$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa File: 3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa (raw, json) Hash identifier: CEC0WUxhIWgEldXQbnFmpLUdcu8CPrL39N7VqZ+0wSA= Subject key identifier: 16:BE:D9:A8:E2:AF:13:4C:6A:9D:AA:FA:DA:92:F5:10:02:29:6C:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A8D9413572ADF9B7C780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a8:d9:41:35:72:ad:f9:b7:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=02412f8a-43cc-4862-b7b4-b9af9a04387b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bd:55:4b:45:80:9b:47:56:15:77:7d:df:fd: f4:6c:c7:98:ec:2b:cc:81:89:70:ef:b5:21:73:8a: 5d:9e:8d:90:be:e7:a1:4a:23:5d:53:dc:90:8d:61: d7:c7:90:5b:05:27:9e:65:b9:12:56:40:b3:2a:b5: f8:82:82:6a:de:1d:fb:1e:7e:6b:b9:dd:80:47:b1: 31:35:85:00:41:39:43:2a:6e:4c:28:23:54:0a:cc: 9d:54:b4:03:07:40:3e:e1:19:ad:86:60:23:9f:f7: 34:ae:81:01:62:44:40:6b:bc:c4:b7:27:8b:48:f0: 4c:d5:b7:a1:2c:b8:c6:87:90:e4:a0:90:c5:69:18: 3a:78:01:7d:0d:d8:9f:f7:eb:6f:26:f7:ad:7e:bc: e5:90:a7:a5:47:3e:52:00:5f:48:50:68:18:26:33: bb:08:1f:80:a0:16:41:4c:73:fb:d3:43:f2:d7:8d: e6:b6:97:b4:e4:15:70:c6:75:90:d4:ee:70:87:ea: 06:d3:ec:d7:a7:eb:e1:ac:f4:7f:38:24:5d:50:51: 9d:80:d4:76:2c:dc:24:41:22:7c:76:eb:e3:f9:38: b7:ff:69:74:99:d8:23:69:bb:65:aa:02:b6:47:86: 83:20:47:22:86:d8:1e:ca:79:5c:52:94:b8:06:d3: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BE:D9:A8:E2:AF:13:4C:6A:9D:AA:FA:DA:92:F5:10:02:29:6C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:25:ae:97:f6:a9:2a:c2:15:ed:ae:71:22:b8:84:f1:bf:7d: 84:83:94:3e:75:12:ae:06:e8:85:d4:a7:4e:ca:d5:b6:3f:c1: 3e:ec:15:99:ad:c9:82:64:67:80:1d:45:97:a9:6e:62:1c:8a: 79:5b:8e:c5:ad:e3:03:0d:f0:11:31:7c:a5:3b:ed:71:48:9a: c7:52:c2:3b:5a:84:24:f9:6a:50:11:72:59:5b:c9:ae:b5:e2: e8:c7:22:b0:f8:ef:03:4f:cd:11:e8:21:b1:fd:8f:7a:ce:a9: a2:04:d8:19:b7:50:97:a4:94:fb:65:99:9f:c2:a8:e5:5a:a0: 77:da:da:76:ed:6f:85:b0:03:29:a2:e0:cd:a9:a3:ab:c2:8f: 15:4b:f1:13:e3:c9:45:6f:77:cd:b3:90:45:c1:6a:4d:5c:cb: f4:ce:5e:3e:19:7a:2d:d0:60:32:bc:da:a8:70:d9:15:53:47: 33:ae:db:e1:80:b4:7e:59:73:bc:5a:68:72:a9:dc:4a:30:56: a0:30:8c:74:eb:79:8c:3c:1c:25:fd:68:e4:e1:73:e6:65:69: 9a:a4:01:7f:a8:76:e7:98:95:cd:23:50:7d:f3:3f:db:aa:71: ad:32:95:b4:16:db:9a:0d:3f:d4:da:10:bc:8a:fd:d3:42:ce: 48:b3:b1:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKjZQTVyrfm3x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDI0MTJmOGEtNDNjYy00ODYyLWI3YjQtYjlhZjlhMDQzODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b1VS0WAm0dWFXd93/30bMeY7CvMgYlw77Uh c4pdno2QvuehSiNdU9yQjWHXx5BbBSeeZbkSVkCzKrX4goJq3h37Hn5rud2AR7Ex NYUAQTlDKm5MKCNUCsydVLQDB0A+4RmthmAjn/c0roEBYkRAa7zEtyeLSPBM1beh LLjGh5DkoJDFaRg6eAF9Ddif9+tvJvetfrzlkKelRz5SAF9IUGgYJjO7CB+AoBZB THP700Py143mtpe05BVwxnWQ1O5wh+oG0+zXp+vhrPR/OCRdUFGdgNR2LNwkQSJ8 duvj+Ti3/2l0mdgjabtlqgK2R4aDIEcihtgeynlcUpS4BtP91QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa+2ajirxNMap2q+tqS9RACKWxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2MzNTI1MDQtMmJiZi0z OGIyLWI2ZTMtZjlkNjU5NjU5NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrReAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYlrpf2qSrCFe2ucSK4hPG/fYSDlD51Eq4G6IXUp07K1bY/wT7sFZmt yYJkZ4AdRZepbmIcinlbjsWt4wMN8BExfKU77XFImsdSwjtahCT5alARcllbya61 4ujHIrD47wNPzRHoIbH9j3rOqaIE2Bm3UJeklPtlmZ/CqOVaoHfa2nbtb4WwAymi 4M2po6vCjxVL8RPjyUVvd82zkEXBak1cy/TOXj4Zei3QYDK82qhw2RVTRzOu2+GA tH5Zc7xaaHKp3EowVqAwjHTreYw8HCX9aOThc+ZlaZqkAX+odueYlc0jUH3zP9uq ca0ylbQW25oNP9TaELyK/dNCzkizsbk= -----END CERTIFICATE-----Generated at Fri May 9 20:01:43 2025 by rpki-client