$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b973fbf-d3c0-3e37-95cb-e7aa25e7947c.roa File: 2b973fbf-d3c0-3e37-95cb-e7aa25e7947c.roa (raw, json) Hash identifier: 6I/zb0hCECE9MwVj3KBYu6H0N01gVAqyv46q+w69x5E= Subject key identifier: C9:3E:24:24:EE:67:54:66:70:37:14:28:98:5F:6F:E9:21:CB:5E:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2EF494318D78DFAF1CC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b973fbf-d3c0-3e37-95cb-e7aa25e7947c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2e:f4:94:31:8d:78:df:af:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ddf780fd-31eb-4b9b-9e8f-39d48060656f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:e6:4f:7b:bc:41:80:d3:f9:a2:36:03:25: c3:5c:22:87:eb:00:a6:61:a9:d3:b8:e4:bc:03:64: 6a:a9:9a:34:e9:a0:40:34:35:2d:2e:0b:e2:f4:89: 6d:4a:38:54:c3:74:28:4a:82:9d:ec:8c:1a:3b:2c: b5:57:9f:cb:2c:6b:c2:f7:3a:04:c8:1c:40:9a:31: 90:7a:cc:9f:aa:fb:42:3a:af:60:bc:0c:7c:87:14: 8f:a9:86:0f:19:90:02:9b:96:85:e2:2f:38:29:07: dc:b9:21:55:c4:cf:3a:dd:75:85:ea:fc:4a:6e:1f: cb:0b:2e:d9:79:8e:1a:33:9e:ce:7b:72:d8:5b:a8: f3:a1:80:e7:24:88:f8:07:4f:f1:84:45:af:9d:00: 92:d8:51:5e:52:8c:78:37:0b:7e:cc:46:e7:2d:32: 3b:ab:c8:dc:fa:c2:3b:65:f4:c3:fb:ac:ab:04:3f: 30:83:00:b0:2f:3d:c0:0d:fe:27:62:a2:5f:2b:2b: 34:af:cd:dc:f4:e6:a8:ee:89:92:aa:72:27:54:64: 87:94:a7:43:77:84:ab:e7:f3:1b:42:18:ef:f2:dc: cc:08:27:b9:bf:2b:66:c0:cb:b0:ef:a2:36:e2:70: f3:88:16:cd:0c:a5:01:77:a6:39:c8:6e:bd:b5:0a: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3E:24:24:EE:67:54:66:70:37:14:28:98:5F:6F:E9:21:CB:5E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b973fbf-d3c0-3e37-95cb-e7aa25e7947c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:af:4b:48:4e:f8:18:e2:8c:e3:3f:46:79:7b:6f:76:68:4b: ba:dd:44:c4:12:d2:a5:1c:29:db:62:27:dd:fa:59:71:42:a2: 2b:56:5a:43:5f:b0:04:dc:c5:69:35:5f:06:b7:a8:36:64:98: 7f:65:15:8f:83:e1:fd:56:00:a8:6c:06:22:f9:d9:7a:f1:37: 41:c3:bc:21:26:79:f3:d5:be:8a:1f:da:3e:39:ae:66:34:4d: 9a:f8:d3:3f:8f:cd:e6:d5:09:a1:40:fc:ae:82:56:c7:65:69: 34:24:9c:7e:2e:bb:4d:9f:db:43:2c:a3:45:b0:43:fa:62:dd: 2e:05:4a:3f:94:bf:af:6c:ea:aa:7b:3a:10:77:3e:42:7b:90: d5:be:0c:cd:0e:13:c9:76:73:6b:59:62:79:bf:45:23:7e:dc: c6:3c:b7:14:41:56:9a:5c:74:ef:cf:0d:07:78:65:82:83:92: b7:c3:48:45:68:b7:0f:6c:87:89:b6:5a:19:cf:55:10:37:b1: 79:24:87:2f:0c:3d:98:77:6c:c7:40:3b:2c:d1:c9:cf:91:2a: ba:7d:f8:ed:f0:41:8f:46:6c:fe:99:53:fe:2a:ee:6a:74:78: 85:4d:ca:84:ba:d6:18:bc:6e:6e:bb:0a:e6:8b:6c:6c:0f:c6: 37:65:72:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui70lDGNeN+vHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGRmNzgwZmQtMzFlYi00YjliLTllOGYtMzlkNDgwNjA2NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4fmT3u8QYDT+aI2AyXDXCKH6wCmYanTuOS8 A2RqqZo06aBANDUtLgvi9IltSjhUw3QoSoKd7IwaOyy1V5/LLGvC9zoEyBxAmjGQ esyfqvtCOq9gvAx8hxSPqYYPGZACm5aF4i84KQfcuSFVxM863XWF6vxKbh/LCy7Z eY4aM57Oe3LYW6jzoYDnJIj4B0/xhEWvnQCS2FFeUox4Nwt+zEbnLTI7q8jc+sI7 ZfTD+6yrBD8wgwCwLz3ADf4nYqJfKys0r83c9Oao7omSqnInVGSHlKdDd4Sr5/Mb Qhjv8tzMCCe5vytmwMuw76I24nDziBbNDKUBd6Y5yG69tQoC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk+JCTuZ1RmcDcUKJhfb+khy16fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmI5NzNmYmYtZDNjMC0z ZTM3LTk1Y2ItZTdhYTI1ZTc5NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHivS0hO+BjijOM/Rnl7b3ZoS7rdRMQS0qUcKdtiJ936WXFCoitWWkNf sATcxWk1Xwa3qDZkmH9lFY+D4f1WAKhsBiL52XrxN0HDvCEmefPVvoof2j45rmY0 TZr40z+PzebVCaFA/K6CVsdlaTQknH4uu02f20Mso0WwQ/pi3S4FSj+Uv69s6qp7 OhB3PkJ7kNW+DM0OE8l2c2tZYnm/RSN+3MY8txRBVppcdO/PDQd4ZYKDkrfDSEVo tw9sh4m2WhnPVRA3sXkkhy8MPZh3bMdAOyzRyc+RKrp9+O3wQY9GbP6ZU/4q7mp0 eIVNyoS61hi8bm67CuaLbGwPxjdlckA= -----END CERTIFICATE-----Generated at Sun Apr 27 06:12:36 2025 by rpki-client