$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2c420fa-550b-341b-96ed-20f486bad2da.roa File: f2c420fa-550b-341b-96ed-20f486bad2da.roa (raw, json) Hash identifier: 8TvLA0s/oRMPVGoIh3P16YdOfbAPjt3wCtV/P5qksRc= Subject key identifier: D3:8A:59:9C:FB:5F:C7:C5:42:A3:4C:C4:E8:93:A9:72:12:F5:B9:DE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C261AA5FB5DBB42BFAC97070 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2c420fa-550b-341b-96ed-20f486bad2da.roa Signing time: Mon 03 Feb 2025 11:10:29 +0000 ROA not before: Mon 03 Feb 2025 11:10:29 +0000 ROA not after: Sun 04 May 2025 10:10:29 +0000 asID: 30036 IP address blocks: 173.18.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:61:aa:5f:b5:db:b4:2b:fa:c9:70:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:10:29 2025 GMT Not After : May 4 10:10:29 2025 GMT Subject: CN=42024d56-11b6-4296-87c5-2e7fdebf7265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:20:b9:24:65:4f:ff:d3:44:db:a6:ef:70:11: 61:a3:7e:11:92:61:63:34:82:69:86:36:fd:06:95: ff:16:eb:7d:09:f6:b9:63:90:01:be:ca:ec:82:da: 9a:4d:a3:5f:18:b5:f7:21:55:cd:fa:ab:dd:c4:7c: 65:d9:2d:43:58:9e:4f:59:10:56:1a:cf:6d:33:e3: e3:eb:8a:e3:68:f3:79:f6:72:8e:67:93:d3:1f:71: 24:f3:01:e6:55:7a:87:90:93:a2:1c:ff:ab:27:33: 1f:aa:0c:65:d9:ac:0f:df:7c:12:4d:da:15:d5:b2: 96:e0:ff:0f:7c:26:52:e2:0f:98:73:67:c0:6b:84: 37:73:ce:7f:b1:11:ba:ea:e5:bd:89:85:50:66:0a: f0:63:e9:a3:fc:eb:c1:c8:5e:55:ad:92:8b:06:3b: 8f:19:02:b7:89:ed:3d:61:ed:0e:37:37:e6:80:f9: 99:c2:c1:eb:fe:d4:88:c8:21:65:bc:97:10:91:c6: 48:69:fd:31:54:08:ee:2b:e0:b1:24:fa:ad:df:d0: 09:79:54:92:3d:c3:95:66:95:65:af:2e:76:8b:d4: c3:31:d4:c7:ed:96:9a:ca:cd:42:d8:77:72:79:c6: 27:d5:1c:5e:9b:49:9d:20:59:62:d6:a7:1e:e1:9d: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:59:9C:FB:5F:C7:C5:42:A3:4C:C4:E8:93:A9:72:12:F5:B9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2c420fa-550b-341b-96ed-20f486bad2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4f:5f:38:55:b2:8e:12:e9:56:66:a1:a3:67:c0:10:45:ef: e9:2d:03:12:57:96:fa:80:30:f1:ea:c2:e5:47:64:8e:74:af: a5:a0:45:a8:b5:60:c6:73:fd:60:9d:ee:43:8b:9f:cb:b6:97: f7:55:90:ce:f8:dc:ed:39:65:f0:b2:cd:0b:61:bf:46:df:8c: f6:a5:f5:3f:98:d5:b7:53:c1:88:b7:46:99:68:20:8c:60:3a: 50:07:ff:da:b5:72:0f:94:72:7d:9e:44:f3:6b:c5:f4:0e:53: 0b:4e:18:7e:ae:22:1b:c0:c2:6e:7d:62:29:12:11:e7:ee:52: 2f:79:fa:f3:cf:6b:0f:70:b1:58:12:a0:82:2b:b2:56:0d:51: 1b:13:2f:04:d2:35:ae:e9:60:22:e9:b5:b8:54:9f:c1:5a:90: ef:f3:5c:32:14:df:67:9c:dd:5d:dc:fe:c7:e1:45:3b:e8:21: e7:26:a9:f8:fc:ef:29:10:e2:84:e9:d8:02:f0:e6:f1:29:3a: 7f:2f:bb:c2:5d:3e:37:c3:c8:5b:ba:09:4b:9a:d3:67:81:b3: cc:a2:b4:24:f0:6a:e6:db:67:b9:a1:8d:92:d7:88:85:2f:73: 67:d3:45:06:5e:f3:21:0b:a9:93:5b:f5:7e:66:05:0c:b1:0c: bb:37:39:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYapftdu0K/rJcHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTAyOVoXDTI1MDUwNDEwMTAyOVowLzEtMCsGA1UEAxMk NDIwMjRkNTYtMTFiNi00Mjk2LTg3YzUtMmU3ZmRlYmY3MjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yC5JGVP/9NE26bvcBFho34RkmFjNIJphjb9 BpX/Fut9Cfa5Y5ABvsrsgtqaTaNfGLX3IVXN+qvdxHxl2S1DWJ5PWRBWGs9tM+Pj 64rjaPN59nKOZ5PTH3Ek8wHmVXqHkJOiHP+rJzMfqgxl2awP33wSTdoV1bKW4P8P fCZS4g+Yc2fAa4Q3c85/sRG66uW9iYVQZgrwY+mj/OvByF5VrZKLBjuPGQK3ie09 Ye0ONzfmgPmZwsHr/tSIyCFlvJcQkcZIaf0xVAjuK+CxJPqt39AJeVSSPcOVZpVl ry52i9TDMdTH7Zaays1C2HdyecYn1Rxem0mdIFli1qce4Z1FMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOKWZz7X8fFQqNMxOiTqXIS9bneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjJjNDIwZmEtNTUwYi0z NDFiLTk2ZWQtMjBmNDg2YmFkMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZPXzhVso4S6VZmoaNnwBBF7+ktAxJXlvqAMPHqwuVHZI50r6WgRai1 YMZz/WCd7kOLn8u2l/dVkM743O05ZfCyzQthv0bfjPal9T+Y1bdTwYi3RploIIxg OlAH/9q1cg+Ucn2eRPNrxfQOUwtOGH6uIhvAwm59YikSEefuUi95+vPPaw9wsVgS oIIrslYNURsTLwTSNa7pYCLptbhUn8FakO/zXDIU32ec3V3c/sfhRTvoIecmqfj8 7ykQ4oTp2ALw5vEpOn8vu8JdPjfDyFu6CUua02eBs8yitCTwaubbZ7mhjZLXiIUv c2fTRQZe8yELqZNb9X5mBQyxDLs3OfQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:12 2025 by rpki-client