$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa File: b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa (raw, json) Hash identifier: rlWsfiEG89Jzc+5w/g+vRhzoDKloR8jh32PD8NgoYTI= Subject key identifier: 33:12:29:F5:B9:4E:13:22:C5:6D:3A:1F:73:34:43:81:3B:FE:FD:90 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FD427CF62D7137D23C9240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa Signing time: Wed 05 Feb 2025 11:23:02 +0000 ROA not before: Wed 05 Feb 2025 11:23:02 +0000 ROA not after: Tue 06 May 2025 10:23:02 +0000 asID: 30036 IP address blocks: 173.23.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:42:7c:f6:2d:71:37:d2:3c:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:23:02 2025 GMT Not After : May 6 10:23:02 2025 GMT Subject: CN=dd607fee-35c4-44d2-a72a-9dbc27950e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:56:cc:50:2d:b0:d2:a4:9d:66:eb:d2:15:8b: 47:6c:f4:62:4f:37:de:2d:ce:75:50:2c:95:f7:a1: c4:07:1c:ff:61:7e:dc:39:73:bd:f2:6c:ca:03:16: c3:a1:e3:4b:34:84:1d:a3:a6:66:7c:2e:ab:28:42: c6:0e:ae:07:66:1a:d0:cd:f7:ec:45:37:9b:cc:d2: 5e:5b:32:e1:03:9c:e8:2b:75:4c:74:c7:ab:77:ee: 4e:5a:53:71:b4:39:95:36:e9:b9:a8:3b:68:cb:4c: 8b:b1:5f:51:52:e0:be:91:49:89:60:d3:7f:23:d4: d4:85:95:f7:20:cf:b5:0e:65:19:52:62:ff:24:f9: b6:87:22:c8:10:ca:06:05:7f:1c:ce:a3:46:ff:4d: f7:82:a2:7a:ab:4e:02:cb:46:fe:25:ff:75:72:d3: 56:ae:c3:a1:09:eb:f0:5a:8c:7e:d0:41:df:6a:82: b8:9c:93:5f:17:56:c2:56:97:12:5f:20:1f:20:a4: ee:a9:4c:16:f1:28:06:97:33:57:0a:53:4f:9a:6e: e4:02:d7:9a:97:99:fb:3e:fb:a1:84:94:e1:67:1e: 30:c5:73:a7:84:d3:56:44:0a:95:11:2c:92:d4:46: 59:70:6c:fd:0f:8a:51:2f:98:83:56:37:ce:37:39: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:12:29:F5:B9:4E:13:22:C5:6D:3A:1F:73:34:43:81:3B:FE:FD:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:09:af:ee:51:b8:19:4b:a5:e5:d4:ba:a5:b7:32:7d:70:a1: 9a:00:d0:e9:18:07:aa:72:7f:6f:0b:63:67:93:5c:16:03:d3: 0e:45:ee:b2:b0:7c:b6:f7:ce:13:a0:12:f4:ed:88:f6:65:1b: 93:96:f9:31:d7:74:2c:7a:78:74:06:20:28:93:e1:a8:96:5b: 0a:94:ac:12:ec:9e:0c:84:e5:dd:da:5a:09:8f:6d:aa:bf:43: 3d:11:28:f4:31:d5:5a:23:de:9f:13:01:46:e1:60:d0:3a:11: 64:49:dd:9b:cd:3a:26:4a:95:2f:39:59:7c:f6:fd:f0:0c:23: 19:89:c4:3a:6b:4c:d3:20:19:76:84:40:74:bd:89:e6:2b:0d: 58:df:a3:e6:7a:af:5f:d9:9a:7d:0f:fe:dd:c0:86:ec:5d:ae: 2a:08:ab:9a:7d:73:0c:fb:9c:3d:c3:2f:d8:45:bb:d9:a0:db: 54:dc:b7:ab:b2:45:d6:3e:ac:71:27:a5:da:08:af:60:51:90: 53:1b:7e:f4:13:a6:58:50:cd:0d:44:d7:71:93:05:4b:49:2a: 3d:b9:21:d3:e1:d1:25:56:ff:f4:15:80:b6:a9:e3:4a:9e:02: a9:53:82:44:91:d2:77:e0:a7:b1:57:06:46:f1:c6:c3:bd:06: 1f:60:57:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/UJ89i1xN9I8kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjMwMloXDTI1MDUwNjEwMjMwMlowLzEtMCsGA1UEAxMk ZGQ2MDdmZWUtMzVjNC00NGQyLWE3MmEtOWRiYzI3OTUwZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglbMUC2w0qSdZuvSFYtHbPRiTzfeLc51UCyV 96HEBxz/YX7cOXO98mzKAxbDoeNLNIQdo6ZmfC6rKELGDq4HZhrQzffsRTebzNJe WzLhA5zoK3VMdMerd+5OWlNxtDmVNum5qDtoy0yLsV9RUuC+kUmJYNN/I9TUhZX3 IM+1DmUZUmL/JPm2hyLIEMoGBX8czqNG/033gqJ6q04Cy0b+Jf91ctNWrsOhCevw Wox+0EHfaoK4nJNfF1bCVpcSXyAfIKTuqUwW8SgGlzNXClNPmm7kAteal5n7Pvuh hJThZx4wxXOnhNNWRAqVESyS1EZZcGz9D4pRL5iDVjfONzkpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMSKfW5ThMixW06H3M0Q4E7/v2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjIzZWNkY2MtNjAzOC0z N2E1LWJmMWYtMmIwYjgyMjg4ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUJr+5RuBlLpeXUuqW3Mn1woZoA0OkYB6pyf28LY2eTXBYD0w5F7rKw fLb3zhOgEvTtiPZlG5OW+THXdCx6eHQGICiT4aiWWwqUrBLsngyE5d3aWgmPbaq/ Qz0RKPQx1Voj3p8TAUbhYNA6EWRJ3ZvNOiZKlS85WXz2/fAMIxmJxDprTNMgGXaE QHS9ieYrDVjfo+Z6r1/Zmn0P/t3AhuxdrioIq5p9cwz7nD3DL9hFu9mg21Tct6uy RdY+rHEnpdoIr2BRkFMbfvQTplhQzQ1E13GTBUtJKj25IdPh0SVW//QVgLap40qe AqlTgkSR0nfgp7FXBkbxxsO9Bh9gV1I= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:12 2025 by rpki-client