$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa File: 84e3b569-c77e-369f-9d81-aa06c2742984.roa (raw, json) Hash identifier: pN8s9GV/AcItMfxi/phUtJVfeuoN7S8XQrEnHIjLZpg= Subject key identifier: 39:8B:97:9A:B8:91:C8:ED:45:38:40:12:3B:29:72:F1:8C:6F:98:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2611EDB69B81D75B6A09000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa Signing time: Mon 03 Feb 2025 11:09:24 +0000 ROA not before: Mon 03 Feb 2025 11:09:24 +0000 ROA not after: Sun 04 May 2025 10:09:24 +0000 asID: 30036 IP address blocks: 173.23.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:61:1e:db:69:b8:1d:75:b6:a0:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:09:24 2025 GMT Not After : May 4 10:09:24 2025 GMT Subject: CN=3940ba65-c9df-4cc7-bee3-941ecd5c9250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:d1:32:79:61:37:7e:12:96:75:8f:29:3e: 73:55:84:75:df:5c:d9:0d:d7:5c:93:5e:04:29:9c: 44:6e:97:35:c3:4b:ac:ad:3c:13:5b:51:21:16:5f: 41:c5:8f:8b:7f:19:72:e4:7e:32:68:a3:77:65:a7: e9:34:0b:97:df:37:c5:11:ff:2f:98:28:7f:34:19: b0:e0:85:75:37:52:e4:f8:34:05:65:ed:9f:56:68: 0e:12:c5:eb:ff:67:e3:4f:44:2e:ff:25:0a:69:b2: eb:a1:64:bb:34:3b:9e:3c:52:6b:af:b4:58:fd:30: 7f:4c:c2:59:91:d6:88:1a:28:97:f3:80:3a:59:ad: fe:4a:8a:09:e6:0a:30:c6:bd:fa:93:bf:81:58:86: 39:b7:72:d7:3a:1e:6c:01:57:51:0c:5e:d8:d7:2a: 64:7d:5d:27:62:49:0d:05:ba:cd:88:6c:fd:f4:7a: 24:02:f6:fc:b0:df:c8:ea:ba:5c:fb:b0:60:c4:75: 05:ab:be:21:07:79:23:67:ec:a7:d4:95:21:9f:ba: 59:36:23:ad:98:ee:c0:0b:3c:94:38:b6:fb:f1:5a: 87:fd:89:79:9e:dd:f6:82:68:bc:c9:91:89:60:49: 7e:2b:4b:73:b9:d2:d4:7e:6a:3d:c7:fd:6c:6a:da: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:97:9A:B8:91:C8:ED:45:38:40:12:3B:29:72:F1:8C:6F:98:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:93:83:5a:e0:47:e7:98:19:50:c5:a4:f4:a5:58:f2:0b:bc: 82:72:47:b2:83:28:a3:4e:b8:32:6c:6c:4f:a8:1d:57:1e:14: c9:ec:8c:bc:c0:dd:ac:9a:7f:44:72:5c:c1:4d:b5:8d:d3:73: 11:25:7e:72:f9:43:94:6f:eb:8b:c1:d0:c1:28:96:16:0e:be: 66:83:62:34:8b:06:63:21:bb:dc:55:fc:93:fd:23:c9:ae:9f: 28:96:f2:29:4e:f5:f3:f6:7c:f0:e4:39:77:6c:f5:dc:92:75: 08:8f:52:89:77:97:85:3f:8f:5c:08:45:42:99:ef:ca:ef:8b: 9a:60:84:a8:9c:56:9b:90:97:12:3f:8f:45:b2:aa:a5:d0:5d: 91:f7:25:43:a8:60:21:16:3c:d3:f6:ac:ed:d2:48:06:23:5b: be:3d:8e:82:fb:71:6a:10:1b:00:50:50:22:88:f2:fd:7a:6c: 04:60:92:c0:5b:fc:2d:92:4d:a3:36:4e:82:9e:df:f6:e0:53: 8a:dc:95:5f:7e:75:9d:db:b8:1f:2e:d0:d7:49:86:ba:15:e1: 61:6d:4c:6d:32:bc:83:28:2c:8a:93:42:99:d7:d4:30:98:03: 31:19:06:a0:91:3d:87:f8:92:82:0f:c7:83:88:78:12:41:f2: fe:3f:25:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYR7babgddbagkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDkyNFoXDTI1MDUwNDEwMDkyNFowLzEtMCsGA1UEAxMk Mzk0MGJhNjUtYzlkZi00Y2M3LWJlZTMtOTQxZWNkNWM5MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuivRMnlhN34SlnWPKT5zVYR131zZDddck14E KZxEbpc1w0usrTwTW1EhFl9BxY+Lfxly5H4yaKN3ZafpNAuX3zfFEf8vmCh/NBmw 4IV1N1Lk+DQFZe2fVmgOEsXr/2fjT0Qu/yUKabLroWS7NDuePFJrr7RY/TB/TMJZ kdaIGiiX84A6Wa3+SooJ5gowxr36k7+BWIY5t3LXOh5sAVdRDF7Y1ypkfV0nYkkN BbrNiGz99HokAvb8sN/I6rpc+7BgxHUFq74hB3kjZ+yn1JUhn7pZNiOtmO7ACzyU OLb78VqH/Yl5nt32gmi8yZGJYEl+K0tzudLUfmo9x/1satpVSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmLl5q4kcjtRThAEjspcvGMb5geMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRlM2I1NjktYzc3ZS0z NjlmLTlkODEtYWEwNmMyNzQyOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaTg1rgR+eYGVDFpPSlWPILvIJyR7KDKKNOuDJsbE+oHVceFMnsjLzA 3ayaf0RyXMFNtY3TcxElfnL5Q5Rv64vB0MEolhYOvmaDYjSLBmMhu9xV/JP9I8mu nyiW8ilO9fP2fPDkOXds9dySdQiPUol3l4U/j1wIRUKZ78rvi5pghKicVpuQlxI/ j0WyqqXQXZH3JUOoYCEWPNP2rO3SSAYjW749joL7cWoQGwBQUCKI8v16bARgksBb /C2STaM2ToKe3/bgU4rclV9+dZ3buB8u0NdJhroV4WFtTG0yvIMoLIqTQpnX1DCY AzEZBqCRPYf4koIPx4OIeBJB8v4/JXg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:30 2025 by rpki-client