$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa File: dbf3ccc6-818a-33aa-b232-2c839505e71f.roa (raw, json) Hash identifier: byr2jQpu2MxP0EIKSjzA3Or04EzwGGaBeh97tRa26i4= Subject key identifier: 57:F8:44:24:C2:08:C6:E6:90:A0:D3:E3:1E:6B:0E:04:3F:86:A3:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3FE44A8C041A87209220 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3f:e4:4a:8c:04:1a:87:20:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9e19cfaa-9fb0-48a8-aaf5-3eafeee857c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:4e:3b:d4:b4:13:22:73:45:39:89:31:1c: 9e:f9:a2:6a:d8:6d:06:3f:01:91:16:56:29:50:a1: 22:fc:29:36:34:72:02:3a:8c:f1:33:39:5e:00:f8: d0:ef:b4:47:51:a2:e1:fd:93:38:7c:9d:b0:aa:3f: 00:8f:f6:45:cd:e2:b1:c2:3d:17:17:ef:88:f5:af: 17:97:73:2b:f4:47:f1:da:a0:d1:87:d7:a8:23:bb: a2:99:60:2c:5b:83:0e:38:5b:9a:af:6d:35:a2:91: 47:54:9f:c9:a8:c3:b3:6b:8b:91:ca:56:96:b9:df: 02:7e:dd:20:64:99:dd:b9:da:74:f5:33:f6:f6:ee: d8:03:84:30:47:bb:17:84:b8:e0:e2:ad:21:6b:c7: fb:a0:e8:bc:97:03:63:a6:57:c0:fa:4d:84:13:83: 78:3b:6b:6f:a8:77:7e:15:c4:1e:85:46:87:f3:1b: e9:8f:52:b2:04:2f:c8:c9:d0:d6:5c:95:cf:67:28: e8:cc:dd:56:75:b4:ad:c1:0e:9c:a2:36:cc:f4:69: 90:73:16:09:39:7f:d6:8d:23:ec:12:af:8f:ba:e8: d6:dc:e2:e3:89:83:f8:b6:37:61:a6:0c:c0:2b:4a: 12:de:a0:f8:07:6f:30:55:1f:73:4a:36:d0:72:25: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F8:44:24:C2:08:C6:E6:90:A0:D3:E3:1E:6B:0E:04:3F:86:A3:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:23:85:cb:98:12:b1:7e:3d:1f:eb:96:bb:15:d4:6c:df:d4: b3:d2:0d:ee:f0:6e:2d:73:aa:aa:04:c8:1b:42:31:22:d2:b7: 05:95:94:92:f0:01:d1:fa:53:be:24:00:be:80:42:f3:d2:2d: dd:a4:e6:8d:e1:a9:30:60:c9:85:c4:14:1a:7d:43:62:8f:82: b4:b7:90:12:04:ff:9e:aa:b8:12:70:85:d4:83:97:de:79:3a: 97:c6:35:d9:fd:3c:da:1b:4d:ec:71:79:d8:68:24:56:18:f5: 1d:15:82:03:ec:79:01:09:1f:9a:f8:6b:c5:50:fd:6e:98:ee: b0:52:3d:04:70:9c:fb:b9:b9:4b:4e:35:70:e6:9b:eb:36:3c: e0:fc:da:10:6c:d5:97:2b:3e:3f:54:1e:c6:30:3e:88:46:91: 49:00:a8:78:99:69:4b:6b:a8:60:9c:9e:25:4f:c4:e8:65:9e: 30:43:b9:77:2b:f8:4b:67:aa:56:c8:61:8e:f8:73:17:c7:85: 8a:07:ea:05:8b:f7:71:d3:38:6c:67:c9:3b:80:4d:04:c2:9a: 27:b7:fe:7b:59:e6:46:35:71:65:79:65:02:a4:96:61:0f:19: 42:7a:be:50:90:46:1f:7f:aa:91:f5:18:77:a9:14:d5:71:fa: 52:d1:cc:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj/kSowEGocgkiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWUxOWNmYWEtOWZiMC00OGE4LWFhZjUtM2VhZmVlZTg1N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgVOO9S0EyJzRTmJMRye+aJq2G0GPwGRFlYp UKEi/Ck2NHICOozxMzleAPjQ77RHUaLh/ZM4fJ2wqj8Aj/ZFzeKxwj0XF++I9a8X l3Mr9Efx2qDRh9eoI7uimWAsW4MOOFuar201opFHVJ/JqMOza4uRylaWud8Cft0g ZJndudp09TP29u7YA4QwR7sXhLjg4q0ha8f7oOi8lwNjplfA+k2EE4N4O2tvqHd+ FcQehUaH8xvpj1KyBC/IydDWXJXPZyjozN1WdbStwQ6cojbM9GmQcxYJOX/WjSPs Eq+PuujW3OLjiYP4tjdhpgzAK0oS3qD4B28wVR9zSjbQciUNWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf4RCTCCMbmkKDT4x5rDgQ/hqOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGJmM2NjYzYtODE4YS0z M2FhLWIyMzItMmM4Mzk1MDVlNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYjhcuYErF+PR/rlrsV1Gzf1LPSDe7wbi1zqqoEyBtCMSLStwWVlJLw AdH6U74kAL6AQvPSLd2k5o3hqTBgyYXEFBp9Q2KPgrS3kBIE/56quBJwhdSDl955 OpfGNdn9PNobTexxedhoJFYY9R0VggPseQEJH5r4a8VQ/W6Y7rBSPQRwnPu5uUtO NXDmm+s2POD82hBs1ZcrPj9UHsYwPohGkUkAqHiZaUtrqGCcniVPxOhlnjBDuXcr +EtnqlbIYY74cxfHhYoH6gWL93HTOGxnyTuATQTCmie3/ntZ5kY1cWV5ZQKklmEP GUJ6vlCQRh9/qpH1GHepFNVx+lLRzNA= -----END CERTIFICATE-----Generated at Fri May 9 23:10:03 2025 by rpki-client