$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa File: db99f61d-31ec-37f3-b7ec-a859c703324e.roa (raw, json) Hash identifier: C7QOrbzcTeUCyvvEvN7Mb6RJmj1sIbKi/ZERxdprKhY= Subject key identifier: 20:7C:87:3F:17:74:34:7E:4D:46:BF:EB:18:B4:62:85:06:16:18:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57D09BF9A03320F8333FA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa Signing time: Tue 04 Feb 2025 13:53:04 +0000 ROA not before: Tue 04 Feb 2025 13:53:04 +0000 ROA not after: Mon 05 May 2025 12:53:04 +0000 asID: 30036 IP address blocks: 173.25.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:09:bf:9a:03:32:0f:83:33:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:53:04 2025 GMT Not After : May 5 12:53:04 2025 GMT Subject: CN=8d22dc6f-92bb-49e7-bace-0cf054619480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:25:2f:0b:c4:fb:37:fb:25:8c:04:bd:ea:b8: 11:3c:04:cc:d1:80:d6:86:9f:a9:35:09:df:03:20: af:0b:9a:d5:f8:39:66:c4:52:6b:0b:cc:30:49:8d: 36:d9:53:4d:ed:e1:2b:b2:59:c8:46:89:2d:41:46: a5:14:e7:53:bf:d2:cb:b5:b1:8f:3f:f7:f8:e7:4f: ec:ea:f9:01:d2:eb:61:6d:7f:c1:1f:72:db:53:5f: 5e:7c:29:c2:ec:b7:df:1b:8d:50:40:80:7a:11:24: 75:80:db:1f:dc:b4:ac:aa:ef:59:d8:12:5b:5a:5d: c8:d5:e2:da:2d:8e:9a:79:5f:40:ef:2e:53:84:39: 32:2e:5f:7e:41:23:d7:b2:1d:49:57:3a:15:80:81: 06:86:6d:ba:d0:eb:87:d3:11:2b:f2:4a:e1:80:19: 3e:b0:32:10:e8:aa:c4:04:f7:8b:85:47:6c:8c:30: 3e:10:a9:be:06:38:4d:ab:c1:29:07:3b:6f:1f:d4: 31:b4:f8:ef:17:56:7a:01:d2:d1:49:0e:85:ed:b0: eb:a3:5c:b2:1c:3c:70:a3:36:e9:6b:37:1b:c4:cc: d5:b3:e1:8e:4b:4b:d8:a2:55:ef:9c:99:80:84:e9: 52:62:33:a4:74:1b:5c:45:d2:15:08:65:89:6e:3d: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7C:87:3F:17:74:34:7E:4D:46:BF:EB:18:B4:62:85:06:16:18:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3d:22:ec:a0:c9:a7:7e:dc:c0:68:af:fa:27:5a:ab:37:2c: 01:1f:bd:23:00:6f:4c:3b:0a:cc:7b:99:ad:6a:c8:6b:74:6a: be:1d:bd:20:9c:2e:13:93:c5:be:e9:84:8c:9b:19:4e:5b:ae: 24:13:d0:83:56:0d:00:57:e5:d2:a8:0d:f0:b2:0f:10:f9:1b: 84:98:b8:db:78:6f:5e:e3:2e:57:dc:56:ec:a0:74:88:af:36: 20:ee:45:90:93:5b:72:f9:f4:d6:d5:d9:5d:ee:61:ad:eb:97: 46:c8:5e:6e:ec:c1:aa:b0:1e:b4:6a:d0:0e:55:af:97:01:07: 21:06:79:f5:fc:50:88:24:b6:02:b6:d8:e0:28:ca:4a:d8:10: b8:30:45:ad:78:f1:52:db:1a:db:f6:45:27:22:33:d1:1e:48: 75:48:76:9b:5e:1b:9a:bc:1e:6b:72:9d:16:ad:0b:ec:94:78: 74:52:3f:a0:91:b6:39:93:b5:f4:ba:3c:07:02:6f:5f:b0:0e: 0d:6e:dd:af:e9:8a:99:3e:84:59:cd:1d:07:c2:70:1a:ab:da: 40:67:0a:ea:4a:14:05:5f:1f:54:f1:51:6d:76:48:3d:a3:fe: 11:ff:c7:69:ba:68:f9:a4:3c:7b:6f:eb:99:77:18:a7:28:6e: 4a:5c:fd:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfQm/mgMyD4Mz+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTMwNFoXDTI1MDUwNTEyNTMwNFowLzEtMCsGA1UEAxMk OGQyMmRjNmYtOTJiYi00OWU3LWJhY2UtMGNmMDU0NjE5NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCUvC8T7N/sljAS96rgRPATM0YDWhp+pNQnf AyCvC5rV+DlmxFJrC8wwSY022VNN7eErslnIRoktQUalFOdTv9LLtbGPP/f450/s 6vkB0uthbX/BH3LbU19efCnC7LffG41QQIB6ESR1gNsf3LSsqu9Z2BJbWl3I1eLa LY6aeV9A7y5ThDkyLl9+QSPXsh1JVzoVgIEGhm260OuH0xEr8krhgBk+sDIQ6KrE BPeLhUdsjDA+EKm+BjhNq8EpBztvH9QxtPjvF1Z6AdLRSQ6F7bDro1yyHDxwozbp azcbxMzVs+GOS0vYolXvnJmAhOlSYjOkdBtcRdIVCGWJbj3MqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB8hz8XdDR+TUa/6xi0YoUGFhj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI5OWY2MWQtMzFlYy0z N2YzLWI3ZWMtYTg1OWM3MDMzMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF89Iuygyad+3MBor/onWqs3LAEfvSMAb0w7Csx7ma1qyGt0ar4dvSCc LhOTxb7phIybGU5briQT0INWDQBX5dKoDfCyDxD5G4SYuNt4b17jLlfcVuygdIiv NiDuRZCTW3L59NbV2V3uYa3rl0bIXm7swaqwHrRq0A5Vr5cBByEGefX8UIgktgK2 2OAoykrYELgwRa148VLbGtv2RSciM9EeSHVIdpteG5q8HmtynRatC+yUeHRSP6CR tjmTtfS6PAcCb1+wDg1u3a/pipk+hFnNHQfCcBqr2kBnCupKFAVfH1TxUW12SD2j /hH/x2m6aPmkPHtv65l3GKcobkpc/bA= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:27 2025 by rpki-client