$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1aa3445-5331-34e0-bcfe-8adca1cf59af.roa File: e1aa3445-5331-34e0-bcfe-8adca1cf59af.roa (raw, json) Hash identifier: tFn8LqGRmpehMUSVxT8Qi6CQz4AyRxC47KKDu++PxB8= Subject key identifier: 5B:B1:36:95:35:84:F1:E1:34:8C:95:E7:E0:B2:A8:99:8B:29:C6:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B7365D9E13AC5A499B3E4E20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1aa3445-5331-34e0-bcfe-8adca1cf59af.roa Signing time: Thu 30 Jan 2025 11:09:21 +0000 ROA not before: Thu 30 Jan 2025 11:09:21 +0000 ROA not after: Wed 30 Apr 2025 10:09:21 +0000 asID: 30036 IP address blocks: 173.23.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:5d:9e:13:ac:5a:49:9b:3e:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:09:21 2025 GMT Not After : Apr 30 10:09:21 2025 GMT Subject: CN=c7222556-79c3-4f55-9085-d53a814872f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:e8:d1:62:3f:75:bf:df:f1:64:c7:7b:9b: b5:ce:00:a3:cf:c8:7b:6c:6b:54:f3:17:49:36:9a: 22:23:91:8a:26:6b:bf:fc:83:2a:17:22:fb:2e:2c: 3b:41:54:3c:cf:4d:cb:43:b8:7d:f6:73:9f:ee:4b: e6:23:fa:f4:b2:68:d4:ed:37:06:d3:e7:39:4c:cd: f0:4c:eb:83:3c:31:70:75:d6:46:7d:92:9c:b3:b9: e3:1e:ce:8a:0b:e0:40:78:1b:58:1d:67:1c:8f:db: 4e:78:03:5d:e3:bb:30:dc:b3:b2:a8:bf:10:5a:b1: 78:48:da:6c:d3:25:0a:20:9d:10:b5:6c:bb:c9:bd: 00:db:36:ab:03:10:d7:a2:23:32:00:6e:03:b2:ae: 2e:90:8b:4a:39:65:0a:67:c0:39:da:8b:87:35:99: 9b:6a:ed:29:b7:07:19:0c:92:d0:02:45:14:d1:43: 20:99:8b:6d:80:8c:8d:ad:f3:7a:cd:a9:d3:9c:dd: ff:ae:59:b6:fa:d4:a7:84:fe:1e:b5:94:3c:1a:ef: 2e:da:d4:13:a7:12:91:ae:81:27:1f:cf:66:50:94: ae:f7:93:6d:9f:e1:e8:9f:72:af:93:f0:c9:00:9b: 00:3d:32:20:9c:10:e8:46:cf:58:72:4a:09:88:a5: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B1:36:95:35:84:F1:E1:34:8C:95:E7:E0:B2:A8:99:8B:29:C6:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1aa3445-5331-34e0-bcfe-8adca1cf59af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:70:7f:7f:d5:74:16:cd:c0:be:f6:2e:b2:3f:4f:e3:33:f8: 11:7d:10:27:83:10:19:49:4b:66:92:e2:91:f3:6b:38:e0:ff: 50:15:0e:37:6c:18:0a:d3:30:87:f2:11:79:b8:0a:76:fe:d5: 72:00:41:65:33:1b:9f:31:84:da:5f:ae:4b:5a:64:23:a1:c9: b7:4c:2b:cf:da:5d:68:e4:1e:f3:cf:46:03:a7:21:7e:ce:1a: 7c:d0:e3:8f:b6:bc:86:9d:db:61:60:e1:08:d9:8d:be:0d:4d: 0d:06:35:b5:de:b6:9e:d9:1a:5d:b9:88:57:ca:4e:43:86:20: 4b:f4:8c:8e:b3:ae:f0:0f:1a:a0:74:55:90:67:7b:8c:44:78: 67:8d:d4:42:06:d6:ee:fd:d9:1b:d1:5a:35:69:e2:a1:08:c5: 6d:c7:45:ed:3c:62:15:5e:1a:c8:f5:c1:04:5e:42:0b:c1:f7: 3a:05:da:fb:5d:5b:93:fb:fd:e9:d5:5b:94:81:0e:cc:70:59: 52:6d:38:e2:e4:39:80:97:4a:b7:38:06:d6:99:73:5a:c5:f9: 89:41:1e:e1:5a:cb:90:e9:de:23:59:a2:b2:70:1f:7c:c3:8d: 2d:20:48:7a:68:ef:f9:e9:4f:9a:98:81:5a:0d:7f:27:f0:44: 04:ec:d4:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nl2eE6xaSZs+TiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDkyMVoXDTI1MDQzMDEwMDkyMVowLzEtMCsGA1UEAxMk YzcyMjI1NTYtNzljMy00ZjU1LTkwODUtZDUzYTgxNDg3MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ/o0WI/db/f8WTHe5u1zgCjz8h7bGtU8xdJ NpoiI5GKJmu//IMqFyL7Liw7QVQ8z03LQ7h99nOf7kvmI/r0smjU7TcG0+c5TM3w TOuDPDFwddZGfZKcs7njHs6KC+BAeBtYHWccj9tOeANd47sw3LOyqL8QWrF4SNps 0yUKIJ0QtWy7yb0A2zarAxDXoiMyAG4Dsq4ukItKOWUKZ8A52ouHNZmbau0ptwcZ DJLQAkUU0UMgmYttgIyNrfN6zanTnN3/rlm2+tSnhP4etZQ8Gu8u2tQTpxKRroEn H89mUJSu95Ntn+Hon3Kvk/DJAJsAPTIgnBDoRs9YckoJiKXydQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuxNpU1hPHhNIyV5+CyqJmLKca0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTFhYTM0NDUtNTMzMS0z NGUwLWJjZmUtOGFkY2ExY2Y1OWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdwf3/VdBbNwL72LrI/T+Mz+BF9ECeDEBlJS2aS4pHzazjg/1AVDjds GArTMIfyEXm4Cnb+1XIAQWUzG58xhNpfrktaZCOhybdMK8/aXWjkHvPPRgOnIX7O GnzQ44+2vIad22Fg4QjZjb4NTQ0GNbXetp7ZGl25iFfKTkOGIEv0jI6zrvAPGqB0 VZBne4xEeGeN1EIG1u792RvRWjVp4qEIxW3HRe08YhVeGsj1wQReQgvB9zoF2vtd W5P7/enVW5SBDsxwWVJtOOLkOYCXSrc4BtaZc1rF+YlBHuFay5Dp3iNZorJwH3zD jS0gSHpo7/npT5qYgVoNfyfwRATs1Mc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:02 2025 by rpki-client