$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa File: f16e379d-eaa4-319f-9f86-6635763863e7.roa (raw, json) Hash identifier: lMcUyNzq5NJeuiuvM7sqxY3KgVNR7EoR1hbPA2yw+a4= Subject key identifier: C3:CC:18:F7:F8:9D:36:21:89:C1:6E:9D:CE:8E:81:82:A2:7A:2E:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C557DF8E8112C5A96CEFEDA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa Signing time: Tue 04 Feb 2025 12:38:11 +0000 ROA not before: Tue 04 Feb 2025 12:38:11 +0000 ROA not after: Mon 05 May 2025 11:38:11 +0000 asID: 30036 IP address blocks: 173.17.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:57:df:8e:81:12:c5:a9:6c:ef:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:38:11 2025 GMT Not After : May 5 11:38:11 2025 GMT Subject: CN=4ba24443-0cc9-4643-bcae-387a48d962c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:bc:cc:fc:1b:5c:ca:86:3a:76:2a:99:00: a9:96:d1:a0:28:40:02:98:32:86:c4:d4:5d:65:42: 2f:37:f1:fc:a8:d2:a6:83:37:d8:f8:15:18:ad:40: d7:c0:95:c8:7b:f2:8e:36:aa:de:7d:bb:e9:dc:6c: 66:41:92:b0:b7:7c:32:7a:cd:d9:61:0c:08:97:db: ea:f9:eb:df:5f:a4:4e:37:d2:df:76:dc:12:32:8f: 25:b7:5b:54:1b:59:17:3d:01:65:10:20:e4:57:61: 2f:c7:10:b6:15:51:3d:fb:6f:f0:0f:a5:b1:96:6b: c5:5a:b4:bd:97:26:df:5a:be:10:9e:a0:b3:0f:3a: cc:c1:84:83:47:b4:0e:0e:7d:28:99:bf:c2:b6:57: 3e:ba:6d:52:5c:51:b2:f2:53:48:8c:de:94:9b:91: 4e:40:1a:d2:bd:4e:bd:77:26:ef:c0:0b:51:d7:ac: 5a:14:4a:a1:3b:92:40:de:10:24:39:3f:da:f3:64: 4d:4a:95:84:f2:3d:d1:7f:d0:2a:41:2e:1f:72:26: f7:0c:96:db:60:1f:44:e6:2a:0a:6c:17:76:f5:27: 34:b9:f1:17:a1:f5:ec:d7:08:97:dd:07:2b:9e:d1: 92:0e:b3:0a:98:08:aa:02:66:dd:62:5b:f2:3b:0f: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:18:F7:F8:9D:36:21:89:C1:6E:9D:CE:8E:81:82:A2:7A:2E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:95:45:47:e4:b6:03:0f:e5:72:59:ee:26:4d:ce:b3:7c:31: 4c:04:69:cd:0e:ac:78:40:77:78:96:90:89:c7:5b:47:c8:1f: 44:01:d2:e5:7a:fb:26:00:bf:f6:62:61:79:43:73:f7:d8:30: f4:73:75:e7:71:b2:05:c6:a2:5a:ae:0f:d5:39:b1:3d:9e:1e: 34:f4:60:52:fb:e6:57:32:31:60:ba:9f:8d:2d:3c:3b:76:0d: c3:db:47:84:37:f7:cb:7b:24:9f:4a:34:12:dd:b8:ca:69:c6: 1a:45:3d:22:1d:93:42:30:b7:f0:ec:32:24:3e:84:d9:fd:28: d2:26:79:79:a9:e4:04:a4:c1:94:f1:0e:67:40:b0:7a:69:fc: 31:f6:5f:e1:42:86:3a:06:6f:13:d4:50:31:e7:11:79:de:b0: 49:41:50:3d:ba:61:f5:3d:7f:c8:43:55:73:3b:3d:9f:db:f5: ee:ab:bb:9c:f7:9c:b2:0e:58:21:82:75:55:d5:ac:80:28:4b: 46:5c:e9:4b:6f:e0:2e:15:27:13:b5:bb:e8:25:4c:95:d2:a5: f4:af:c9:ac:43:c8:c9:bd:79:2e:20:b0:8d:18:c7:b6:74:4e: 50:80:dd:97:ca:2f:b1:23:b9:21:de:8a:82:08:b4:50:86:9e: d1:85:7e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFV9+OgRLFqWzv7aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzgxMVoXDTI1MDUwNTExMzgxMVowLzEtMCsGA1UEAxMk NGJhMjQ0NDMtMGNjOS00NjQzLWJjYWUtMzg3YTQ4ZDk2MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhy8zPwbXMqGOnYqmQCpltGgKEACmDKGxNRd ZUIvN/H8qNKmgzfY+BUYrUDXwJXIe/KONqrefbvp3GxmQZKwt3wyes3ZYQwIl9vq +evfX6RON9LfdtwSMo8lt1tUG1kXPQFlECDkV2EvxxC2FVE9+2/wD6WxlmvFWrS9 lybfWr4QnqCzDzrMwYSDR7QODn0omb/Ctlc+um1SXFGy8lNIjN6Um5FOQBrSvU69 dybvwAtR16xaFEqhO5JA3hAkOT/a82RNSpWE8j3Rf9AqQS4fcib3DJbbYB9E5ioK bBd29Sc0ufEXofXs1wiX3QcrntGSDrMKmAiqAmbdYlvyOw9qPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPMGPf4nTYhicFunc6OgYKiei43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjE2ZTM3OWQtZWFhNC0z MTlmLTlmODYtNjYzNTc2Mzg2M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCVRUfktgMP5XJZ7iZNzrN8MUwEac0OrHhAd3iWkInHW0fIH0QB0uV6 +yYAv/ZiYXlDc/fYMPRzdedxsgXGolquD9U5sT2eHjT0YFL75lcyMWC6n40tPDt2 DcPbR4Q398t7JJ9KNBLduMppxhpFPSIdk0Iwt/DsMiQ+hNn9KNImeXmp5ASkwZTx DmdAsHpp/DH2X+FChjoGbxPUUDHnEXnesElBUD26YfU9f8hDVXM7PZ/b9e6ru5z3 nLIOWCGCdVXVrIAoS0Zc6Utv4C4VJxO1u+glTJXSpfSvyaxDyMm9eS4gsI0Yx7Z0 TlCA3ZfKL7EjuSHeioIItFCGntGFfls= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:35 2025 by rpki-client