$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b10b7a1-a9fc-3eee-b612-daf07c16e4a7.roa File: 1b10b7a1-a9fc-3eee-b612-daf07c16e4a7.roa (raw, json) Hash identifier: id12JiP2RBDc47LQHWZkTqikZ28L4017qOMTMLg++oc= Subject key identifier: E7:91:5F:EE:CC:78:91:ED:41:BB:39:B8:C8:B2:40:13:44:C3:8B:DB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A2CFC25BABB45C914A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b10b7a1-a9fc-3eee-b612-daf07c16e4a7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a2:cf:c2:5b:ab:b4:5c:91:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=bd4b2eaa-e5d8-4dfa-acd4-cfe9e22cfb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:a8:2d:c3:6e:52:c2:8a:e3:c3:da:10:77: be:da:57:95:76:44:16:c5:cc:9f:7e:4c:87:c7:a8: 4b:73:fa:47:ac:cd:f4:4c:2d:cf:4d:cd:26:da:8a: 03:d8:68:ae:a6:53:4f:a6:0c:bc:d3:e1:de:31:8a: 70:6f:f3:30:c8:67:47:c5:05:06:28:8d:f8:b3:cf: 2b:65:52:4d:27:a9:37:6a:42:33:32:7b:73:b3:21: 11:86:67:04:f4:37:da:22:1b:25:28:9c:21:2f:e9: 9f:fe:c1:b4:4c:19:a3:75:d1:66:bc:6b:4f:ce:0e: 08:32:17:0b:6d:c8:93:be:da:fe:31:56:2e:79:d2: fa:60:d0:49:d4:5c:8c:e7:e2:57:89:ea:4e:2b:7f: 2b:0a:19:b8:80:49:0b:d4:57:cb:ae:9d:01:55:72: 71:9d:53:95:81:38:05:0f:3e:7d:d5:d4:d0:12:d9: 94:69:4e:4b:49:d9:20:70:db:fe:ee:1c:17:01:81: fe:e9:b4:79:15:0f:f5:a9:d5:96:96:c0:5c:fc:ac: 7d:de:bf:12:3c:70:21:5f:26:d9:13:9a:f9:c7:39: f5:43:4a:31:7c:0e:45:3c:b8:2b:9c:d2:24:79:41: 3b:49:e4:6f:fa:7c:c3:30:ea:ec:8a:25:4b:c1:f9: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:5F:EE:CC:78:91:ED:41:BB:39:B8:C8:B2:40:13:44:C3:8B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b10b7a1-a9fc-3eee-b612-daf07c16e4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:60:8e:2c:8b:30:fb:8f:49:55:54:c9:c3:b3:bd:db:10:cc: 43:fc:43:79:3c:9e:a0:d1:a1:f5:03:fe:d5:ee:4f:31:f5:8b: 53:c2:0b:fd:60:95:31:7a:20:e8:30:6f:8a:40:db:7f:5f:f6: e8:05:21:16:52:5b:3d:e3:eb:58:8c:ad:89:ec:a0:04:c5:8e: 64:0a:54:4d:fe:d5:9d:a4:3a:5c:f0:68:1c:84:81:64:69:42: 61:08:bc:5d:b9:42:9b:9f:f2:b7:f7:48:75:e6:fd:98:31:7e: 23:19:e0:1a:0b:bc:48:08:d8:de:c3:cd:a7:de:45:42:80:27: 02:5b:90:a8:c5:45:b8:05:db:b2:d6:a9:54:aa:dd:ce:3b:73: ad:57:78:80:c7:24:6f:a5:29:9d:64:f9:65:be:32:0a:45:5f: d6:69:31:a4:40:96:b2:f2:68:b9:46:c3:30:10:63:12:d5:37: 48:7e:d4:89:fa:12:94:f3:90:77:8a:08:cf:a9:ed:0c:76:19: 5b:9f:f3:88:28:69:c0:d2:00:cf:7d:df:4e:5a:f4:a9:d6:fd: 5c:2e:0e:f6:67:58:c5:00:2c:f4:3f:6b:e8:7a:c4:99:10:3c: c7:cf:d3:cc:d5:21:cc:23:4d:71:0b:cf:f2:11:87:03:6d:06: ed:12:0f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKLPwlurtFyRSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmQ0YjJlYWEtZTVkOC00ZGZhLWFjZDQtY2ZlOWUyMmNmYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM6oLcNuUsKK48PaEHe+2leVdkQWxcyffkyH x6hLc/pHrM30TC3PTc0m2ooD2GiuplNPpgy80+HeMYpwb/MwyGdHxQUGKI34s88r ZVJNJ6k3akIzMntzsyERhmcE9DfaIhslKJwhL+mf/sG0TBmjddFmvGtPzg4IMhcL bciTvtr+MVYuedL6YNBJ1FyM5+JXiepOK38rChm4gEkL1FfLrp0BVXJxnVOVgTgF Dz591dTQEtmUaU5LSdkgcNv+7hwXAYH+6bR5FQ/1qdWWlsBc/Kx93r8SPHAhXybZ E5r5xzn1Q0oxfA5FPLgrnNIkeUE7SeRv+nzDMOrsiiVLwflngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeRX+7MeJHtQbs5uMiyQBNEw4vbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWIxMGI3YTEtYTlmYy0z ZWVlLWI2MTItZGFmMDdjMTZlNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChgjiyLMPuPSVVUycOzvdsQzEP8Q3k8nqDRofUD/tXuTzH1i1PCC/1g lTF6IOgwb4pA239f9ugFIRZSWz3j61iMrYnsoATFjmQKVE3+1Z2kOlzwaByEgWRp QmEIvF25Qpuf8rf3SHXm/ZgxfiMZ4BoLvEgI2N7DzafeRUKAJwJbkKjFRbgF27LW qVSq3c47c61XeIDHJG+lKZ1k+WW+MgpFX9ZpMaRAlrLyaLlGwzAQYxLVN0h+1In6 EpTzkHeKCM+p7Qx2GVuf84goacDSAM99305a9KnW/VwuDvZnWMUALPQ/a+h6xJkQ PMfP08zVIcwjTXELz/IRhwNtBu0SD7Y= -----END CERTIFICATE-----Generated at Sun Apr 27 07:07:27 2025 by rpki-client