$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa98a3bd-67a6-36e3-8a7d-e0051bcf7a30.roa File: fa98a3bd-67a6-36e3-8a7d-e0051bcf7a30.roa (raw, json) Hash identifier: Qo8C/6zaqQWGswWZG6Y3nOD4gma1wUEJabL1AZlOF74= Subject key identifier: 70:A3:09:AF:A7:8E:82:F0:4F:8C:32:1C:3F:DA:69:B3:06:9E:60:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4F62EF9A73D34803B180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa98a3bd-67a6-36e3-8a7d-e0051bcf7a30.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4f:62:ef:9a:73:d3:48:03:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=292fab9d-90bb-4d9a-968a-cab061b4881c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:56:a0:82:f6:af:c0:00:15:37:12:8a:12: fe:0c:f2:20:f7:5a:8a:1f:a5:1e:f1:a6:15:b6:e8: 60:87:f8:2b:8d:3b:9d:15:13:31:f8:71:56:66:92: 22:f3:4b:6a:7c:22:5a:dd:55:f9:4f:68:1e:20:e4: 6d:b4:f4:3c:92:9f:30:b1:51:c6:44:76:c6:11:0c: 3b:60:14:80:4d:d0:84:9f:0a:c3:94:76:74:ee:58: 0e:c5:0c:48:dc:fb:4c:b1:1b:88:cd:ef:37:98:5e: b6:cc:4a:d4:05:35:66:04:a2:98:f9:d2:21:30:df: a6:9e:eb:bc:63:ec:44:b8:33:1f:80:bd:33:b4:11: 34:3b:1d:8c:e2:c3:ba:dc:1e:13:f3:e8:44:75:c1: 3d:c3:f3:eb:b9:84:ef:bc:55:a9:47:c4:d4:70:f5: cd:ca:bf:a1:fd:ae:fb:71:9a:19:69:c4:ea:29:1c: 93:11:68:de:cf:ad:19:c3:9d:af:4b:26:1c:30:f1: 00:64:57:d4:66:cb:07:52:7f:31:3c:7e:53:27:7b: 62:d7:d2:07:79:d1:ac:e2:4f:91:ee:c8:5c:21:13: 32:8c:33:f1:05:f9:0c:57:4d:d2:43:39:39:c9:98: c7:be:e6:88:e2:b9:0b:2b:d2:c9:d0:a6:c9:d7:f9: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A3:09:AF:A7:8E:82:F0:4F:8C:32:1C:3F:DA:69:B3:06:9E:60:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa98a3bd-67a6-36e3-8a7d-e0051bcf7a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:df:b6:b7:21:aa:7c:c0:9d:1a:3a:48:8a:00:17:04:7d:e3: 26:54:18:6c:be:c7:bc:15:a2:1b:b4:5b:42:c9:e4:d9:b5:a7: b0:f6:be:97:46:c3:5d:84:8f:34:d0:e4:c9:96:fd:9c:e6:0f: 6e:a5:e3:97:f8:4c:ae:7e:51:34:47:6d:b9:6c:7e:0d:f5:c7: ff:97:42:6d:e8:f6:32:35:14:f2:3f:cf:e6:3f:f4:03:3d:e7: 29:61:fb:3c:fd:ca:1f:78:c8:dc:6f:c0:a2:43:13:7d:d2:c7: 60:f0:de:87:32:bc:05:05:3c:7e:62:b0:cc:4e:8b:f4:da:f4: 4f:1d:e4:44:9e:b3:0f:83:a1:89:2f:97:d2:af:70:a4:b2:64: 4f:86:b7:6b:e1:17:ca:b2:c4:13:d5:9d:0d:73:b3:62:43:7c: 05:30:eb:ab:7b:e8:28:89:9b:d8:56:40:96:5b:f5:c2:bb:cd: 26:2c:d7:d6:93:cd:de:a2:91:73:a0:52:e5:89:18:eb:b2:0e: 26:5c:bb:13:23:8e:03:ac:55:7e:3c:ce:96:40:a3:3d:98:70: ad:5c:17:b4:45:ea:5c:bf:da:da:e2:73:98:b3:d5:93:aa:6e: 90:11:e2:23:9b:f2:dd:82:a5:c8:53:ad:b8:81:8c:23:08:bd: 8a:2d:e1:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh709i75pz00gDsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MjkyZmFiOWQtOTBiYi00ZDlhLTk2OGEtY2FiMDYxYjQ4ODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKFWoIL2r8AAFTcSihL+DPIg91qKH6Ue8aYV tuhgh/grjTudFRMx+HFWZpIi80tqfCJa3VX5T2geIORttPQ8kp8wsVHGRHbGEQw7 YBSATdCEnwrDlHZ07lgOxQxI3PtMsRuIze83mF62zErUBTVmBKKY+dIhMN+mnuu8 Y+xEuDMfgL0ztBE0Ox2M4sO63B4T8+hEdcE9w/PruYTvvFWpR8TUcPXNyr+h/a77 cZoZacTqKRyTEWjez60Zw52vSyYcMPEAZFfUZssHUn8xPH5TJ3ti19IHedGs4k+R 7shcIRMyjDPxBfkMV03SQzk5yZjHvuaI4rkLK9LJ0KbJ1/ncNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCjCa+njoLwT4wyHD/aabMGnmDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmE5OGEzYmQtNjdhNi0z NmUzLThhN2QtZTAwNTFiY2Y3YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvftrchqnzAnRo6SIoAFwR94yZUGGy+x7wVohu0W0LJ5Nm1p7D2vpdG w12EjzTQ5MmW/ZzmD26l45f4TK5+UTRHbblsfg31x/+XQm3o9jI1FPI/z+Y/9AM9 5ylh+zz9yh94yNxvwKJDE33Sx2Dw3ocyvAUFPH5isMxOi/Ta9E8d5ESesw+DoYkv l9KvcKSyZE+Gt2vhF8qyxBPVnQ1zs2JDfAUw66t76CiJm9hWQJZb9cK7zSYs19aT zd6ikXOgUuWJGOuyDiZcuxMjjgOsVX48zpZAoz2YcK1cF7RF6ly/2tric5iz1ZOq bpAR4iOb8t2CpchTrbiBjCMIvYot4Xo= -----END CERTIFICATE-----Generated at Fri May 9 12:02:50 2025 by rpki-client