$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/646efc33-ad89-3151-81e9-7425077b42b0.roa File: 646efc33-ad89-3151-81e9-7425077b42b0.roa (raw, json) Hash identifier: tCbGiCydGCk2xrD8ydZkKBFVGeotMQDRnmGX7W4B344= Subject key identifier: 9D:0B:1A:E9:31:E4:17:EF:D1:CE:B4:86:15:E5:CA:F1:D1:5D:97:AA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C575ED1420C8695A93CEFAC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/646efc33-ad89-3151-81e9-7425077b42b0.roa Signing time: Tue 04 Feb 2025 13:38:44 +0000 ROA not before: Tue 04 Feb 2025 13:38:44 +0000 ROA not after: Mon 05 May 2025 12:38:44 +0000 asID: 30036 IP address blocks: 173.18.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:75:ed:14:20:c8:69:5a:93:ce:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:38:44 2025 GMT Not After : May 5 12:38:44 2025 GMT Subject: CN=9c896eca-9d2c-492c-84ce-190af83132bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4d:17:61:0f:d9:ad:6f:7d:40:50:dd:0f:af: 98:84:be:c8:a7:7f:d2:38:a8:b2:5c:7b:72:39:75: 6c:71:47:cb:4b:c2:c8:78:1c:53:83:41:30:8a:d2: 01:d9:0d:6d:a2:12:b8:1b:24:25:50:d4:f7:4a:f2: 8e:a4:ac:7c:07:22:d6:f4:e2:5d:53:5c:90:26:6d: c9:d0:a4:de:0f:fc:fe:2e:ef:6f:03:ce:9e:f1:7f: 0e:f4:79:02:7b:01:2f:b7:58:e5:79:92:19:ff:08: a1:7d:c7:40:c0:ae:a7:4b:df:32:2e:4b:0d:79:34: 2a:0c:7c:14:dc:d6:35:63:14:b9:30:79:d9:44:11: 2a:17:b9:85:7e:51:73:19:b3:16:19:f1:39:43:45: 0a:fb:b7:a2:9e:c0:8b:dd:84:49:f6:56:7d:cb:b5: be:2c:14:a2:5e:e5:29:d1:ec:3f:db:2e:a5:ff:a4: 92:d3:99:e7:36:43:61:a6:de:84:19:cf:e4:76:a6: 05:2b:f3:29:cd:ed:42:a2:91:fc:86:48:8e:c1:63: 17:63:c6:20:ed:bf:98:08:7b:10:f4:3e:34:63:a5: 23:e5:80:5c:05:9d:85:95:70:96:25:90:76:7c:ec: 41:f5:37:e9:9d:db:98:8b:2a:02:7f:23:fc:5b:87: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0B:1A:E9:31:E4:17:EF:D1:CE:B4:86:15:E5:CA:F1:D1:5D:97:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/646efc33-ad89-3151-81e9-7425077b42b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:27:b6:a3:ca:a5:d8:a0:ba:a8:f1:9e:33:7f:5c:a3:34:22: 26:54:c7:af:ca:30:0b:ad:df:a4:bd:d2:45:18:45:da:c9:0e: f4:1b:74:d4:ac:e0:74:df:cf:37:70:4f:ed:38:69:56:a0:37: 50:03:38:04:aa:7e:6a:2e:fc:ca:4a:99:4a:a5:ac:57:1c:a1: 55:ef:73:87:de:e1:c4:68:6a:46:c4:4b:1b:d6:ed:1f:e1:58: c6:9b:a1:04:8a:77:8d:08:39:9f:d6:59:91:68:8e:f1:a8:5e: 08:4e:d5:7d:49:0f:27:94:c0:df:9c:70:40:78:5d:14:73:ed: bf:0c:07:02:4a:bc:14:08:d7:85:56:84:9e:67:e7:73:9c:74: 12:9d:a4:79:49:34:7b:bd:a1:0e:ca:32:0c:43:9c:50:4b:b7: a2:eb:96:77:a3:c9:45:47:19:ef:5a:05:81:60:1e:c5:09:d8: b1:d3:10:6a:60:91:ac:f9:c6:a3:df:a8:a8:18:af:7d:ce:77: dd:1c:81:78:28:82:83:31:86:93:d8:1e:bd:c6:d7:b9:e8:63: af:3b:41:b3:13:ef:d5:78:67:40:93:4b:a8:c6:7a:df:f4:29: 2a:8b:37:cf:b3:9f:72:26:ad:5d:7e:ba:4e:33:ee:37:40:c5: d9:13:fb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFde0UIMhpWpPO+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzMzg0NFoXDTI1MDUwNTEyMzg0NFowLzEtMCsGA1UEAxMk OWM4OTZlY2EtOWQyYy00OTJjLTg0Y2UtMTkwYWY4MzEzMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E0XYQ/ZrW99QFDdD6+YhL7Ip3/SOKiyXHty OXVscUfLS8LIeBxTg0EwitIB2Q1tohK4GyQlUNT3SvKOpKx8ByLW9OJdU1yQJm3J 0KTeD/z+Lu9vA86e8X8O9HkCewEvt1jleZIZ/wihfcdAwK6nS98yLksNeTQqDHwU 3NY1YxS5MHnZRBEqF7mFflFzGbMWGfE5Q0UK+7einsCL3YRJ9lZ9y7W+LBSiXuUp 0ew/2y6l/6SS05nnNkNhpt6EGc/kdqYFK/Mpze1CopH8hkiOwWMXY8Yg7b+YCHsQ 9D40Y6Uj5YBcBZ2FlXCWJZB2fOxB9TfpnduYiyoCfyP8W4f3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0LGukx5Bfv0c60hhXlyvHRXZeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjQ2ZWZjMzMtYWQ4OS0z MTUxLTgxZTktNzQyNTA3N2I0MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEntqPKpdiguqjxnjN/XKM0IiZUx6/KMAut36S90kUYRdrJDvQbdNSs 4HTfzzdwT+04aVagN1ADOASqfmou/MpKmUqlrFccoVXvc4fe4cRoakbESxvW7R/h WMaboQSKd40IOZ/WWZFojvGoXghO1X1JDyeUwN+ccEB4XRRz7b8MBwJKvBQI14VW hJ5n53OcdBKdpHlJNHu9oQ7KMgxDnFBLt6LrlnejyUVHGe9aBYFgHsUJ2LHTEGpg kaz5xqPfqKgYr33Od90cgXgogoMxhpPYHr3G17noY687QbMT79V4Z0CTS6jGet/0 KSqLN8+zn3ImrV1+uk4z7jdAxdkT+9E= -----END CERTIFICATE-----Generated at Sun Apr 6 08:28:00 2025 by rpki-client