$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2517f729-e44f-3008-a0fd-a276fa63b898.roa File: 2517f729-e44f-3008-a0fd-a276fa63b898.roa (raw, json) Hash identifier: hYFbP42xaayk0Yu84bOrxGOu/3BLSgHsHxPJdK4YFJM= Subject key identifier: E3:74:C7:CC:00:B1:3A:84:91:6B:7A:1A:01:E8:37:AD:DD:9F:00:14 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF46840CA2CDE8EAA60600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2517f729-e44f-3008-a0fd-a276fa63b898.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:46:84:0c:a2:cd:e8:ea:a6:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=6e033dc0-7352-4a42-b403-f744c0c14034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:82:25:e9:69:e7:b4:33:d9:56:68:be:9a: 55:ec:35:01:1a:bf:70:9b:fd:88:08:09:c1:1a:89: 1e:55:a4:cb:6b:0e:07:cc:2e:78:fa:95:37:01:a2: 6b:38:8d:58:96:1b:ae:16:6b:30:09:f0:0c:25:aa: 5c:f2:27:a7:9c:b4:30:43:22:04:8f:20:e1:b5:17: 5d:49:d1:06:ba:34:ba:29:a6:d6:15:4e:0f:89:1b: 55:66:4b:0c:58:bb:0d:5e:f7:4d:16:a0:7f:82:9d: c1:50:f4:b8:74:51:e0:8b:6d:cf:36:15:63:e5:b9: 1c:09:a2:5e:c5:67:4d:55:dc:08:bf:31:58:c5:31: e1:49:e6:b3:66:2d:cd:07:eb:b3:14:82:37:42:89: e8:79:1a:10:74:3f:10:fa:58:31:ad:f6:9a:b3:5f: 00:e7:66:3d:eb:93:54:c7:8c:4d:d4:55:1c:35:cf: ad:8b:73:71:8f:4e:71:c4:40:74:78:90:94:44:b1: 65:ba:54:00:d0:db:4c:58:17:98:3d:c0:33:b2:ff: 8e:a5:1d:2e:de:78:d0:00:ab:2a:6d:07:85:73:bd: 9c:4d:d1:a1:5c:47:b3:d3:91:6d:26:e8:78:d1:9e: 46:d2:54:56:d1:14:4f:9b:6f:01:a3:d1:bb:af:33: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:74:C7:CC:00:B1:3A:84:91:6B:7A:1A:01:E8:37:AD:DD:9F:00:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2517f729-e44f-3008-a0fd-a276fa63b898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2e:ec:b5:0a:b6:6f:3b:d0:ea:20:fe:44:e8:ee:41:66:49: 8d:c4:47:4e:b8:15:08:ca:9f:7c:a9:d0:cb:3b:e8:e0:54:25: 99:ac:3c:98:35:f1:aa:ba:ba:fe:bf:2b:af:4e:b3:5f:c7:be: 4e:4d:cd:32:b1:ed:78:a8:b3:85:c5:d3:39:f7:c3:76:e6:a8: 0d:e2:28:d6:8f:3f:11:93:13:b0:6e:f3:2f:c3:73:d8:67:5b: 40:74:d3:43:55:cd:9e:c6:20:9b:e5:d1:b8:35:c0:f5:e6:89: 6b:af:9b:d4:bb:3f:f4:09:d3:23:1f:28:41:64:f0:ce:c1:6b: 47:52:26:52:c1:e9:24:47:7b:3a:b5:3f:23:48:d8:f1:e1:2a: bf:8f:7e:17:40:57:1a:9d:50:43:ec:24:a5:77:a0:3f:cb:71: d8:c6:f0:82:b5:cc:56:f8:01:fd:45:78:12:9f:54:fd:ae:39: b6:f0:84:6f:cd:a0:4a:51:6b:c6:22:cc:3e:f8:0f:27:47:f4: 84:56:07:fe:9c:31:fa:37:9b:48:9e:21:83:42:0e:a9:b3:65: c6:64:d1:f9:5e:15:57:1b:c2:78:34:e0:88:72:90:c1:05:85: 05:ea:81:31:6a:3f:c0:3e:4e:12:df:00:95:6f:09:4b:16:7a: db:25:ab:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70aEDKLN6OqmBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NmUwMzNkYzAtNzM1Mi00YTQyLWI0MDMtZjc0NGMwYzE0MDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn2CJelp57Qz2VZovppV7DUBGr9wm/2ICAnB GokeVaTLaw4HzC54+pU3AaJrOI1YlhuuFmswCfAMJapc8iennLQwQyIEjyDhtRdd SdEGujS6KabWFU4PiRtVZksMWLsNXvdNFqB/gp3BUPS4dFHgi23PNhVj5bkcCaJe xWdNVdwIvzFYxTHhSeazZi3NB+uzFII3QonoeRoQdD8Q+lgxrfaas18A52Y965NU x4xN1FUcNc+ti3Nxj05xxEB0eJCURLFlulQA0NtMWBeYPcAzsv+OpR0u3njQAKsq bQeFc72cTdGhXEez05FtJuh40Z5G0lRW0RRPm28Bo9G7rzPkjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFON0x8wAsTqEkWt6GgHoN63dnwAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjUxN2Y3MjktZTQ0Zi0z MDA4LWEwZmQtYTI3NmZhNjNiODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEu7LUKtm870Oog/kTo7kFmSY3ER064FQjKn3yp0Ms76OBUJZmsPJg1 8aq6uv6/K69Os1/Hvk5NzTKx7Xios4XF0zn3w3bmqA3iKNaPPxGTE7Bu8y/Dc9hn W0B000NVzZ7GIJvl0bg1wPXmiWuvm9S7P/QJ0yMfKEFk8M7Ba0dSJlLB6SRHezq1 PyNI2PHhKr+PfhdAVxqdUEPsJKV3oD/LcdjG8IK1zFb4Af1FeBKfVP2uObbwhG/N oEpRa8YizD74DydH9IRWB/6cMfo3m0ieIYNCDqmzZcZk0fleFVcbwng04IhykMEF hQXqgTFqP8A+ThLfAJVvCUsWetslqzA= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:48 2025 by rpki-client