93:40: eb:d9:16:15:60:57:3c:68:94:44:46:57:b3:be:9e:79:e6:07: c9:29:f2:24:92:74:3e:80:43:2c:ac:f7:24:3a:e7:53:ce:23: b9:e6:2f:6d:ae:2b:fe:75:76:31:de:9c:00:fa:97:e9:92:9e: 8e:bc:83:04:04:42:fd:2a:d9:5a:98:da:f3:3c:d1:e2:2b:ed: fe:ce:f4:c4:56:15:51:35:58:52:46:2d:57:77:18:04:bf:5a: 2e:81:1f:cb:57:0a:25:92:6d:73:d9:3a:a4:9d:f9:4c:1b:ec: ec:cf:a3:89:b9:fe:5d:2a:13:e8:f1:00:57:d6:a1:73:bd:45: 60:a9:15:de:04:f9:f8:dd:a4:92:5f:b1:ca:36:4d:2a:30:37: 74:73:7b:4b:84:34:be:62:2f:83:d7:91:d7:73:d4:0d:ee:a2: 77:08:66:99:e6:bd:1e:8e:60:33:73:a5:06:40:9e:35:29:55: e5:ba:d5:4e:54:04:c9:b5:97:92:a4:a8:85:ff:f2:ea:41:ac: c7:d7:fe:0a:70:23:cf:77:cd:48:f9:4e:ff:23:3f:05:e1:48: e3:b0:c9:24:e6:a3:be:6d:74:17:8f:e0:d8:1f:31:fa:e4:56: c7:af:a4:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCY5Rxp396lNfRfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTQyMVoXDTI1MDUwNDEwMTQyMVowLzEtMCsGA1UEAxMk NmQ5NmI1ODUtOGQ3YS00MmE5LWE1ZWItNTYwMDMxODQxYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwnIOZOHi4B/OTlqafsY4UeB+2tm1ZR7ji1u VblsJgW5KGNh5PMRkdbvZCYfrR2Agw7q+uQ1FmOMQ9r05VnGF6vdtQwBN8L4w70y zTugiuwcFNVxi+kbovBVP1fUx0ULviRk//nOexTbv2pRL/NxaQwL9NA283wQLwx6 lUZe826mBT6Wz5EYwUHFKLY5vWv6sSdHUqRjXF9Y2dehYPSDGOftENeyNmKu5n/u r4N6jzlqEDvaGH+ttRTxVEOgQfcH5X7tNNLsSpiSMAdKCjUAM0gxjZJcktdwz5UQ tW2F6HMr4J2opeqxX86gOEGNd0qK9TI0RspAb5bsAI8/0gCbmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2ibhSOQeGdcxjT8AtyfYQCpOV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RkN2ViZjctNjMxNC0z NjA4LWE0MTMtMTU3ZGRiOTllZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhEoEI9dcWCF4IvFuLi0tKTQOvZFhVgVzxolERGV7O+nnnmB8kp8iSS dD6AQyys9yQ651POI7nmL22uK/51djHenAD6l+mSno68gwQEQv0q2VqY2vM80eIr 7f7O9MRWFVE1WFJGLVd3GAS/Wi6BH8tXCiWSbXPZOqSd+Uwb7OzPo4m5/l0qE+jx AFfWoXO9RWCpFd4E+fjdpJJfsco2TSowN3Rze0uENL5iL4PXkddz1A3uoncIZpnm vR6OYDNzpQZAnjUpVeW61U5UBMm1l5KkqIX/8upBrMfX/gpwI893zUj5Tv8jPwXh SOOwySTmo75tdBeP4NgfMfrkVsevpJw= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:04 2025 by rpki-client