$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c30206eb-d325-3a86-b6f2-8c96a7873678.roa File: c30206eb-d325-3a86-b6f2-8c96a7873678.roa (raw, json) Hash identifier: v17/E6yhOvteLatW2Yf1M+EzKOZ7Y5dJdUB0gkBwNu4= Subject key identifier: 11:12:C9:AA:76:23:4D:1E:4F:A3:2E:37:C9:F9:F1:AC:65:3E:D2:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C26396C9BE7E9D3FD7281940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c30206eb-d325-3a86-b6f2-8c96a7873678.roa Signing time: Mon 03 Feb 2025 11:14:22 +0000 ROA not before: Mon 03 Feb 2025 11:14:22 +0000 ROA not after: Sun 04 May 2025 10:14:22 +0000 asID: 30036 IP address blocks: 173.25.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:63:96:c9:be:7e:9d:3f:d7:28:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:14:22 2025 GMT Not After : May 4 10:14:22 2025 GMT Subject: CN=60362635-c076-4e81-b3c8-54892d459bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2d:b9:54:35:fb:2e:33:14:9c:71:7f:47:93: df:8f:c5:a8:0c:b3:3b:ac:25:86:ea:c5:ba:50:12: 70:50:bb:7f:7a:19:5d:f8:37:4b:0a:f7:37:2b:7f: 66:40:51:12:9a:aa:f3:cf:77:51:b1:63:98:a8:5f: 70:81:44:20:1c:ed:48:7c:ef:c5:f1:c1:50:c1:7a: 24:14:21:65:df:e3:5b:2d:a5:cd:d0:35:86:28:94: 14:66:40:50:4a:47:79:6e:fd:7c:54:05:94:4e:7f: 73:3e:94:78:d4:65:e4:18:7a:21:77:4c:2c:e3:7b: 05:c2:c0:80:9b:ae:73:e9:2d:4d:8a:5c:10:04:42: ef:e5:c0:a2:28:e8:07:5a:94:fd:74:95:0a:18:4b: 0c:d5:74:7a:2f:07:f5:e2:64:7c:8c:8e:a1:c7:30: f4:f5:49:22:b6:88:57:f9:f1:72:28:93:ed:e7:d1: e7:3f:8e:20:1f:14:59:f5:3e:4a:1a:9a:39:82:4a: be:db:75:a9:74:7a:0c:c9:11:ae:23:f6:44:29:5c: 98:87:28:fb:24:22:05:f9:38:34:8a:b5:76:cf:ef: 2c:9e:9b:60:e9:b6:d2:7e:ff:f6:28:e7:04:89:e7: 94:28:84:b4:5a:95:de:93:86:f0:ca:65:d6:67:78: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:C9:AA:76:23:4D:1E:4F:A3:2E:37:C9:F9:F1:AC:65:3E:D2:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c30206eb-d325-3a86-b6f2-8c96a7873678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:eb:2b:26:e5:39:83:52:a5:20:97:16:c9:7d:26:21:89:df: 7f:25:36:f2:02:13:22:ab:67:17:ea:22:32:82:83:c2:8d:8e: 26:31:bd:73:ca:10:be:30:7e:cc:16:45:d3:07:78:5a:45:3a: f1:8d:f6:28:c7:46:5e:b0:bd:77:8c:a3:91:40:26:00:0e:c0: ce:96:c0:f0:36:bd:51:42:75:99:f2:f1:0c:aa:23:c3:c7:ce: 76:e9:a5:8b:e0:fb:16:50:0c:93:e9:97:09:d6:19:6d:97:7c: d2:5e:24:ee:bd:5d:d1:20:1d:29:33:77:98:78:0f:80:75:ec: 36:da:b4:a5:96:ce:aa:63:01:0f:7d:40:c4:bf:38:84:87:53: 7a:ad:21:3b:6c:ad:1c:13:fb:a9:6e:32:a8:b2:cd:b9:3c:75: ae:33:63:6a:48:ff:8d:ac:6c:92:e5:5f:af:f8:10:a4:39:e7: 4e:fc:15:6c:c4:30:74:17:1b:9b:04:72:6d:90:00:6a:5f:8c: 89:ed:ff:35:52:4b:07:52:46:65:5d:88:5c:b9:90:d2:50:00: 09:f5:ed:e4:bb:cb:6e:78:05:8d:30:45:bf:09:e9:a8:28:f0: 3e:80:33:d8:a6:a4:f9:3d:d9:55:27:c4:ae:94:2a:98:bb:7c: 70:a3:f6:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCY5bJvn6dP9coGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTQyMloXDTI1MDUwNDEwMTQyMlowLzEtMCsGA1UEAxMk NjAzNjI2MzUtYzA3Ni00ZTgxLWIzYzgtNTQ4OTJkNDU5YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy25VDX7LjMUnHF/R5Pfj8WoDLM7rCWG6sW6 UBJwULt/ehld+DdLCvc3K39mQFESmqrzz3dRsWOYqF9wgUQgHO1IfO/F8cFQwXok FCFl3+NbLaXN0DWGKJQUZkBQSkd5bv18VAWUTn9zPpR41GXkGHohd0ws43sFwsCA m65z6S1NilwQBELv5cCiKOgHWpT9dJUKGEsM1XR6Lwf14mR8jI6hxzD09UkitohX +fFyKJPt59HnP44gHxRZ9T5KGpo5gkq+23WpdHoMyRGuI/ZEKVyYhyj7JCIF+Tg0 irV2z+8snptg6bbSfv/2KOcEieeUKIS0WpXek4bwymXWZ3jMOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBESyap2I00eT6MuN8n58axlPtJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMwMjA2ZWItZDMyNS0z YTg2LWI2ZjItOGM5NmE3ODczNjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbrKyblOYNSpSCXFsl9JiGJ338lNvICEyKrZxfqIjKCg8KNjiYxvXPK EL4wfswWRdMHeFpFOvGN9ijHRl6wvXeMo5FAJgAOwM6WwPA2vVFCdZny8QyqI8PH znbppYvg+xZQDJPplwnWGW2XfNJeJO69XdEgHSkzd5h4D4B17DbatKWWzqpjAQ99 QMS/OISHU3qtITtsrRwT+6luMqiyzbk8da4zY2pI/42sbJLlX6/4EKQ55078FWzE MHQXG5sEcm2QAGpfjInt/zVSSwdSRmVdiFy5kNJQAAn17eS7y254BY0wRb8J6ago 8D6AM9impPk92VUnxK6UKpi7fHCj9oY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:58 2025 by rpki-client