$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dede6975-c3e1-39f9-b79f-96975a8ffd03.roa File: dede6975-c3e1-39f9-b79f-96975a8ffd03.roa (raw, json) Hash identifier: JF1hUbpxfyKqAvA7fYBDP7vhtrZJq7HfWyrtUGGBcMU= Subject key identifier: 20:54:63:E4:6D:05:08:AF:1E:20:D6:52:23:A6:B4:38:EF:49:EC:13 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FDD17AE3201D89903AF700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dede6975-c3e1-39f9-b79f-96975a8ffd03.roa Signing time: Wed 05 Feb 2025 11:24:10 +0000 ROA not before: Wed 05 Feb 2025 11:24:10 +0000 ROA not after: Tue 06 May 2025 10:24:10 +0000 asID: 30036 IP address blocks: 173.25.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:d1:7a:e3:20:1d:89:90:3a:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:24:10 2025 GMT Not After : May 6 10:24:10 2025 GMT Subject: CN=042841da-88a7-4ac0-aeec-a5010d69da40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0e:4c:99:e2:e6:20:64:05:27:8c:33:ae:5c: 8e:7e:73:a0:59:39:25:51:a3:39:24:5b:76:77:da: 5c:e7:7b:75:8c:1f:72:eb:68:a0:11:9d:07:81:32: 55:35:1a:17:0c:e3:70:30:02:57:46:83:2c:df:7e: 6b:df:0a:fd:bb:b1:0b:a8:18:00:ae:4e:1c:75:d6: 14:27:97:d8:7d:b8:0e:fb:13:53:a1:17:a0:74:62: 99:a2:73:ee:bf:96:0e:dc:fe:22:4c:03:2f:91:29: f5:39:94:37:ab:16:87:04:66:2f:d0:32:9b:46:f9: 7b:44:6a:a8:0c:ed:05:cf:39:f6:30:97:a9:16:4c: e9:da:d1:67:25:a5:0c:81:ef:d7:5e:7b:e1:03:8b: a7:cd:cd:79:d3:e1:ab:66:c5:9e:08:aa:45:fa:6a: 1f:67:ce:3e:e0:f3:b5:34:1b:88:35:d2:b1:85:9a: 32:99:b8:7c:a4:70:b6:4d:d8:bf:da:13:c6:59:04: 72:7b:50:8c:1f:5e:03:77:32:24:e9:10:d0:39:2b: ca:4f:ab:48:3a:7f:99:17:d0:f8:37:a4:ae:af:f1: 47:36:8f:83:5b:ba:bd:c7:cf:43:47:55:6f:f8:6a: 2d:17:8b:0a:25:59:b5:d1:1a:ec:2f:23:e9:3c:9d: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:54:63:E4:6D:05:08:AF:1E:20:D6:52:23:A6:B4:38:EF:49:EC:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dede6975-c3e1-39f9-b79f-96975a8ffd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:4f:77:ab:62:3f:f6:51:ef:e5:dd:97:aa:d2:de:22:51:10: 0d:ee:e6:99:99:ba:3a:3f:8c:50:a4:00:ec:58:b8:48:73:e1: f2:6d:95:d9:82:4f:74:08:3c:ad:b5:f1:a4:8c:b3:fb:14:7f: d7:70:12:21:b1:6b:09:f9:3c:8d:07:d8:0d:ef:a8:40:0c:dd: ee:bc:f6:f8:3a:7d:20:79:c8:b0:66:00:41:44:b8:4b:56:6b: 64:f5:af:7f:45:f0:b2:e6:6a:d5:86:aa:68:a1:2d:6c:7b:99: bb:7e:6c:49:61:dd:cd:39:94:2a:cf:a0:d7:2e:71:4e:ce:40: 42:36:06:3d:4a:c2:d1:dc:c6:d8:b4:35:e7:51:28:c2:65:3c: 31:12:cb:27:40:f9:f3:43:cf:70:fe:7b:94:4b:23:e4:8a:c7: 74:1d:2f:b7:e9:e7:b7:04:ef:c7:33:75:7c:d6:99:a0:22:a6: c3:cc:1c:a9:a3:b1:24:1f:57:83:c7:a9:a9:df:d4:4f:80:38: 46:23:21:23:3d:70:ef:79:cc:74:a8:47:f6:89:43:c1:b6:76: 93:97:d9:68:b7:2b:59:10:b1:3c:85:b4:37:6d:2b:fe:a8:b4: 1c:76:06:44:c4:87:96:83:9b:7c:f5:25:be:b0:e2:03:60:15: 7f:19:0b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/dF64yAdiZA69wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjQxMFoXDTI1MDUwNjEwMjQxMFowLzEtMCsGA1UEAxMk MDQyODQxZGEtODhhNy00YWMwLWFlZWMtYTUwMTBkNjlkYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA5MmeLmIGQFJ4wzrlyOfnOgWTklUaM5JFt2 d9pc53t1jB9y62igEZ0HgTJVNRoXDONwMAJXRoMs335r3wr9u7ELqBgArk4cddYU J5fYfbgO+xNToRegdGKZonPuv5YO3P4iTAMvkSn1OZQ3qxaHBGYv0DKbRvl7RGqo DO0Fzzn2MJepFkzp2tFnJaUMge/XXnvhA4unzc150+GrZsWeCKpF+mofZ84+4PO1 NBuINdKxhZoymbh8pHC2Tdi/2hPGWQRye1CMH14DdzIk6RDQOSvKT6tIOn+ZF9D4 N6Sur/FHNo+DW7q9x89DR1Vv+GotF4sKJVm10RrsLyPpPJ0GRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBUY+RtBQivHiDWUiOmtDjvSewTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGVkZTY5NzUtYzNlMS0z OWY5LWI3OWYtOTY5NzVhOGZmZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRlJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVPd6tiP/ZR7+Xdl6rS3iJREA3u5pmZujo/jFCkAOxYuEhz4fJtldmC T3QIPK218aSMs/sUf9dwEiGxawn5PI0H2A3vqEAM3e689vg6fSB5yLBmAEFEuEtW a2T1r39F8LLmatWGqmihLWx7mbt+bElh3c05lCrPoNcucU7OQEI2Bj1KwtHcxti0 NedRKMJlPDESyydA+fNDz3D+e5RLI+SKx3QdL7fp57cE78czdXzWmaAipsPMHKmj sSQfV4PHqanf1E+AOEYjISM9cO95zHSoR/aJQ8G2dpOX2Wi3K1kQsTyFtDdtK/6o tBx2BkTEh5aDm3z1Jb6w4gNgFX8ZC8o= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:14 2025 by rpki-client