$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df5a1b83-61cc-3d26-bfda-e721af22a13e.roa File: df5a1b83-61cc-3d26-bfda-e721af22a13e.roa (raw, json) Hash identifier: XTYT6/e6NYjadbJDZdhV1kTAxSsSXqwzOurv565SCh4= Subject key identifier: 96:79:00:D1:A9:F3:58:E9:E7:DA:1F:AC:81:ED:AF:83:A2:30:F3:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C533A31A117BA0B29B4F6480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df5a1b83-61cc-3d26-bfda-e721af22a13e.roa Signing time: Tue 04 Feb 2025 11:25:10 +0000 ROA not before: Tue 04 Feb 2025 11:25:10 +0000 ROA not after: Mon 05 May 2025 10:25:10 +0000 asID: 30036 IP address blocks: 173.22.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:33:a3:1a:11:7b:a0:b2:9b:4f:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:25:10 2025 GMT Not After : May 5 10:25:10 2025 GMT Subject: CN=44e3ae5c-50e2-45a2-836a-4069b8292103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:80:0a:ba:4f:f2:f2:32:8e:c9:56:52:c5: fd:6d:84:d0:8c:19:96:6e:72:f2:f1:bf:c3:51:c5: 95:74:7a:45:9a:ef:6a:76:54:60:e0:4d:15:24:46: c6:35:87:91:ce:b0:db:3c:ed:f5:c1:ae:f5:66:04: 42:fd:ae:af:99:87:18:1f:80:d4:37:74:2a:0f:53: bc:f1:6e:95:24:23:1d:99:59:f0:91:c7:63:c9:30: 95:e2:ea:41:e7:4a:38:f2:6d:3b:27:9e:fb:c7:0a: 2b:be:38:4e:ac:c8:c4:69:65:e7:55:03:23:7a:3d: 13:ce:06:c6:61:44:15:7f:b2:34:d5:cc:12:94:ab: e6:cd:59:6f:df:1c:fb:de:db:6b:68:e8:34:aa:cc: 13:d9:27:51:18:80:d2:48:61:b7:4a:87:92:c6:a5: 60:ab:72:25:cf:bc:58:5f:18:8c:1d:b1:91:1d:a3: 1a:22:b5:31:bd:b3:be:0e:cf:b3:8e:fb:ad:c1:cc: 69:53:97:8d:18:bd:46:74:23:85:6e:ea:21:ce:6c: 43:31:37:c6:ba:06:9c:88:9b:c5:da:b9:a3:86:34: 25:fa:ad:1d:53:d4:05:c0:fc:3a:4e:7e:ca:31:23: 9d:b1:14:24:51:5e:2d:e9:e8:0c:35:5b:69:a6:51: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:79:00:D1:A9:F3:58:E9:E7:DA:1F:AC:81:ED:AF:83:A2:30:F3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df5a1b83-61cc-3d26-bfda-e721af22a13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:88:fe:72:1a:8c:40:54:ee:ba:54:dc:cc:a9:ab:dc:f5:1b: 0d:34:e2:ce:99:82:f3:b7:70:aa:18:64:a0:d2:b0:2f:25:92: be:bf:38:87:80:63:47:39:bb:4b:84:91:ff:2b:50:ff:59:0c: ec:00:e7:65:12:5e:b8:43:ff:2d:32:15:61:bb:58:a6:56:e5: c2:b7:9a:d5:dc:1c:f1:5a:18:1a:2b:79:e2:ec:bb:ed:66:61: 9a:00:d6:af:ff:c7:84:ff:88:68:a1:0b:e8:99:96:7f:bc:fa: a0:bf:c6:ea:80:18:72:9b:08:07:0a:42:64:6b:c3:cf:13:2f: 08:09:d7:e0:86:6f:89:01:27:e0:35:a3:36:c3:42:de:5b:7a: b8:7b:b5:ee:d3:54:90:4f:67:c0:e3:32:ae:38:f0:4d:32:95: 83:ad:8d:b4:ba:17:cf:0e:6c:1f:50:71:3b:a4:5f:a0:78:7f: fe:b9:33:dc:ae:d5:6d:0f:96:f5:16:60:fe:96:07:5c:0d:c4: a2:e9:eb:2d:46:e9:3b:f4:a7:33:09:80:30:34:54:d9:3b:f6: bf:03:c7:85:44:98:c1:9e:54:7b:af:36:99:1a:e6:9e:74:c1: ac:40:70:52:4f:66:6d:6f:a9:8b:38:bd:e2:f4:a3:e0:a3:15: 26:44:52:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM6MaEXugsptPZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjUxMFoXDTI1MDUwNTEwMjUxMFowLzEtMCsGA1UEAxMk NDRlM2FlNWMtNTBlMi00NWEyLTgzNmEtNDA2OWI4MjkyMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWCACrpP8vIyjslWUsX9bYTQjBmWbnLy8b/D UcWVdHpFmu9qdlRg4E0VJEbGNYeRzrDbPO31wa71ZgRC/a6vmYcYH4DUN3QqD1O8 8W6VJCMdmVnwkcdjyTCV4upB50o48m07J577xworvjhOrMjEaWXnVQMjej0TzgbG YUQVf7I01cwSlKvmzVlv3xz73ttraOg0qswT2SdRGIDSSGG3SoeSxqVgq3Ilz7xY XxiMHbGRHaMaIrUxvbO+Ds+zjvutwcxpU5eNGL1GdCOFbuohzmxDMTfGugaciJvF 2rmjhjQl+q0dU9QFwPw6Tn7KMSOdsRQkUV4t6egMNVtpplFkowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ5ANGp81jp59ofrIHtr4OiMPMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGY1YTFiODMtNjFjYy0z ZDI2LWJmZGEtZTcyMWFmMjJhMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRbmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaI/nIajEBU7rpU3Mypq9z1Gw004s6ZgvO3cKoYZKDSsC8lkr6/OIeA Y0c5u0uEkf8rUP9ZDOwA52USXrhD/y0yFWG7WKZW5cK3mtXcHPFaGBoreeLsu+1m YZoA1q//x4T/iGihC+iZln+8+qC/xuqAGHKbCAcKQmRrw88TLwgJ1+CGb4kBJ+A1 ozbDQt5berh7te7TVJBPZ8DjMq448E0ylYOtjbS6F88ObB9QcTukX6B4f/65M9yu 1W0PlvUWYP6WB1wNxKLp6y1G6Tv0pzMJgDA0VNk79r8Dx4VEmMGeVHuvNpka5p50 waxAcFJPZm1vqYs4veL0o+CjFSZEUs0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:39 2025 by rpki-client