$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa File: 387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa (raw, json) Hash identifier: MvITsKRVwxftxQzprvT/y/7bxHsLVWzhFMPmkitXqv8= Subject key identifier: BE:C3:F3:8A:40:C0:00:9F:4B:27:9B:E3:FC:5D:6F:3F:1C:57:D6:3F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2F5F5C3BD2F82320AB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2f:5f:5c:3b:d2:f8:23:20:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=41fd3ee4-1331-419c-83cf-304dcee1be42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e8:ab:cf:98:e8:c4:07:36:82:7e:4f:7a:14: e4:0f:a3:83:c5:8f:98:06:33:4e:28:92:07:63:bc: d5:03:82:04:33:1b:c0:5c:3f:6d:b2:8c:81:53:6a: b9:be:77:8e:05:99:19:3c:aa:6b:b9:f5:53:0c:7c: 45:af:c1:68:51:90:a3:d4:ce:02:c8:4c:ca:5b:4f: ac:b9:47:e0:0e:c5:a0:30:97:b1:8b:1e:f2:da:a5: 5e:9c:c6:1e:33:c0:30:8f:53:33:6c:7f:bc:f5:89: 84:92:55:45:17:8c:f0:aa:44:31:a5:23:5f:fa:05: c0:b8:fb:80:00:8b:bc:c0:c7:84:dc:8d:70:26:4d: 64:07:9a:0c:b2:fa:ad:3f:78:c7:85:94:af:bc:81: 88:e6:10:b4:9f:8c:dd:19:4f:6b:4b:6d:97:e5:90: 62:7e:ef:87:4e:af:59:bd:d4:ec:ca:9d:b9:12:d3: ea:db:1d:6d:01:17:7e:4c:de:90:6e:82:bf:3f:23: fe:04:f8:96:d7:9a:14:81:72:bf:70:55:c2:e0:d7: af:24:40:01:2c:f6:db:15:1d:16:47:fa:ab:d6:4c: be:1a:a0:8d:be:26:24:a7:19:d8:11:ac:a7:95:ce: 3a:ac:22:6f:29:7c:58:82:4b:f6:40:92:74:04:03: 97:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C3:F3:8A:40:C0:00:9F:4B:27:9B:E3:FC:5D:6F:3F:1C:57:D6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a8:56:8a:87:f4:bb:4e:13:36:4d:1b:8f:eb:33:49:8c:75: 4f:d3:f8:b1:6f:b1:44:69:92:9e:10:d2:6b:ca:4a:de:2b:75: 46:42:bd:65:49:0d:2c:30:c5:84:ac:fc:83:a0:74:df:65:9f: 3f:1c:b1:84:71:6a:eb:b8:a2:9f:0c:89:3e:9b:3f:1c:f0:5a: 68:8b:69:0f:a6:e4:96:e4:f7:95:94:cf:c6:d5:39:4b:3a:1c: 8b:12:b1:0a:36:89:ed:1f:c2:b3:11:10:49:90:55:e9:9e:45: 48:93:0b:fe:20:36:e9:46:55:10:74:eb:05:d6:16:35:e0:90: 63:90:4a:45:97:9d:8b:57:54:e5:e7:f2:96:ed:72:e8:61:f0: 9d:f1:08:2c:cd:0c:6e:5a:90:ed:46:7f:f4:31:53:6d:43:92: 26:39:79:1f:13:1d:b7:a0:ae:da:e0:cc:59:c8:78:25:18:66: 01:08:46:8a:eb:55:b2:d2:e2:a3:c2:ef:98:cb:3e:d8:f6:93: 74:60:6f:bd:99:c1:78:02:f2:31:64:5f:c9:32:a2:49:40:43: 53:f3:a5:00:7b:ff:84:ff:6b:a1:2c:d8:ed:e4:9e:1a:9b:95: f9:78:f4:d6:9c:fa:59:8c:51:49:06:b9:b0:f3:37:4a:79:27: 52:fd:c8:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui9fXDvS+CMgq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDFmZDNlZTQtMTMzMS00MTljLTgzY2YtMzA0ZGNlZTFiZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+irz5joxAc2gn5PehTkD6ODxY+YBjNOKJIH Y7zVA4IEMxvAXD9tsoyBU2q5vneOBZkZPKprufVTDHxFr8FoUZCj1M4CyEzKW0+s uUfgDsWgMJexix7y2qVenMYeM8Awj1MzbH+89YmEklVFF4zwqkQxpSNf+gXAuPuA AIu8wMeE3I1wJk1kB5oMsvqtP3jHhZSvvIGI5hC0n4zdGU9rS22X5ZBifu+HTq9Z vdTsyp25EtPq2x1tARd+TN6QboK/PyP+BPiW15oUgXK/cFXC4NevJEABLPbbFR0W R/qr1ky+GqCNviYkpxnYEaynlc46rCJvKXxYgkv2QJJ0BAOXlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7D84pAwACfSyeb4/xdbz8cV9Y/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzg3Y2I4N2QtNmZlNy0z ZWM0LTgwYmYtNjA0YzAwYzkxZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCoVoqH9LtOEzZNG4/rM0mMdU/T+LFvsURpkp4Q0mvKSt4rdUZCvWVJ DSwwxYSs/IOgdN9lnz8csYRxauu4op8MiT6bPxzwWmiLaQ+m5Jbk95WUz8bVOUs6 HIsSsQo2ie0fwrMREEmQVemeRUiTC/4gNulGVRB06wXWFjXgkGOQSkWXnYtXVOXn 8pbtcuhh8J3xCCzNDG5akO1Gf/QxU21DkiY5eR8THbegrtrgzFnIeCUYZgEIRorr VbLS4qPC75jLPtj2k3Rgb72ZwXgC8jFkX8kyoklAQ1PzpQB7/4T/a6Es2O3knhqb lfl49Nac+lmMUUkGubDzN0p5J1L9yCM= -----END CERTIFICATE-----Generated at Sat Apr 26 21:45:51 2025 by rpki-client