$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9444cfb2-0ff6-34d8-b4f1-bac825ccf79c.roa File: 9444cfb2-0ff6-34d8-b4f1-bac825ccf79c.roa (raw, json) Hash identifier: CkQIlMg6UAlAjKUZKoyxRgNxhlfuaIwUD0JfaQgKK1Q= Subject key identifier: 8C:39:CF:C1:D7:C3:81:0F:E5:94:EA:CA:63:93:53:49:17:52:6C:5E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57F33CB7887912E2B2A7E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9444cfb2-0ff6-34d8-b4f1-bac825ccf79c.roa Signing time: Tue 04 Feb 2025 13:57:26 +0000 ROA not before: Tue 04 Feb 2025 13:57:26 +0000 ROA not after: Mon 05 May 2025 12:57:26 +0000 asID: 30036 IP address blocks: 173.23.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7f:33:cb:78:87:91:2e:2b:2a:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:57:26 2025 GMT Not After : May 5 12:57:26 2025 GMT Subject: CN=adb5ebac-c26a-40fe-b3e8-a7a7ae2fb50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:9b:9e:cd:f3:af:dd:bb:f1:ea:6a:d9:17: 9f:73:66:97:00:73:3b:16:a6:47:fa:0a:74:84:ee: b4:be:ba:76:5a:ae:16:ae:d9:46:a4:84:10:9e:3f: 3c:9c:00:52:7c:3b:1a:3f:4d:dc:96:20:0c:69:62: de:72:79:bd:bb:32:1d:ec:e9:56:d0:d0:50:8b:c4: f2:56:28:ab:02:f9:8d:bb:d1:d2:19:ce:28:d6:e9: 8a:5c:7d:b9:69:cb:d8:d4:7a:f7:c3:cf:51:03:0a: 1e:ef:48:4e:3e:8c:98:21:c1:3c:25:39:1a:1d:f7: 83:77:5a:a2:b1:cc:0d:39:71:96:c0:fe:af:f9:de: 4a:c1:ae:52:2f:88:41:9a:52:09:1b:32:11:71:a1: 39:c2:f5:a4:3a:bf:92:b0:1e:a1:af:9d:46:82:0e: 4c:4c:f7:c4:2e:4d:32:e4:e6:f1:e2:66:a6:e4:43: b1:41:b8:53:f7:83:99:aa:7e:e7:5a:1d:51:d7:6f: 9b:9a:38:0a:ea:34:2c:b5:85:1a:b7:9b:e0:01:56: a8:ba:9d:c0:2e:3e:0f:53:3d:44:fb:d2:00:d6:8d: a0:4a:5c:c0:58:4f:76:aa:17:a8:50:41:be:96:ca: fa:de:65:02:4e:89:03:37:02:15:40:7c:4a:4e:13: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:39:CF:C1:D7:C3:81:0F:E5:94:EA:CA:63:93:53:49:17:52:6C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9444cfb2-0ff6-34d8-b4f1-bac825ccf79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d5:f8:81:72:36:28:45:17:54:0f:61:0b:a5:41:10:97:92: c1:88:1e:9a:9b:94:89:b3:ae:c7:a3:5e:07:41:2d:75:59:af: ea:fe:30:9b:cd:18:84:55:98:c1:4a:7e:f5:71:e3:ee:38:aa: ef:07:d0:e8:4d:53:00:78:32:64:1b:10:a7:ca:fa:08:74:e1: 20:db:2f:26:cc:5f:db:13:ce:40:7a:76:3b:45:a9:ba:27:6d: 2e:0f:19:00:ff:d7:38:86:7e:7a:f4:fa:6d:6b:bd:e1:62:c3: c7:2b:53:10:9f:94:f2:c4:7e:7e:c6:a6:4a:ae:e2:de:bf:ab: a0:f2:54:4f:11:26:55:58:cf:59:5b:83:22:db:f5:7b:fe:63: e4:f5:c2:22:d8:82:87:d4:fb:50:62:ee:e7:30:e7:0e:b8:30: 36:71:79:55:7b:26:a3:e6:c0:e6:90:d2:17:a7:a1:00:e3:30: 6a:c0:20:a3:91:a9:dd:80:73:50:b8:45:14:55:2d:d3:28:55: 45:49:f5:38:d7:0c:09:ee:18:a4:26:e1:62:37:a0:de:78:fc: 65:8c:ac:77:6c:68:41:91:d0:21:a4:1f:30:49:e1:2c:16:c9: e5:da:82:55:97:d1:03:55:ba:17:b3:2a:6b:e2:6a:ba:21:fa: 19:61:61:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfzPLeIeRLisqfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTcyNloXDTI1MDUwNTEyNTcyNlowLzEtMCsGA1UEAxMk YWRiNWViYWMtYzI2YS00MGZlLWIzZTgtYTdhN2FlMmZiNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6abns3zr9278epq2Refc2aXAHM7FqZH+gp0 hO60vrp2Wq4WrtlGpIQQnj88nABSfDsaP03cliAMaWLecnm9uzId7OlW0NBQi8Ty ViirAvmNu9HSGc4o1umKXH25acvY1Hr3w89RAwoe70hOPoyYIcE8JTkaHfeDd1qi scwNOXGWwP6v+d5Kwa5SL4hBmlIJGzIRcaE5wvWkOr+SsB6hr51Ggg5MTPfELk0y 5Obx4mam5EOxQbhT94OZqn7nWh1R12+bmjgK6jQstYUat5vgAVaoup3ALj4PUz1E +9IA1o2gSlzAWE92qheoUEG+lsr63mUCTokDNwIVQHxKThP0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw5z8HXw4EP5ZTqymOTU0kXUmxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTQ0NGNmYjItMGZmNi0z NGQ4LWI0ZjEtYmFjODI1Y2NmNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLV+IFyNihFF1QPYQulQRCXksGIHpqblImzrsejXgdBLXVZr+r+MJvN GIRVmMFKfvVx4+44qu8H0OhNUwB4MmQbEKfK+gh04SDbLybMX9sTzkB6djtFqbon bS4PGQD/1ziGfnr0+m1rveFiw8crUxCflPLEfn7Gpkqu4t6/q6DyVE8RJlVYz1lb gyLb9Xv+Y+T1wiLYgofU+1Bi7ucw5w64MDZxeVV7JqPmwOaQ0henoQDjMGrAIKOR qd2Ac1C4RRRVLdMoVUVJ9TjXDAnuGKQm4WI3oN54/GWMrHdsaEGR0CGkHzBJ4SwW yeXaglWX0QNVuhezKmviaroh+hlhYeo= -----END CERTIFICATE-----Generated at Tue Apr 8 23:41:33 2025 by rpki-client