$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7197f894-924a-3f31-8ae9-23bcebba76a6.roa File: 7197f894-924a-3f31-8ae9-23bcebba76a6.roa (raw, json) Hash identifier: vSsFdcRm5C78Qdt/02DfeQG2GXgYcl9ufyY0bX/JTTw= Subject key identifier: 26:52:5E:01:E7:D9:BB:72:DF:89:BA:D4:04:7A:5E:8A:16:01:06:68 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4E9D0A1498B5EB31E440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7197f894-924a-3f31-8ae9-23bcebba76a6.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.19.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4e:9d:0a:14:98:b5:eb:31:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=ecb9cf45-d34c-459a-bbae-f4801ce567b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:50:30:7b:75:0b:bf:b0:c9:e9:4c:ff:27: 43:fc:f8:22:08:d2:b5:21:7f:42:4b:2d:52:cd:ac: 9e:be:9c:e1:ee:e6:b4:54:f0:e5:c5:6f:87:47:c1: a1:e6:38:a2:4b:82:b9:cd:60:3c:b0:29:11:24:dc: de:a7:a5:86:74:dc:8a:de:1c:e9:02:4f:a0:e3:6d: a9:e4:11:db:dc:e2:41:a1:57:b0:7b:41:72:b3:5b: 99:37:12:c1:5e:a3:a8:50:81:8c:94:17:e2:dc:96: 0f:83:b9:61:4c:55:63:26:0b:97:28:d6:2c:46:48: 00:9f:09:d3:3e:4e:6d:b9:f7:6b:57:0c:99:03:18: 07:f2:59:a3:f3:ac:94:b7:17:e0:30:05:4d:ca:a1: 85:90:11:9e:a0:30:e6:70:10:fc:29:c4:fb:ad:4b: 3f:a7:7a:59:f9:a5:fe:31:b1:53:d6:c3:41:04:a8: 0e:b6:7b:83:1c:90:77:ef:4f:53:65:e3:1f:c8:30: 0b:3d:37:ea:bd:de:a0:49:4d:8f:2d:64:75:ef:a6: fa:9b:31:bf:67:bd:55:69:f0:98:d9:4d:f4:25:4d: 05:62:cb:4e:1c:9a:1d:03:5a:90:54:23:ab:db:d7: ee:5e:4c:9f:6e:af:18:66:f4:d0:00:f5:19:0a:9d: 14:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:52:5E:01:E7:D9:BB:72:DF:89:BA:D4:04:7A:5E:8A:16:01:06:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7197f894-924a-3f31-8ae9-23bcebba76a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d9:c7:71:d9:d3:5d:2f:bf:e9:e4:2e:8a:f1:0c:4b:0a:d4: 3e:65:5d:24:6b:d7:60:48:8d:0c:4b:e0:99:13:d4:1f:87:60: a9:9c:27:9c:87:3a:ef:fd:68:7b:da:a3:65:fe:96:bb:05:cc: c5:cb:66:65:24:e1:0d:83:69:33:f0:e5:5a:44:16:ee:f6:0f: 61:6b:0f:2a:dd:b2:72:93:ec:a6:c9:62:7b:c1:a0:62:3e:ed: d8:f5:d6:b1:43:5e:db:8a:e4:50:c1:d7:53:46:26:b0:3c:11: 87:2a:2d:9d:51:3e:38:c7:4b:9e:bd:b9:ce:ce:06:7e:ed:a5: b6:e4:a5:6a:85:48:fa:a9:f3:af:cf:3d:90:2f:09:82:9c:02: 05:e0:9f:89:a2:a0:2b:fb:b2:00:20:4d:01:21:07:0a:6a:23: de:0e:71:94:cd:33:2d:eb:55:68:d2:d9:bc:14:82:97:52:38: 5a:5f:94:a8:ad:99:34:8c:00:ca:5c:3a:0a:c4:1d:e1:83:2e: 1c:20:61:dd:b7:ea:09:17:1f:9a:2c:7a:64:64:fd:41:de:72: ed:2d:68:cd:07:2a:f7:db:b9:04:09:cf:55:a3:0c:ff:96:f7: 5c:2e:7c:b2:01:2a:c8:71:5a:c6:74:24:00:5c:7f:8e:49:f9: 0a:73:a8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh706dChSYtesx5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZWNiOWNmNDUtZDM0Yy00NTlhLWJiYWUtZjQ4MDFjZTU2N2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFRQMHt1C7+wyelM/ydD/PgiCNK1IX9CSy1S zayevpzh7ua0VPDlxW+HR8Gh5jiiS4K5zWA8sCkRJNzep6WGdNyK3hzpAk+g422p 5BHb3OJBoVewe0Fys1uZNxLBXqOoUIGMlBfi3JYPg7lhTFVjJguXKNYsRkgAnwnT Pk5tufdrVwyZAxgH8lmj86yUtxfgMAVNyqGFkBGeoDDmcBD8KcT7rUs/p3pZ+aX+ MbFT1sNBBKgOtnuDHJB3709TZeMfyDALPTfqvd6gSU2PLWR176b6mzG/Z71VafCY 2U30JU0FYstOHJodA1qQVCOr29fuXkyfbq8YZvTQAPUZCp0UqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZSXgHn2bty34m61AR6XooWAQZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzE5N2Y4OTQtOTI0YS0z ZjMxLThhZTktMjNiY2ViYmE3NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzZx3HZ010vv+nkLorxDEsK1D5lXSRr12BIjQxL4JkT1B+HYKmcJ5yH Ou/9aHvao2X+lrsFzMXLZmUk4Q2DaTPw5VpEFu72D2FrDyrdsnKT7KbJYnvBoGI+ 7dj11rFDXtuK5FDB11NGJrA8EYcqLZ1RPjjHS569uc7OBn7tpbbkpWqFSPqp86/P PZAvCYKcAgXgn4mioCv7sgAgTQEhBwpqI94OcZTNMy3rVWjS2bwUgpdSOFpflKit mTSMAMpcOgrEHeGDLhwgYd236gkXH5osemRk/UHecu0taM0HKvfbuQQJz1WjDP+W 91wufLIBKshxWsZ0JABcf45J+QpzqME= -----END CERTIFICATE-----Generated at Fri May 9 13:32:56 2025 by rpki-client