$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa File: 06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa (raw, json) Hash identifier: jQxLPCvtLa+fA5iJ2uizrpKMVu3SIMiFLoKfRoEmw+A= Subject key identifier: 68:3E:E5:84:E0:ED:48:AB:88:A8:7C:C8:56:A8:E5:FB:C5:72:B8:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B9A4AC267AF73FEA2140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.18.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b9:a4:ac:26:7a:f7:3f:ea:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=01b1c456-3ba6-4218-8a2d-683248e50950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:8d:d5:7e:86:7e:95:6f:14:e1:6e:f0:94: a9:1b:94:c9:f8:ff:03:bc:53:2f:32:18:88:d3:86: 56:0d:89:5a:27:3e:fa:66:9c:db:a9:02:3e:27:48: 65:8f:30:f8:cb:6d:dc:ec:87:63:3c:25:13:eb:49: 17:7f:1b:76:20:c1:3f:3f:e5:41:14:d1:fe:d2:3c: 85:76:99:77:89:ef:2c:8e:ae:c2:da:6f:0b:8e:1e: f4:b7:b2:eb:3f:8c:c1:c0:ba:da:a4:58:82:26:00: 64:78:50:50:af:6f:00:56:9e:33:d5:ed:ba:71:1d: a4:ee:b5:40:82:a8:c0:51:80:88:b3:31:d3:74:30: d0:ee:5b:a8:7f:8b:86:dd:97:96:3f:f2:17:47:fa: 00:f2:7c:05:91:b1:78:d4:df:0d:f2:ea:74:08:82: a2:b3:78:0a:f0:84:49:a6:23:f2:94:51:12:a6:e7: 49:7e:ad:a0:79:f8:aa:d8:98:b5:15:63:53:44:08: 12:67:39:10:a6:c2:8f:bb:46:37:62:91:b8:1c:bb: f0:8a:3d:99:98:62:45:1c:62:d4:6c:29:75:e1:70: 04:ff:c0:14:d0:ab:ad:39:87:c0:c9:04:ab:d8:a1: 6f:ed:b7:6f:ab:a7:f1:37:d6:a8:40:ae:77:c1:51: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3E:E5:84:E0:ED:48:AB:88:A8:7C:C8:56:A8:E5:FB:C5:72:B8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8b:55:d8:36:15:b9:aa:5d:c6:b9:b6:1c:4d:a0:1d:3e:e6: 03:6d:ec:ff:8c:72:ad:d0:e1:a8:f7:c5:56:3c:5b:96:60:39: 86:1d:31:4e:d5:2d:e3:a0:1f:16:22:37:c4:3b:2a:25:db:05: 3f:b9:8e:1b:f0:e2:38:5f:20:ad:ea:a7:df:f5:d9:cd:a4:27: 83:93:1d:a6:ad:73:f8:81:eb:24:79:78:98:fb:9e:15:dd:6f: 9e:23:c9:a8:a8:0f:85:e3:50:42:f3:66:d5:63:1d:ef:4f:19: 87:ad:e4:ad:89:6d:56:6a:cf:e7:fc:a2:82:da:31:12:65:e8: 81:a8:7e:20:77:51:2b:c6:1e:ce:3e:a4:e6:90:43:f9:b1:bc: 0d:c0:55:6a:38:82:44:04:c0:34:36:29:c3:14:08:59:f7:c3: ed:92:c1:96:e6:49:b4:e2:78:34:4f:6d:91:ef:fa:3b:47:0c: e3:df:60:e8:67:d5:bc:dc:c9:7c:36:39:72:2e:5e:72:76:34: 6b:5d:34:4d:88:7c:2e:f7:ca:8e:58:b6:a7:e3:5f:a0:89:0e: 1c:6c:a4:54:ef:a0:e1:81:62:7a:23:ca:40:05:1a:4c:ab:24: e6:87:af:a1:cc:a2:0b:8e:93:62:09:ee:63:14:2a:c0:10:7d: 2d:6c:7d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLmkrCZ69z/qIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDFiMWM0NTYtM2JhNi00MjE4LThhMmQtNjgzMjQ4ZTUwOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWuN1X6GfpVvFOFu8JSpG5TJ+P8DvFMvMhiI 04ZWDYlaJz76ZpzbqQI+J0hljzD4y23c7IdjPCUT60kXfxt2IME/P+VBFNH+0jyF dpl3ie8sjq7C2m8Ljh70t7LrP4zBwLrapFiCJgBkeFBQr28AVp4z1e26cR2k7rVA gqjAUYCIszHTdDDQ7luof4uG3ZeWP/IXR/oA8nwFkbF41N8N8up0CIKis3gK8IRJ piPylFESpudJfq2gefiq2Ji1FWNTRAgSZzkQpsKPu0Y3YpG4HLvwij2ZmGJFHGLU bCl14XAE/8AU0KutOYfAyQSr2KFv7bdvq6fxN9aoQK53wVElrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg+5YTg7UiriKh8yFao5fvFcrhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDZmMGRjNDAtZDY3OC0z ZDk0LTlmNGYtZTI1YTllNWMwZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6LVdg2FbmqXca5thxNoB0+5gNt7P+Mcq3Q4aj3xVY8W5ZgOYYdMU7V LeOgHxYiN8Q7KiXbBT+5jhvw4jhfIK3qp9/12c2kJ4OTHaatc/iB6yR5eJj7nhXd b54jyaioD4XjUELzZtVjHe9PGYet5K2JbVZqz+f8ooLaMRJl6IGofiB3USvGHs4+ pOaQQ/mxvA3AVWo4gkQEwDQ2KcMUCFn3w+2SwZbmSbTieDRPbZHv+jtHDOPfYOhn 1bzcyXw2OXIuXnJ2NGtdNE2IfC73yo5YtqfjX6CJDhxspFTvoOGBYnojykAFGkyr JOaHr6HMoguOk2IJ7mMUKsAQfS1sfRM= -----END CERTIFICATE-----Generated at Sat Apr 26 23:46:42 2025 by rpki-client