$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa File: 3c427830-987a-3e1f-b4e3-0546d0f346af.roa (raw, json) Hash identifier: WfLoQU5c7L98hCnDqBc8QLPfEWhgb63p4aWJE17Il+s= Subject key identifier: F9:20:44:22:5D:77:37:A6:0F:B5:38:C1:A1:4A:A8:3F:5B:36:C0:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDC9577CBE823368232D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa Signing time: Thu 24 Apr 2025 11:53:36 +0000 ROA not before: Thu 24 Apr 2025 11:53:36 +0000 ROA not after: Wed 23 Jul 2025 11:53:36 +0000 asID: 19905 IP address blocks: 173.23.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:c9:57:7c:be:82:33:68:23:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:36 2025 GMT Not After : Jul 23 11:53:36 2025 GMT Subject: CN=a0c7fa7a-239c-418a-9641-02559b6e4fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:c3:c4:c6:e2:28:0f:43:6d:0f:72:72:c3: 39:4a:28:1d:cb:1b:38:74:bf:4b:c6:08:07:96:a2: f1:1f:ea:32:05:76:cc:99:7c:52:57:cf:d9:34:75: 68:ba:1e:bb:ab:f3:70:11:75:2e:9e:5a:6a:2c:71: 9e:94:d0:5b:f6:1f:c0:b8:ec:c6:f4:b1:85:3c:32: 1b:22:54:d6:5f:e0:a1:94:e6:79:82:b7:3c:af:5e: 59:0f:07:9a:b0:e6:f6:a5:98:5b:0c:8f:51:e0:76: 0c:ba:2d:b8:fc:57:d3:17:19:38:7f:4a:3a:13:3a: 9e:50:fc:2b:f2:4c:7e:9e:61:8f:d1:82:a0:23:6c: 51:04:ef:cf:2e:ed:be:37:20:2c:75:58:9a:38:56: 72:b1:2a:47:49:d9:9a:92:bc:80:e0:aa:a3:c3:6f: 7a:a2:12:f7:24:31:f9:bb:b2:cc:4c:34:59:b5:87: 75:a4:c5:70:1e:d1:c2:4f:29:38:16:4e:e4:c4:17: 9f:c4:f6:a5:09:96:8a:a8:5e:e3:d3:8a:07:e3:6c: 52:81:a6:97:4d:b0:4b:0f:a3:8f:6f:8c:0d:e5:f8: 52:1f:f9:3c:85:68:3d:43:71:43:97:bb:78:d6:a4: 59:a4:0d:c7:56:35:85:28:56:38:80:3f:4c:a3:f7: 60:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:20:44:22:5D:77:37:A6:0F:B5:38:C1:A1:4A:A8:3F:5B:36:C0:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:93:6d:55:39:d4:c1:e7:c1:fa:a7:95:5d:8a:f6:d2:9b:e8: 21:66:4b:59:c2:89:df:01:f8:8e:3e:d8:62:bc:9e:44:e4:06: f2:27:3b:b6:08:7b:99:5d:82:49:ea:a7:36:27:f7:18:d4:f2: 27:f3:50:86:b4:81:4d:0d:47:10:6f:7a:40:90:c7:6d:31:c1: af:75:ac:7e:9d:6d:78:56:d1:0a:3e:f5:ee:7d:90:ef:64:ab: 90:3e:a4:a7:37:80:f6:9e:90:27:95:4a:8c:67:ea:d0:c5:7e: 54:09:77:0e:44:ea:c5:db:fa:e5:eb:ce:5b:57:51:80:c6:56: da:56:30:c2:85:96:86:04:06:ca:5f:0c:32:8a:6d:ec:14:38: 05:5e:70:fe:e5:b7:d4:b1:93:55:46:eb:a1:e8:ec:b0:1f:6a: f4:3e:9e:78:dd:39:cd:be:a4:17:ef:ee:19:0c:d2:ee:53:81: 15:c7:3c:f6:09:e3:f6:81:04:cc:c4:90:3f:41:9f:03:13:39: 15:4f:75:5b:7f:ef:6c:05:16:d2:8a:62:b8:ce:25:33:1f:2e: 95:ab:39:b1:15:d7:e7:38:62:3f:b5:78:09:25:ab:65:ae:ef: 1e:dd:37:3c:79:b9:6c:71:18:d3:b1:47:3f:ca:dc:22:66:97: 01:85:c0:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzclXfL6CM2gjLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTMzNloXDTI1MDcyMzExNTMzNlowLzEtMCsGA1UEAxMk YTBjN2ZhN2EtMjM5Yy00MThhLTk2NDEtMDI1NTliNmU0ZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmfDxMbiKA9DbQ9ycsM5Sigdyxs4dL9LxggH lqLxH+oyBXbMmXxSV8/ZNHVouh67q/NwEXUunlpqLHGelNBb9h/AuOzG9LGFPDIb IlTWX+ChlOZ5grc8r15ZDweasOb2pZhbDI9R4HYMui24/FfTFxk4f0o6EzqeUPwr 8kx+nmGP0YKgI2xRBO/PLu2+NyAsdViaOFZysSpHSdmakryA4Kqjw296ohL3JDH5 u7LMTDRZtYd1pMVwHtHCTyk4Fk7kxBefxPalCZaKqF7j04oH42xSgaaXTbBLD6OP b4wN5fhSH/k8hWg9Q3FDl7t41qRZpA3HVjWFKFY4gD9Mo/dgkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkgRCJddzemD7U4waFKqD9bNsALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2M0Mjc4MzAtOTg3YS0z ZTFmLWI0ZTMtMDU0NmQwZjM0NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWTbVU51MHnwfqnlV2K9tKb6CFmS1nCid8B+I4+2GK8nkTkBvInO7YI e5ldgknqpzYn9xjU8ifzUIa0gU0NRxBvekCQx20xwa91rH6dbXhW0Qo+9e59kO9k q5A+pKc3gPaekCeVSoxn6tDFflQJdw5E6sXb+uXrzltXUYDGVtpWMMKFloYEBspf DDKKbewUOAVecP7lt9Sxk1VG66Ho7LAfavQ+nnjdOc2+pBfv7hkM0u5TgRXHPPYJ 4/aBBMzEkD9BnwMTORVPdVt/72wFFtKKYrjOJTMfLpWrObEV1+c4Yj+1eAklq2Wu 7x7dNzx5uWxxGNOxRz/K3CJmlwGFwFE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:59 2025 by rpki-client