$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/936ec917-e177-334e-a14b-24b549dcaca5.roa File: 936ec917-e177-334e-a14b-24b549dcaca5.roa (raw, json) Hash identifier: cv9jtKX+GRAO2np3GwUq7ZN4eSK4/ivAjjxVUol/HbY= Subject key identifier: 5E:BF:40:7C:40:09:60:F7:7E:0C:3A:A2:2D:25:AD:B7:D7:48:6B:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C53291BF4BC91BC02D1FC3E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/936ec917-e177-334e-a14b-24b549dcaca5.roa Signing time: Tue 04 Feb 2025 11:23:01 +0000 ROA not before: Tue 04 Feb 2025 11:23:01 +0000 ROA not after: Mon 05 May 2025 10:23:01 +0000 asID: 30036 IP address blocks: 173.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:32:91:bf:4b:c9:1b:c0:2d:1f:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:23:01 2025 GMT Not After : May 5 10:23:01 2025 GMT Subject: CN=e018c981-f37e-4e22-82f0-6d55f85668b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:33:2f:e2:b3:46:ac:c5:ec:5c:0e:7b:45: 26:2e:b6:f6:72:30:26:e9:64:bf:31:e8:42:4b:02: f6:c0:79:a2:e1:3e:86:a6:79:30:3c:e2:75:ec:e6: cd:e7:2b:12:87:d0:3a:d7:d4:61:84:68:11:a4:65: 64:08:13:ea:97:4e:af:3f:cd:a1:70:8a:c1:ef:86: 9c:5f:41:b4:62:c8:65:00:e2:74:7c:67:e1:c9:4f: 81:b5:d0:79:2a:ec:a2:0c:02:2f:51:27:33:43:3b: c9:a9:29:04:12:17:68:63:84:aa:17:21:94:36:10: a6:22:df:cd:b6:f2:ce:93:36:d6:30:54:6f:30:88: 48:1b:74:07:68:58:c5:09:3b:0f:d1:e9:67:2d:5f: af:04:d5:b5:fd:c0:41:da:c4:20:57:6d:8f:fb:49: d6:bb:bf:6c:a9:67:29:45:67:a3:42:30:15:62:1d: 7c:27:b1:b9:db:4f:d1:ee:bc:1b:d0:0a:c1:28:0c: ef:3d:ce:c6:ff:e3:01:fb:b7:95:3d:f0:c1:ac:e9: f7:11:a1:36:a3:be:09:f0:d0:24:04:f8:c3:8c:4d: 40:09:8b:cb:b4:2e:6c:19:f5:3c:2c:e8:79:b7:b2: b1:73:a3:ec:e9:fa:08:b8:97:bc:b8:69:ba:5a:50: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BF:40:7C:40:09:60:F7:7E:0C:3A:A2:2D:25:AD:B7:D7:48:6B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/936ec917-e177-334e-a14b-24b549dcaca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4a:5a:78:75:80:c9:1c:a5:69:a9:03:71:d5:bd:34:b7:74: f2:e5:f7:e7:74:89:f5:d1:eb:c4:e2:04:41:24:ae:99:ac:9c: 13:0d:8c:7a:12:9c:89:d2:f0:e2:a2:3e:b8:80:45:bf:77:97: 26:4c:83:20:19:14:e2:53:9c:77:39:3e:d9:ad:03:34:df:b5: 67:08:40:a1:55:e0:21:30:7c:dd:57:33:dc:85:2b:c2:d7:40: e1:16:97:c9:f5:b6:b8:12:fb:c0:18:96:ab:0a:08:9d:c2:93: 98:7f:31:28:61:11:d7:70:49:ac:d3:64:a2:f4:a1:64:df:89: cf:ca:8c:c8:1e:ae:f7:26:40:bd:46:b2:6e:fc:6b:c5:ab:03: 15:00:fe:7b:94:ca:b7:88:fe:01:b1:aa:bf:29:ed:d4:c6:e1: 03:c9:ef:0d:ea:af:f1:a8:bd:5c:68:c3:49:ee:9c:68:3a:28: 6a:db:be:8e:e3:c2:a0:64:48:04:91:be:f1:84:01:a2:a3:34: 12:57:8f:a4:3b:c8:54:a3:8f:d7:52:06:49:75:37:6b:81:88: 0d:b9:5c:32:3d:83:9f:2f:2d:50:94:62:e6:7d:cf:c5:3c:a9: 03:88:55:59:80:35:d5:c7:6e:29:e2:b8:5b:cf:e6:ac:a2:49: a2:2c:9e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFMpG/S8kbwC0fw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjMwMVoXDTI1MDUwNTEwMjMwMVowLzEtMCsGA1UEAxMk ZTAxOGM5ODEtZjM3ZS00ZTIyLTgyZjAtNmQ1NWY4NTY2OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtywzL+KzRqzF7FwOe0UmLrb2cjAm6WS/MehC SwL2wHmi4T6GpnkwPOJ17ObN5ysSh9A619RhhGgRpGVkCBPql06vP82hcIrB74ac X0G0YshlAOJ0fGfhyU+BtdB5KuyiDAIvUSczQzvJqSkEEhdoY4SqFyGUNhCmIt/N tvLOkzbWMFRvMIhIG3QHaFjFCTsP0elnLV+vBNW1/cBB2sQgV22P+0nWu79sqWcp RWejQjAVYh18J7G520/R7rwb0ArBKAzvPc7G/+MB+7eVPfDBrOn3EaE2o74J8NAk BPjDjE1ACYvLtC5sGfU8LOh5t7Kxc6Ps6foIuJe8uGm6WlCKQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6/QHxACWD3fgw6oi0lrbfXSGuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTM2ZWM5MTctZTE3Ny0z MzRlLWExNGItMjRiNTQ5ZGNhY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJKWnh1gMkcpWmpA3HVvTS3dPLl9+d0ifXR68TiBEEkrpmsnBMNjHoS nInS8OKiPriARb93lyZMgyAZFOJTnHc5PtmtAzTftWcIQKFV4CEwfN1XM9yFK8LX QOEWl8n1trgS+8AYlqsKCJ3Ck5h/MShhEddwSazTZKL0oWTfic/KjMgervcmQL1G sm78a8WrAxUA/nuUyreI/gGxqr8p7dTG4QPJ7w3qr/GovVxow0nunGg6KGrbvo7j wqBkSASRvvGEAaKjNBJXj6Q7yFSjj9dSBkl1N2uBiA25XDI9g58vLVCUYuZ9z8U8 qQOIVVmANdXHbiniuFvP5qyiSaIsnvc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:44 2025 by rpki-client