$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a30e73f-b979-3fcb-8a41-62ab5d6e3207.roa File: 2a30e73f-b979-3fcb-8a41-62ab5d6e3207.roa (raw, json) Hash identifier: vyH33KvFOdxo3mE7t5p9S7WLOqgxEsrHgN9l38IPEq8= Subject key identifier: E1:6B:D7:6B:64:09:12:22:0E:B5:77:CA:2E:D0:34:94:AF:74:45:B0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA400811E5AED9BA8A1C20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a30e73f-b979-3fcb-8a41-62ab5d6e3207.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:40:08:11:e5:ae:d9:ba:8a:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3debe16e-de9c-49a4-8175-eed5deb6c60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f2:e6:ba:ec:02:d6:10:f5:c2:ee:5d:ad:9c: 39:08:00:59:1b:9e:aa:3f:ce:51:fe:3a:c9:2b:4f: e9:ec:58:72:e4:df:fb:ae:79:b2:9d:64:c4:88:8c: dd:df:6d:84:e5:79:5d:77:66:e1:3f:02:09:61:9d: 29:4f:0a:d4:a4:bb:7f:5e:69:1c:17:14:ad:41:06: b7:e2:7b:bf:3e:d3:ec:a9:e7:f4:f0:29:4a:9c:79: 23:61:b4:8b:af:b5:9b:6e:a3:2d:7a:71:c8:8a:cc: 59:86:6b:e6:49:83:13:6d:d8:00:44:53:6f:ce:90: 66:c1:98:77:0f:9c:93:32:90:14:74:7a:75:3f:27: 3b:22:14:2b:3e:50:00:00:98:b5:02:5d:63:b6:af: 05:48:ff:bb:08:89:4f:37:4b:db:e8:1c:94:16:4d: 1f:df:05:e7:58:f5:f9:83:df:32:bb:6e:57:a9:eb: 11:6f:c9:88:35:ce:39:d1:c4:ba:14:e0:03:ba:5c: f4:10:99:97:98:03:50:ef:c7:44:77:fc:af:0c:26: 67:ab:0c:11:17:ae:ee:83:bd:f9:c6:5e:80:55:f3: 8f:e6:23:b0:69:4d:d7:49:c0:d6:0b:87:c0:ba:ef: d3:bd:85:a9:9f:65:2f:00:0d:1d:c5:38:61:f3:a9: 13:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6B:D7:6B:64:09:12:22:0E:B5:77:CA:2E:D0:34:94:AF:74:45:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a30e73f-b979-3fcb-8a41-62ab5d6e3207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5a:df:5c:91:c8:d4:c0:6b:1c:f0:b7:23:df:27:be:64:e8: 37:0e:26:8e:64:90:24:1d:d8:f7:2e:98:fa:c3:9b:53:ed:f9: 92:a1:61:86:8f:03:86:2e:be:67:a8:7c:08:7b:39:11:1d:57: df:68:ec:bf:69:de:6c:84:6c:0a:0f:c2:2b:fa:85:39:1c:0f: 9e:0a:fa:87:05:92:d7:b9:da:c8:6a:55:81:5c:f4:57:6f:a4: c9:35:c4:b9:f3:eb:c9:1c:e7:9d:3c:12:cb:25:c7:c1:83:13: d1:96:03:79:91:48:60:f9:c8:ae:be:7e:0c:cf:28:2c:20:00: 33:99:6a:07:d6:ec:7a:33:48:e9:0f:68:58:1e:5d:3d:07:17: 95:14:0f:ca:51:b1:0a:47:37:d5:f1:d9:a3:93:c8:85:29:54: 0d:47:16:07:04:bb:9d:80:26:af:eb:46:dc:20:92:24:67:ae: b6:d6:2d:89:e9:a0:26:b0:ae:07:17:93:21:2e:ba:6d:2b:4e: a8:ca:35:8d:76:74:a6:f4:77:08:af:8c:04:58:2f:a2:4d:1c: 04:5d:08:4d:a5:11:19:8b:20:81:7b:90:ba:86:e5:4c:9f:85: 32:bd:8c:d1:c3:e8:97:8b:f3:6f:07:7b:0f:f1:11:04:e8:fb: 35:9a:5c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukAIEeWu2bqKHCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2RlYmUxNmUtZGU5Yy00OWE0LTgxNzUtZWVkNWRlYjZjNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfLmuuwC1hD1wu5drZw5CABZG56qP85R/jrJ K0/p7Fhy5N/7rnmynWTEiIzd322E5Xldd2bhPwIJYZ0pTwrUpLt/XmkcFxStQQa3 4nu/PtPsqef08ClKnHkjYbSLr7WbbqMtenHIisxZhmvmSYMTbdgARFNvzpBmwZh3 D5yTMpAUdHp1Pyc7IhQrPlAAAJi1Al1jtq8FSP+7CIlPN0vb6ByUFk0f3wXnWPX5 g98yu25XqesRb8mINc450cS6FOADulz0EJmXmANQ78dEd/yvDCZnqwwRF67ug735 xl6AVfOP5iOwaU3XScDWC4fAuu/TvYWpn2UvAA0dxThh86kTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFr12tkCRIiDrV3yi7QNJSvdEWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmEzMGU3M2YtYjk3OS0z ZmNiLThhNDEtNjJhYjVkNmUzMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRlSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApa31yRyNTAaxzwtyPfJ75k6DcOJo5kkCQd2PcumPrDm1Pt+ZKhYYaP A4YuvmeofAh7OREdV99o7L9p3myEbAoPwiv6hTkcD54K+ocFkte52shqVYFc9Fdv pMk1xLnz68kc5508Esslx8GDE9GWA3mRSGD5yK6+fgzPKCwgADOZagfW7HozSOkP aFgeXT0HF5UUD8pRsQpHN9Xx2aOTyIUpVA1HFgcEu52AJq/rRtwgkiRnrrbWLYnp oCawrgcXkyEuum0rTqjKNY12dKb0dwivjARYL6JNHARdCE2lERmLIIF7kLqG5Uyf hTK9jNHD6JeL828Hew/xEQTo+zWaXEE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:55:18 2025 by rpki-client