$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa1a1f9-5ccb-3da2-9088-4ac98208643e.roa File: 1fa1a1f9-5ccb-3da2-9088-4ac98208643e.roa (raw, json) Hash identifier: ECaBwTWTVPt18GpOMNnYxqgT5ruXko+OyrgvCbOFBFg= Subject key identifier: C7:AF:80:CA:4A:FB:BE:48:B9:6A:46:CF:FF:E1:35:7E:C8:B3:57:32 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD34593C67601E6D2DBC90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa1a1f9-5ccb-3da2-9088-4ac98208643e.roa Signing time: Thu 24 Apr 2025 11:52:26 +0000 ROA not before: Thu 24 Apr 2025 11:52:26 +0000 ROA not after: Wed 23 Jul 2025 11:52:26 +0000 asID: 19905 IP address blocks: 173.25.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:34:59:3c:67:60:1e:6d:2d:bc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:52:26 2025 GMT Not After : Jul 23 11:52:26 2025 GMT Subject: CN=6176f3ec-0458-4fe5-a795-1299bf325cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:f1:6a:d9:17:0f:7b:58:58:1e:59:d7:2d: ed:fb:ad:85:f9:9b:44:39:9a:61:b7:35:87:57:f9: bf:79:85:96:3c:68:e2:fb:f7:86:29:ef:6e:35:31: 4b:fd:6b:69:06:5c:7e:d9:50:7d:cd:b3:19:d8:de: 8e:e1:c0:e6:7a:ec:cc:14:87:b9:ff:a7:3b:f9:7d: 07:cc:39:24:a7:99:78:f4:fb:67:63:60:84:99:08: ea:ce:6d:fc:9d:3f:ed:10:30:d9:6c:22:57:72:d6: db:79:d2:4d:58:6a:91:fb:2d:fa:16:30:79:f5:3d: c7:dd:24:71:76:c7:e9:f0:8a:af:3e:f2:c2:df:8b: ff:fd:72:bc:49:4a:b1:03:a7:5b:64:33:cb:8a:19: eb:1a:41:c9:bc:14:dc:44:d3:56:a1:a1:25:f2:a2: 67:fa:07:1e:b7:d1:d7:33:71:15:4b:f7:1f:4d:00: a5:1f:b0:c0:81:33:9b:b2:66:a2:fa:3a:8e:6a:c0: d6:88:ac:bf:d1:e7:4b:d0:5a:f5:c6:ef:6d:70:93: 26:d2:73:49:d3:52:66:60:89:79:23:b0:36:ba:07: 74:d8:30:35:2f:42:13:eb:2c:f8:70:f9:25:60:e3: f7:09:82:f7:1d:03:5d:f1:86:81:4e:17:42:34:d3: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AF:80:CA:4A:FB:BE:48:B9:6A:46:CF:FF:E1:35:7E:C8:B3:57:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa1a1f9-5ccb-3da2-9088-4ac98208643e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f1:3a:c1:04:fa:ea:c0:ea:e0:60:bf:6b:15:4c:45:28:64: 38:60:3d:5f:f2:ec:c3:2f:f4:88:ee:3e:b9:c6:95:7f:24:8a: e2:a2:51:2c:70:08:78:0d:3b:3f:3c:62:ef:f9:a9:50:39:9e: f3:a9:ec:c4:b1:92:33:49:97:e9:0b:44:01:2a:f6:99:43:41: 8e:a9:c4:6f:d0:56:97:0b:02:9b:1a:13:a4:d5:27:57:90:8b: b5:c3:77:34:6f:33:f7:f3:77:3e:df:14:79:01:97:cd:e1:11: 5f:0b:a4:30:9c:ef:ce:15:3e:23:7e:8d:1e:5f:10:4b:7f:3c: 10:3b:72:18:ac:86:16:4c:2a:f4:06:68:ec:1e:0e:df:0b:dc: 1b:99:07:ad:a1:dd:62:77:e0:11:eb:4a:cb:2b:53:36:49:d3: ce:1c:04:56:3d:c8:20:78:a4:97:63:74:46:13:1e:88:dc:e0: 39:16:09:39:7e:80:9e:e2:ad:ef:22:75:b6:39:12:8e:35:25: 15:11:42:2e:54:fe:1f:14:e6:87:f9:f6:a2:1f:c1:a2:8a:a2: ac:31:95:b0:01:9a:75:e6:e7:aa:5a:8f:34:a9:ea:45:3c:b3: 3c:23:89:bb:13:a4:3a:d7:6e:3b:4d:ce:32:30:48:3c:9a:90: 4d:e8:5f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzTRZPGdgHm0tvJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTIyNloXDTI1MDcyMzExNTIyNlowLzEtMCsGA1UEAxMk NjE3NmYzZWMtMDQ1OC00ZmU1LWE3OTUtMTI5OWJmMzI1Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwHxatkXD3tYWB5Z1y3t+62F+ZtEOZphtzWH V/m/eYWWPGji+/eGKe9uNTFL/WtpBlx+2VB9zbMZ2N6O4cDmeuzMFIe5/6c7+X0H zDkkp5l49PtnY2CEmQjqzm38nT/tEDDZbCJXctbbedJNWGqR+y36FjB59T3H3SRx dsfp8IqvPvLC34v//XK8SUqxA6dbZDPLihnrGkHJvBTcRNNWoaEl8qJn+gcet9HX M3EVS/cfTQClH7DAgTObsmai+jqOasDWiKy/0edL0Fr1xu9tcJMm0nNJ01JmYIl5 I7A2ugd02DA1L0IT6yz4cPklYOP3CYL3HQNd8YaBThdCNNOxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMevgMpK+75IuWpGz//hNX7Is1cyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWZhMWExZjktNWNjYi0z ZGEyLTkwODgtNGFjOTgyMDg2NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfxOsEE+urA6uBgv2sVTEUoZDhgPV/y7MMv9IjuPrnGlX8kiuKiUSxw CHgNOz88Yu/5qVA5nvOp7MSxkjNJl+kLRAEq9plDQY6pxG/QVpcLApsaE6TVJ1eQ i7XDdzRvM/fzdz7fFHkBl83hEV8LpDCc784VPiN+jR5fEEt/PBA7chishhZMKvQG aOweDt8L3BuZB62h3WJ34BHrSssrUzZJ084cBFY9yCB4pJdjdEYTHojc4DkWCTl+ gJ7ire8idbY5Eo41JRURQi5U/h8U5of59qIfwaKKoqwxlbABmnXm56pajzSp6kU8 szwjibsTpDrXbjtNzjIwSDyakE3oXzA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:04 2025 by rpki-client