$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa File: d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa (raw, json) Hash identifier: Du+13BEvcLOOuvrnRFJxB0z9k3BnSU4XN434HIAiQsE= Subject key identifier: FE:62:6D:1E:D7:10:92:40:62:EC:C3:9D:3F:B1:65:0E:82:D2:F3:B6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C575EF675F44E448F152D880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa Signing time: Tue 04 Feb 2025 13:38:45 +0000 ROA not before: Tue 04 Feb 2025 13:38:45 +0000 ROA not after: Mon 05 May 2025 12:38:45 +0000 asID: 30036 IP address blocks: 173.19.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:75:ef:67:5f:44:e4:48:f1:52:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:38:45 2025 GMT Not After : May 5 12:38:45 2025 GMT Subject: CN=b10aa2c8-f956-47c5-9f92-96dad856ee73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:59:a9:81:24:06:b7:e6:b8:16:87:1e:6e: 77:57:89:f2:dd:6d:b8:b9:f7:6b:ce:dd:42:f3:a6: 86:66:81:21:7b:6c:f4:81:4c:b8:f3:b0:4b:80:c0: 0c:02:b9:85:a7:0a:2b:be:ca:3b:c2:51:f6:32:54: 2b:85:cc:4a:85:66:1e:0f:da:4a:91:db:8a:51:b6: 4f:35:a3:e7:b4:f4:33:b5:f8:e9:a7:68:ae:07:b0: de:78:ff:4d:e4:28:16:f7:f7:f5:1f:52:56:92:2d: a9:93:48:8f:0c:eb:9f:9d:fb:7d:d2:6a:56:af:96: 82:9c:51:57:01:ef:16:bc:0d:f0:c2:f1:a5:a2:14: 9a:43:65:0c:c5:53:4d:cb:ad:6c:3d:0b:2a:8f:39: 7e:97:1c:f9:56:2a:17:84:39:86:7e:bc:14:5d:db: 1c:d6:43:41:38:24:4b:69:c2:21:0f:63:20:e7:d7: 91:7b:e8:52:66:05:fd:5c:59:b3:58:8c:9e:30:67: 38:88:4e:01:21:21:26:21:41:81:f5:27:dd:13:13: d7:8c:f3:2d:ee:5e:57:e4:68:db:74:5e:a8:df:ea: 14:d8:83:26:c5:ed:59:0a:c8:43:78:fd:ef:f4:32: 4c:f6:2f:47:21:be:70:f9:a0:41:51:24:9b:1a:f8: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:62:6D:1E:D7:10:92:40:62:EC:C3:9D:3F:B1:65:0E:82:D2:F3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:14:54:62:0f:3a:46:1f:fb:5e:cb:6a:ad:6c:c0:db:46:00: 06:9b:c1:99:b4:72:87:2e:d7:9a:5a:ae:2f:38:21:38:d7:a5: bf:a3:f8:50:94:35:ef:6a:a2:3d:b2:0e:2b:92:ce:83:56:f4: 7b:3e:10:29:a4:5b:8d:6b:ab:17:3f:74:4e:ca:cf:31:eb:19: 01:be:d8:23:70:e8:3d:bb:fa:68:42:86:54:2c:95:c8:60:35: 02:c9:3b:83:25:3a:96:a8:e3:d4:14:43:fd:e6:e4:0c:a8:63: 2d:4e:6d:cc:e2:f1:54:b1:d5:00:e9:3b:d4:f9:08:63:d5:98: a1:4d:da:ec:05:d2:1e:f0:19:72:6b:fa:a3:0c:3d:c6:1f:23: b0:98:47:51:be:83:9b:e5:41:6f:24:44:87:44:2c:c2:ea:62: cc:a4:5c:45:94:bc:9e:e4:01:cf:32:53:ef:db:ae:36:2b:ff: d1:c3:c3:cd:88:fd:5f:81:5e:2d:e2:c2:6a:68:51:96:bf:ad: ea:5d:c4:da:59:ce:2f:50:4a:d0:28:31:c4:57:04:a2:44:78: 37:55:09:b3:ab:09:9f:09:2a:86:5f:23:20:76:5d:cd:e5:18: c9:54:90:b6:9d:ca:ea:c2:6e:10:dd:9f:90:ff:3f:f3:d7:c6: 47:94:48:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFde9nX0TkSPFS2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzMzg0NVoXDTI1MDUwNTEyMzg0NVowLzEtMCsGA1UEAxMk YjEwYWEyYzgtZjk1Ni00N2M1LTlmOTItOTZkYWQ4NTZlZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqRZqYEkBrfmuBaHHm53V4ny3W24ufdrzt1C 86aGZoEhe2z0gUy487BLgMAMArmFpworvso7wlH2MlQrhcxKhWYeD9pKkduKUbZP NaPntPQztfjpp2iuB7DeeP9N5CgW9/f1H1JWki2pk0iPDOufnft90mpWr5aCnFFX Ae8WvA3wwvGlohSaQ2UMxVNNy61sPQsqjzl+lxz5VioXhDmGfrwUXdsc1kNBOCRL acIhD2Mg59eRe+hSZgX9XFmzWIyeMGc4iE4BISEmIUGB9SfdExPXjPMt7l5X5Gjb dF6o3+oU2IMmxe1ZCshDeP3v9DJM9i9HIb5w+aBBUSSbGvgnrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5ibR7XEJJAYuzDnT+xZQ6C0vO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRmYTg4Y2UtYWE0Ni0z ZmNhLTk2NDktZmMxMmI3NWNhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0UVGIPOkYf+17Laq1swNtGAAabwZm0cocu15pari84ITjXpb+j+FCU Ne9qoj2yDiuSzoNW9Hs+ECmkW41rqxc/dE7KzzHrGQG+2CNw6D27+mhChlQslchg NQLJO4MlOpao49QUQ/3m5AyoYy1Obczi8VSx1QDpO9T5CGPVmKFN2uwF0h7wGXJr +qMMPcYfI7CYR1G+g5vlQW8kRIdELMLqYsykXEWUvJ7kAc8yU+/brjYr/9HDw82I /V+BXi3iwmpoUZa/repdxNpZzi9QStAoMcRXBKJEeDdVCbOrCZ8JKoZfIyB2Xc3l GMlUkLadyurCbhDdn5D/P/PXxkeUSNo= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:32 2025 by rpki-client