$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7863659-f5bd-37d6-85a2-bc0fa7629ad7.roa File: a7863659-f5bd-37d6-85a2-bc0fa7629ad7.roa (raw, json) Hash identifier: 66gd5qwjel+pzfAjR8lU/lz+Cof3gwtwjHrnh9Fxdnw= Subject key identifier: 67:36:FE:39:E9:80:0F:1C:EB:A9:99:DA:A3:9C:5E:AE:E8:62:85:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F70007EAAFAC55D2D4A940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7863659-f5bd-37d6-85a2-bc0fa7629ad7.roa Signing time: Wed 05 Feb 2025 11:10:25 +0000 ROA not before: Wed 05 Feb 2025 11:10:25 +0000 ROA not after: Tue 06 May 2025 10:10:25 +0000 asID: 30036 IP address blocks: 173.17.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f7:00:07:ea:af:ac:55:d2:d4:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:10:25 2025 GMT Not After : May 6 10:10:25 2025 GMT Subject: CN=7d30b5c8-a92a-401e-94e3-6a3e2d5a505c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:d5:77:66:ed:61:4a:90:6b:eb:4f:60:20: 95:01:61:99:0c:4b:f3:0e:5e:99:6f:13:d5:8b:90: f6:2f:ff:01:c6:cf:78:dd:1a:18:e3:8a:ff:6c:23: 25:87:20:90:ee:70:78:2c:de:1d:98:35:2d:a4:d9: 81:b4:ba:40:fb:c1:30:a7:16:3b:15:81:fa:ad:0f: 94:ff:6d:a1:5d:14:fe:68:12:29:9b:e9:f4:0b:3d: e3:00:14:5a:35:57:0c:20:73:cb:04:b8:f8:60:d2: 98:90:16:2c:3c:ac:1e:31:8c:49:51:3d:47:d8:7d: 04:77:52:a0:78:74:39:51:46:7a:42:a0:08:f8:85: 06:8f:d6:15:5a:13:78:0a:50:56:d6:47:ea:d7:8f: 5b:fc:64:94:7f:41:de:98:14:79:fc:e8:1d:66:08: ba:46:01:7c:21:7e:ff:6a:4a:5c:1c:53:c9:f2:b1: d5:97:f8:b1:1e:7d:a9:24:9e:e6:44:f1:3a:de:9a: dc:28:04:e0:45:8e:03:1b:1c:f4:55:e7:13:75:da: 30:0b:f6:7d:bc:59:81:99:23:1d:f9:40:c4:93:8e: 27:af:eb:49:52:a9:97:cb:1b:0e:d6:cd:4e:41:fe: d2:67:e3:7b:ac:65:e1:41:f9:b3:09:9e:62:ad:ff: 37:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:36:FE:39:E9:80:0F:1C:EB:A9:99:DA:A3:9C:5E:AE:E8:62:85:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7863659-f5bd-37d6-85a2-bc0fa7629ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:33:ae:b7:96:2b:57:db:cc:f1:c1:6b:5b:43:0d:9b:d1:33: 59:d7:10:67:c2:44:69:7b:7c:d8:31:46:bd:9e:3a:bd:cc:c9: 15:28:83:03:60:9d:8e:57:bf:73:d9:1e:58:8e:b2:fe:73:50: 97:51:bb:0e:cc:2b:5d:9c:c4:25:83:97:7a:82:07:17:18:19: cf:0f:09:60:67:75:41:0f:49:87:e3:f2:76:78:de:10:4c:dd: 65:20:3e:ee:e6:5f:fa:37:7b:90:68:a3:e8:bf:88:61:3e:8a: 2d:d0:e6:d4:03:7b:1c:b8:f5:59:54:e0:1b:ee:b4:ea:66:3d: c7:b5:24:99:ab:a0:6c:28:c6:58:9c:cc:b7:23:75:fc:af:f9: 8c:ef:88:97:65:3e:f7:ff:7d:d1:ab:c4:d6:14:06:ba:57:e6: ca:10:09:7e:4e:c6:e2:5f:00:e7:b7:7a:3e:18:82:23:95:49: 7c:e0:e5:78:92:23:d9:52:fd:58:6c:d4:19:03:f3:c9:5a:21: d4:39:75:98:4a:be:f1:ed:d5:70:83:57:5c:e3:22:39:4f:e8: ec:c5:08:e6:ba:57:2a:17:de:1f:80:e0:ae:c1:1a:e6:81:7d: 93:20:e4:cb:89:9c:c6:a5:c6:4d:4a:2e:7e:00:0f:90:22:55: a6:77:fe:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9wAH6q+sVdLUqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTAyNVoXDTI1MDUwNjEwMTAyNVowLzEtMCsGA1UEAxMk N2QzMGI1YzgtYTkyYS00MDFlLTk0ZTMtNmEzZTJkNWE1MDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIHVd2btYUqQa+tPYCCVAWGZDEvzDl6ZbxPV i5D2L/8Bxs943RoY44r/bCMlhyCQ7nB4LN4dmDUtpNmBtLpA+8EwpxY7FYH6rQ+U /22hXRT+aBIpm+n0Cz3jABRaNVcMIHPLBLj4YNKYkBYsPKweMYxJUT1H2H0Ed1Kg eHQ5UUZ6QqAI+IUGj9YVWhN4ClBW1kfq149b/GSUf0HemBR5/OgdZgi6RgF8IX7/ akpcHFPJ8rHVl/ixHn2pJJ7mRPE63prcKATgRY4DGxz0VecTddowC/Z9vFmBmSMd +UDEk44nr+tJUqmXyxsO1s1OQf7SZ+N7rGXhQfmzCZ5irf83JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc2/jnpgA8c66mZ2qOcXq7oYoVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTc4NjM2NTktZjViZC0z N2Q2LTg1YTItYmMwZmE3NjI5YWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEzrreWK1fbzPHBa1tDDZvRM1nXEGfCRGl7fNgxRr2eOr3MyRUogwNg nY5Xv3PZHliOsv5zUJdRuw7MK12cxCWDl3qCBxcYGc8PCWBndUEPSYfj8nZ43hBM 3WUgPu7mX/o3e5Boo+i/iGE+ii3Q5tQDexy49VlU4BvutOpmPce1JJmroGwoxlic zLcjdfyv+YzviJdlPvf/fdGrxNYUBrpX5soQCX5OxuJfAOe3ej4YgiOVSXzg5XiS I9lS/Vhs1BkD88laIdQ5dZhKvvHt1XCDV1zjIjlP6OzFCOa6VyoX3h+A4K7BGuaB fZMg5MuJnMalxk1KLn4AD5AiVaZ3/pA= -----END CERTIFICATE-----Generated at Wed Apr 9 01:42:14 2025 by rpki-client