$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa File: a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa (raw, json) Hash identifier: Vo4QfSe8pqU4rbW0d5zVAxJhd1oJ1oMpSsKps8o6PB8= Subject key identifier: E7:54:44:D3:9C:21:41:0B:DF:1A:92:05:E5:A9:02:D9:5C:84:58:BC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C557F9DFC3F237E489F43580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa Signing time: Tue 04 Feb 2025 12:38:24 +0000 ROA not before: Tue 04 Feb 2025 12:38:24 +0000 ROA not after: Mon 05 May 2025 11:38:24 +0000 asID: 30036 IP address blocks: 173.24.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:57:f9:df:c3:f2:37:e4:89:f4:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:38:24 2025 GMT Not After : May 5 11:38:24 2025 GMT Subject: CN=b8238252-1c3f-48e0-bec6-e38251803d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:93:ec:64:65:b4:02:fb:8a:be:b1:1d:e6:51: cc:43:20:9a:e5:14:0a:8d:0e:b7:a5:25:c6:72:96: 4e:2d:88:38:3c:3a:5c:46:ce:49:c5:93:19:c5:51: d9:6d:25:fd:53:74:c0:a8:22:fa:11:d9:a2:44:ec: a6:84:92:99:78:b7:ad:c2:0e:e2:b3:fe:75:16:29: 64:4a:1c:85:d2:e3:65:49:f1:13:1c:14:63:6d:34: be:15:d2:bc:83:f0:74:5b:e9:cd:0f:b4:b7:39:9f: f6:04:40:c5:17:e7:01:1c:3c:dd:7e:cc:93:2a:47: 90:83:7f:d8:2c:fe:1d:a9:fb:39:fa:47:b0:39:5c: f6:13:19:97:c1:2d:59:12:7a:15:cc:1f:63:f9:61: 33:df:30:04:7f:64:57:34:2e:9a:94:69:41:a5:84: 43:b3:4a:9a:23:d2:23:2c:ca:4d:c1:91:58:8c:08: 7d:94:c4:65:7b:e1:78:d9:92:6d:40:03:4d:60:57: 75:8f:03:79:4f:07:82:a1:e9:89:54:ad:eb:fb:af: b2:23:1b:f7:3a:60:33:ea:7b:2f:ea:1f:fc:58:2c: c6:e1:1a:19:43:4f:ef:dd:f7:98:a5:a1:61:de:3a: 43:e3:3c:04:8f:37:54:f1:6e:96:d1:54:88:b5:bf: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:54:44:D3:9C:21:41:0B:DF:1A:92:05:E5:A9:02:D9:5C:84:58:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:05:08:87:fc:33:74:23:69:cb:58:6c:a9:f6:7a:8b:aa:7f: ea:4b:8b:b5:d3:b1:61:c8:d7:5a:4b:af:03:32:dd:93:2c:e6: 5c:af:ea:dd:71:49:3e:f4:9d:2a:49:ee:d5:30:7a:d8:b4:f3: 6b:fc:01:92:40:59:8c:2b:ec:80:23:09:e6:4b:1c:ff:7a:36: ec:03:a0:f4:34:07:0f:83:d6:2d:90:61:da:11:8d:5a:23:27: 94:c0:99:02:16:ae:76:bb:e9:71:66:39:e2:b5:a2:03:f0:da: ea:22:85:92:d9:37:4f:bc:7e:48:16:78:b4:f9:95:e6:37:c0: 1a:ea:ba:ba:5a:ee:5c:0e:ed:85:8b:17:87:d1:fd:d4:15:71: 1c:93:e5:fa:2d:16:1e:71:41:47:6c:10:af:2f:88:11:0b:b4: 79:2b:53:12:d9:89:5a:c2:7f:e5:6c:aa:2a:3f:8d:56:51:13: 0e:22:53:48:3c:f7:ea:fb:aa:b1:41:b8:e5:1c:97:10:6b:3f: 89:d6:f1:09:a9:6f:e0:ba:8b:9c:cd:2b:e9:22:c4:78:01:18: ce:da:53:0b:3e:b1:f1:d6:2b:ec:f0:cf:52:ee:b7:c3:74:ed: 91:a6:ec:2d:59:61:fe:68:05:ab:21:b6:bb:2b:c3:e4:d9:dd: a2:8c:c5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFV/nfw/I35In0NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzgyNFoXDTI1MDUwNTExMzgyNFowLzEtMCsGA1UEAxMk YjgyMzgyNTItMWMzZi00OGUwLWJlYzYtZTM4MjUxODAzZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpPsZGW0AvuKvrEd5lHMQyCa5RQKjQ63pSXG cpZOLYg4PDpcRs5JxZMZxVHZbSX9U3TAqCL6EdmiROymhJKZeLetwg7is/51Filk ShyF0uNlSfETHBRjbTS+FdK8g/B0W+nND7S3OZ/2BEDFF+cBHDzdfsyTKkeQg3/Y LP4dqfs5+kewOVz2ExmXwS1ZEnoVzB9j+WEz3zAEf2RXNC6alGlBpYRDs0qaI9Ij LMpNwZFYjAh9lMRle+F42ZJtQANNYFd1jwN5TweCoemJVK3r+6+yIxv3OmAz6nsv 6h/8WCzG4RoZQ0/v3feYpaFh3jpD4zwEjzdU8W6W0VSItb8bmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdURNOcIUEL3xqSBeWpAtlchFi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhM2VmYTQtNGY0ZC0z Yjk3LTk4MjAtYjBhNWE3YjI0NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUFCIf8M3QjactYbKn2eouqf+pLi7XTsWHI11pLrwMy3ZMs5lyv6t1x ST70nSpJ7tUweti082v8AZJAWYwr7IAjCeZLHP96NuwDoPQ0Bw+D1i2QYdoRjVoj J5TAmQIWrna76XFmOeK1ogPw2uoihZLZN0+8fkgWeLT5leY3wBrqurpa7lwO7YWL F4fR/dQVcRyT5fotFh5xQUdsEK8viBELtHkrUxLZiVrCf+Vsqio/jVZREw4iU0g8 9+r7qrFBuOUclxBrP4nW8Qmpb+C6i5zNK+kixHgBGM7aUws+sfHWK+zwz1Lut8N0 7ZGm7C1ZYf5oBashtrsrw+TZ3aKMxaM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:33 2025 by rpki-client