$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa File: d3423c42-0777-371a-82d7-800c36f0e32f.roa (raw, json) Hash identifier: HLq98dQ0Oo7a+3SEVUTu/iimzZeKbZtmJ5A7K7kw7kY= Subject key identifier: 71:A2:17:8E:A1:D3:15:5D:83:8E:86:66:E8:FA:40:53:88:C0:1C:A2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2630BC4CA4D05C3E8223210 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa Signing time: Mon 03 Feb 2025 11:13:16 +0000 ROA not before: Mon 03 Feb 2025 11:13:16 +0000 ROA not after: Sun 04 May 2025 10:13:16 +0000 asID: 30036 IP address blocks: 173.19.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:63:0b:c4:ca:4d:05:c3:e8:22:32:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:13:16 2025 GMT Not After : May 4 10:13:16 2025 GMT Subject: CN=434936c9-1b58-4a10-afdb-8abdb549c369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:0d:fb:bb:42:f3:80:60:45:70:fa:75:8c: cc:c2:29:6d:8b:24:ef:86:07:bc:e0:a2:41:b8:04: 95:c8:dc:7c:18:b8:05:80:14:5c:47:f2:74:e8:39: 0b:4d:0a:c7:6a:ed:fb:29:ae:08:8b:00:a7:08:44: 4a:24:70:17:28:bb:90:01:1d:dc:47:18:77:d7:49: fb:0e:80:dd:02:83:dc:8b:34:16:4c:e1:bb:7f:38: 62:60:fc:dc:98:45:77:85:3d:da:28:a7:e6:b0:46: 93:ba:56:98:97:3d:6b:71:1e:31:08:c1:d9:38:cc: 6c:93:89:f3:df:6e:e4:61:cb:66:75:de:58:c2:ea: 31:78:18:a9:8e:b3:40:ca:ae:ff:c4:23:eb:74:e9: 57:50:ae:e1:b9:cd:e0:a0:a8:a8:dc:6b:27:23:05: da:61:84:3a:a2:4e:1d:3c:6e:e7:c6:cd:b1:d3:97: 5f:7e:2c:50:98:dd:cb:64:d7:5d:8e:cb:b5:10:95: 15:1d:80:b3:93:b9:4f:20:d0:87:51:fa:2e:36:83: 3d:00:b4:53:6c:12:69:d6:79:dc:1d:4a:a4:44:f3: 00:50:7e:82:cb:cd:ab:6f:71:28:3d:22:31:ce:35: e6:b8:d0:73:c9:0f:ff:7f:bd:a0:3b:b5:c2:f9:c7: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A2:17:8E:A1:D3:15:5D:83:8E:86:66:E8:FA:40:53:88:C0:1C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ea:7a:7e:65:37:b3:7b:57:06:4d:05:68:53:59:7a:62:12: 09:d5:a8:59:00:3b:45:94:50:15:3c:22:e4:25:69:ad:93:ad: d8:67:16:4a:e7:5c:b2:11:bf:3d:74:3d:68:0e:da:2c:58:7e: 7a:dc:70:2a:17:cf:36:f8:3c:4c:b5:52:fe:10:82:e4:38:07: 53:98:15:9e:74:7f:69:41:9e:6d:a6:e0:b8:c4:d9:c8:d4:db: 9c:22:41:78:02:66:ad:d3:25:23:01:1a:3e:e1:19:09:db:65: c0:23:d7:f8:52:db:4b:a7:f7:ae:0b:58:04:d6:e3:ec:f0:6f: 2d:00:70:70:80:4c:e4:f5:06:0c:53:e5:fc:45:11:8b:79:d7: c0:e3:c9:fe:7a:fb:05:d8:3e:7c:ba:8e:7f:d8:db:91:2b:7c: ee:5c:d0:50:00:ba:43:34:b1:18:ad:33:69:32:f0:10:af:bb: 9e:ef:78:f2:75:59:a9:7c:a3:70:d5:d5:cd:45:8d:4a:ac:15: 86:12:32:77:72:85:ab:fc:f1:f4:8d:22:75:49:97:eb:06:c0: 90:b2:48:72:b4:98:06:58:89:30:ab:41:67:b7:e5:81:f7:32: 52:29:d7:9f:52:c5:2a:24:15:fc:c3:bd:85:de:06:8e:51:7f: 1d:62:f8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYwvEyk0Fw+giMhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTMxNloXDTI1MDUwNDEwMTMxNlowLzEtMCsGA1UEAxMk NDM0OTM2YzktMWI1OC00YTEwLWFmZGItOGFiZGI1NDljMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOAN+7tC84BgRXD6dYzMwiltiyTvhge84KJB uASVyNx8GLgFgBRcR/J06DkLTQrHau37Ka4IiwCnCERKJHAXKLuQAR3cRxh310n7 DoDdAoPcizQWTOG7fzhiYPzcmEV3hT3aKKfmsEaTulaYlz1rcR4xCMHZOMxsk4nz 327kYctmdd5YwuoxeBipjrNAyq7/xCPrdOlXUK7huc3goKio3GsnIwXaYYQ6ok4d PG7nxs2x05dffixQmN3LZNddjsu1EJUVHYCzk7lPINCHUfouNoM9ALRTbBJp1nnc HUqkRPMAUH6Cy82rb3EoPSIxzjXmuNBzyQ//f72gO7XC+ceOCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGiF46h0xVdg46GZuj6QFOIwByiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM0MjNjNDItMDc3Ny0z NzFhLTgyZDctODAwYzM2ZjBlMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTqen5lN7N7VwZNBWhTWXpiEgnVqFkAO0WUUBU8IuQlaa2TrdhnFkrn XLIRvz10PWgO2ixYfnrccCoXzzb4PEy1Uv4QguQ4B1OYFZ50f2lBnm2m4LjE2cjU 25wiQXgCZq3TJSMBGj7hGQnbZcAj1/hS20un964LWATW4+zwby0AcHCATOT1BgxT 5fxFEYt518Djyf56+wXYPny6jn/Y25ErfO5c0FAAukM0sRitM2ky8BCvu57vePJ1 Wal8o3DV1c1FjUqsFYYSMndyhav88fSNInVJl+sGwJCySHK0mAZYiTCrQWe35YH3 MlIp159SxSokFfzDvYXeBo5Rfx1i+Is= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:29 2025 by rpki-client