$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb187335-de09-3904-8938-0589ef8f5aea.roa File: fb187335-de09-3904-8938-0589ef8f5aea.roa (raw, json) Hash identifier: Btz9PbRt4cDdCyPuDSlWKtAHQRnTeCm/uqMcaY2/gpQ= Subject key identifier: A1:D1:64:02:FE:91:26:76:7D:14:12:EA:75:62:68:F0:97:5B:1C:49 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B7364F902D172108A6D6A2C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb187335-de09-3904-8938-0589ef8f5aea.roa Signing time: Thu 30 Jan 2025 11:09:15 +0000 ROA not before: Thu 30 Jan 2025 11:09:15 +0000 ROA not after: Wed 30 Apr 2025 10:09:15 +0000 asID: 30036 IP address blocks: 173.20.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:4f:90:2d:17:21:08:a6:d6:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:09:15 2025 GMT Not After : Apr 30 10:09:15 2025 GMT Subject: CN=9b78ed3d-f1af-4a26-bfc3-ba272992a0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:2d:30:0c:bc:9d:49:f6:8c:c2:a8:e2:72: be:41:2b:ea:45:72:4c:6f:d3:55:e1:b6:9f:29:02: 56:ea:c5:f6:41:91:25:9f:63:f2:a5:87:57:50:43: 13:cc:3f:9f:6d:ac:8e:28:41:8b:ab:0c:70:60:89: 2b:d5:d3:fd:48:c5:57:c8:00:fd:54:e4:49:db:33: 97:5f:c2:ad:cf:b8:e9:8d:30:ef:ba:6f:ab:0a:b0: d5:87:77:14:27:52:40:b8:83:4c:64:7d:5a:5d:cf: 97:5c:03:d2:41:61:73:a9:d1:a8:b8:d8:d4:ed:1a: 7f:3d:39:57:cf:a6:9a:01:88:43:83:f4:b3:9a:90: 6a:54:89:5b:dc:a5:a0:43:b6:38:56:e3:c7:d8:f7: 4a:29:69:7d:8d:9e:d9:40:a5:70:41:b4:ee:c0:f8: fe:6f:26:26:aa:d2:09:07:b9:6d:5f:32:c5:8a:13: a1:71:30:90:5d:cc:66:2c:3f:55:28:5d:52:ea:99: e8:a1:44:22:a7:b5:50:94:3f:46:13:8c:69:68:02: f8:93:ac:2b:4d:ff:4b:18:d9:81:48:bc:7d:d3:be: 2c:43:51:37:cc:37:0c:72:d6:d9:d6:81:32:8d:28: e4:57:b1:d2:d1:e3:74:b4:b4:4d:2c:11:0d:4f:a6: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D1:64:02:FE:91:26:76:7D:14:12:EA:75:62:68:F0:97:5B:1C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb187335-de09-3904-8938-0589ef8f5aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2a:78:5c:8b:37:e6:89:1f:72:05:bc:14:6a:39:92:9b:d2: 5c:e7:50:5f:3d:2f:ef:71:99:7c:cd:70:1f:cc:5a:7d:d6:28: 53:50:81:93:71:78:1c:61:db:69:d6:8e:9c:52:27:41:48:cb: 45:88:1e:b5:e4:05:71:59:f7:d7:ed:33:d2:aa:39:0a:c1:ff: 93:9a:7f:15:d9:40:d6:41:4b:6e:f9:4b:3c:e9:ef:37:6b:8e: bc:72:23:2a:1e:54:41:b7:12:cd:93:74:b1:0e:ee:f4:f9:0f: 03:20:b5:9c:03:74:3d:af:22:2a:51:be:2f:16:e9:78:19:d4: cf:57:ee:cc:b0:22:56:2a:48:5e:75:27:a9:fe:5f:1f:00:e2: 7a:1d:83:e3:c0:f3:d3:8b:07:5b:9a:b8:02:28:9d:22:b4:55: 10:6a:cc:9d:5c:47:14:33:2c:3a:8c:65:83:0b:21:f9:4e:b4: b0:01:78:16:1d:7a:c8:fd:ab:6d:0a:5c:b4:fb:e8:55:85:53: f0:16:77:7d:b2:02:4b:93:e7:a1:f4:13:21:97:c3:c7:57:dc: b3:37:df:a5:30:8c:aa:27:06:5f:15:5d:33:59:7d:18:31:3b: 4f:9c:25:89:7f:38:09:e5:59:fc:02:49:8d:54:93:4a:5c:7e: f4:cd:1d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nk+QLRchCKbWosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDkxNVoXDTI1MDQzMDEwMDkxNVowLzEtMCsGA1UEAxMk OWI3OGVkM2QtZjFhZi00YTI2LWJmYzMtYmEyNzI5OTJhMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH4tMAy8nUn2jMKo4nK+QSvqRXJMb9NV4baf KQJW6sX2QZEln2PypYdXUEMTzD+fbayOKEGLqwxwYIkr1dP9SMVXyAD9VORJ2zOX X8Ktz7jpjTDvum+rCrDVh3cUJ1JAuINMZH1aXc+XXAPSQWFzqdGouNjU7Rp/PTlX z6aaAYhDg/SzmpBqVIlb3KWgQ7Y4VuPH2PdKKWl9jZ7ZQKVwQbTuwPj+byYmqtIJ B7ltXzLFihOhcTCQXcxmLD9VKF1S6pnooUQip7VQlD9GE4xpaAL4k6wrTf9LGNmB SLx9074sQ1E3zDcMctbZ1oEyjSjkV7HS0eN0tLRNLBENT6ZehQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHRZAL+kSZ2fRQS6nViaPCXWxxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmIxODczMzUtZGUwOS0z OTA0LTg5MzgtMDU4OWVmOGY1YWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwqeFyLN+aJH3IFvBRqOZKb0lznUF89L+9xmXzNcB/MWn3WKFNQgZNx eBxh22nWjpxSJ0FIy0WIHrXkBXFZ99ftM9KqOQrB/5OafxXZQNZBS275Szzp7zdr jrxyIyoeVEG3Es2TdLEO7vT5DwMgtZwDdD2vIipRvi8W6XgZ1M9X7sywIlYqSF51 J6n+Xx8A4nodg+PA89OLB1uauAIonSK0VRBqzJ1cRxQzLDqMZYMLIflOtLABeBYd esj9q20KXLT76FWFU/AWd32yAkuT56H0EyGXw8dX3LM336UwjKonBl8VXTNZfRgx O0+cJYl/OAnlWfwCSY1Uk0pcfvTNHTE= -----END CERTIFICATE-----Generated at Wed Apr 9 17:17:23 2025 by rpki-client