$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fef5b18-1101-33fe-94e4-3854402a4e7a.roa File: 3fef5b18-1101-33fe-94e4-3854402a4e7a.roa (raw, json) Hash identifier: Mpuj4RmmcOyA2u5EbbGItAZQPAXtyq9coT/+yz0V0Hw= Subject key identifier: FA:C9:7D:85:B7:F2:55:D9:01:D9:8F:88:F9:F5:E2:9D:57:9F:8B:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A8F579A524FF26773D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fef5b18-1101-33fe-94e4-3854402a4e7a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a8:f5:79:a5:24:ff:26:77:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=743adbcb-face-4040-89de-2326359c17c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:29:3d:ac:95:07:39:68:69:e5:ab:80:44: 9e:db:2f:eb:64:dd:66:b7:3c:e1:e2:d6:2a:a7:85: b1:f8:9a:a1:f0:7a:3a:55:16:47:36:33:c7:dd:0f: d8:cc:18:c3:fb:12:97:3f:0c:dc:c2:e7:c9:5f:9d: b4:1a:8a:6c:d6:ba:11:b3:7e:53:1a:d9:3d:ac:5c: af:ad:23:29:c8:99:4c:95:a2:0d:9e:6c:ea:8b:e8: 06:ec:ce:1b:7d:ce:8c:f1:bf:e4:1a:ba:cc:65:8d: 91:0f:85:9b:88:9f:2e:e7:cb:16:b2:5f:01:3e:39: a3:b8:f9:2a:dd:8e:c7:01:b9:28:be:8d:8c:bc:3e: d0:51:7f:f4:cb:d9:0e:7f:0f:7e:8c:de:0c:27:96: e2:69:bd:06:48:18:c6:66:c2:90:3b:06:b2:9a:fa: aa:9a:3a:bf:4b:07:56:72:c9:b1:13:24:b8:73:76: 1c:b5:11:62:fa:50:36:09:a2:75:5b:64:ea:1f:a1: 4e:89:3a:75:1a:99:03:77:0e:2f:eb:d2:0b:3c:43: 20:e5:43:25:07:fe:b4:6a:7c:cd:db:f8:dc:3e:98: 09:e8:b3:fd:81:ee:fe:8c:63:a1:1e:e0:2b:21:54: 0e:50:df:35:a2:72:91:a0:99:85:74:91:76:3e:24: 94:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C9:7D:85:B7:F2:55:D9:01:D9:8F:88:F9:F5:E2:9D:57:9F:8B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fef5b18-1101-33fe-94e4-3854402a4e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c9:24:59:66:f2:97:45:2a:86:dd:b2:21:a3:b0:16:a2:aa: e8:48:8a:0d:01:a3:ea:df:25:ef:e4:5e:c3:64:5c:e2:03:e4: 85:07:2d:fd:71:65:af:80:da:9d:88:76:3b:0c:20:22:6f:2f: 75:d4:2d:fe:ef:4e:80:69:1e:27:3d:6f:36:f5:c5:aa:5f:c8: 94:82:97:f7:7d:af:c8:aa:13:7a:20:4a:18:aa:cc:21:d7:48: 0f:77:04:d3:37:b8:ce:ac:fe:b5:d8:eb:4b:f4:f9:42:5b:93: 77:b7:d5:03:17:92:8e:b7:3d:a7:33:ed:4a:83:6d:06:77:58: 7c:25:cf:90:2e:d9:53:af:79:e2:eb:ae:c9:61:34:75:4a:7d: 0d:36:b8:64:30:01:19:9c:f4:e5:ff:09:c8:65:2c:c3:07:ae: 9f:2d:d2:28:0f:93:50:9a:9f:38:ac:d9:4d:17:5f:4f:1b:9f: a3:69:b2:8b:6d:1b:b1:e1:06:e1:3e:7a:4f:d1:ff:b8:ed:7c: c7:d5:8f:a3:7b:69:1d:25:23:39:38:58:32:88:1f:bd:6d:9a: 48:35:b8:45:95:4c:0e:0b:6e:46:fd:b9:0c:c8:71:44:a5:48: ee:52:3d:49:4a:59:39:2c:b9:08:0e:c7:99:25:40:c9:f6:81: cd:a1:29:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKj1eaUk/yZ3PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzQzYWRiY2ItZmFjZS00MDQwLTg5ZGUtMjMyNjM1OWMxN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApscpPayVBzloaeWrgESe2y/rZN1mtzzh4tYq p4Wx+Jqh8Ho6VRZHNjPH3Q/YzBjD+xKXPwzcwufJX520Gops1roRs35TGtk9rFyv rSMpyJlMlaINnmzqi+gG7M4bfc6M8b/kGrrMZY2RD4WbiJ8u58sWsl8BPjmjuPkq 3Y7HAbkovo2MvD7QUX/0y9kOfw9+jN4MJ5biab0GSBjGZsKQOwaymvqqmjq/SwdW csmxEyS4c3YctRFi+lA2CaJ1W2TqH6FOiTp1GpkDdw4v69ILPEMg5UMlB/60anzN 2/jcPpgJ6LP9ge7+jGOhHuArIVQOUN81onKRoJmFdJF2PiSUmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrJfYW38lXZAdmPiPn14p1Xn4tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZlZjViMTgtMTEwMS0z M2ZlLTk0ZTQtMzg1NDQwMmE0ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRe4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/JJFlm8pdFKobdsiGjsBaiquhIig0Bo+rfJe/kXsNkXOID5IUHLf1x Za+A2p2IdjsMICJvL3XULf7vToBpHic9bzb1xapfyJSCl/d9r8iqE3ogShiqzCHX SA93BNM3uM6s/rXY60v0+UJbk3e31QMXko63Pacz7UqDbQZ3WHwlz5Au2VOveeLr rslhNHVKfQ02uGQwARmc9OX/CchlLMMHrp8t0igPk1Canzis2U0XX08bn6Npsott G7HhBuE+ek/R/7jtfMfVj6N7aR0lIzk4WDKIH71tmkg1uEWVTA4Lbkb9uQzIcUSl SO5SPUlKWTksuQgOx5klQMn2gc2hKcI= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:32 2025 by rpki-client