$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ed12989-2f15-3755-bf5f-09876c087bba.roa File: 4ed12989-2f15-3755-bf5f-09876c087bba.roa (raw, json) Hash identifier: yghTIapD+suJOSjhKbrXLDEoGDXMBXNB/JKkjSI2cmY= Subject key identifier: 3F:23:B9:8D:55:01:95:FC:0F:D0:53:A0:72:4C:55:A0:EE:96:07:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CCE4A03FA88002A0691600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ed12989-2f15-3755-bf5f-09876c087bba.roa Signing time: Thu 24 Apr 2025 11:51:48 +0000 ROA not before: Thu 24 Apr 2025 11:51:48 +0000 ROA not after: Wed 23 Jul 2025 11:51:48 +0000 asID: 19905 IP address blocks: 173.20.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cc:e4:a0:3f:a8:80:02:a0:69:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:51:48 2025 GMT Not After : Jul 23 11:51:48 2025 GMT Subject: CN=1bf2aeb6-d418-4af7-bbaa-ead76a1dcda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:58:e2:a9:d2:34:94:fb:16:24:91:19:e9:6c: 56:cd:15:01:7a:2b:35:8d:66:a7:b6:64:0d:af:fd: db:77:6b:a3:34:3c:84:17:cb:a2:c5:82:9a:26:42: 2d:86:e2:43:61:99:ca:5e:b8:8e:e0:68:39:15:cb: b9:f5:95:0b:d4:c3:56:29:30:3e:b9:c8:79:08:a8: 6f:00:08:21:2c:29:14:58:9e:c5:d1:89:77:1d:fb: e6:68:e1:4f:3c:af:8f:57:15:83:91:ba:56:6d:ed: a0:81:82:06:5b:ed:ee:0c:c6:fc:d0:67:48:7f:18: 7e:90:0f:99:de:d5:56:c5:01:36:6e:69:44:47:b7: 46:01:90:e6:c5:52:7c:6e:ad:b8:20:32:1f:7b:21: 30:83:28:ee:3a:8b:36:2a:d5:40:39:b2:b4:11:87: 37:1a:10:7a:a2:c2:1c:7f:63:40:3f:fc:11:47:97: c8:d6:e3:75:68:31:86:99:cc:cc:86:a6:ec:8c:a6: 95:27:74:4c:01:4e:ff:85:2b:95:0c:06:de:53:01: 52:d7:49:a3:b3:d0:e3:ec:ba:25:59:b9:48:ef:32: e4:22:59:bc:95:c6:ee:61:8b:5a:1a:ca:bd:44:8f: c0:ec:75:56:0d:d2:95:55:2b:f6:5c:24:39:f2:8f: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:23:B9:8D:55:01:95:FC:0F:D0:53:A0:72:4C:55:A0:EE:96:07:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ed12989-2f15-3755-bf5f-09876c087bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:45:4b:ce:16:82:55:c4:1c:b1:5f:ab:2c:e8:b7:e5:7c:81: 23:db:7d:17:ba:2d:51:ed:f3:83:00:d4:b3:dd:d4:61:bf:db: e2:c7:c2:90:c1:31:e3:3e:51:c8:e0:9b:56:36:95:65:42:a2: 70:50:61:bb:35:e5:9c:7c:6f:f1:f2:36:a3:65:7b:e3:44:1a: 9c:39:1b:8c:3d:51:bf:0f:37:a4:20:e1:87:bf:ad:c9:e2:c7: f1:fc:18:2a:38:f3:3e:25:4a:da:69:d5:9e:78:b5:ad:de:c7: a9:ba:6f:a8:1c:ca:e4:31:67:2c:24:9c:b2:c3:0b:09:1e:30: 0a:80:b9:e4:7b:4c:56:36:39:0d:ff:51:36:c9:4c:43:13:52: db:6a:d2:e5:3b:8a:59:79:1d:20:9f:c5:23:13:ac:26:d6:f2: ce:f0:be:9f:4f:2e:93:5c:1c:74:29:77:54:82:9e:05:4d:af: 3c:ec:52:c9:03:ba:78:11:58:40:14:1e:ed:32:a3:a9:9d:55: 95:f3:60:26:ec:56:22:6d:4b:0b:27:6c:7b:73:bf:6e:24:a3: ff:d4:d7:6d:7b:92:32:86:3e:d0:c8:bc:79:4c:1c:01:33:7f: b8:29:f6:f9:2a:47:68:52:6f:f0:56:e3:49:7e:8d:53:68:93: 81:43:b4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzOSgP6iAAqBpFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTE0OFoXDTI1MDcyMzExNTE0OFowLzEtMCsGA1UEAxMk MWJmMmFlYjYtZDQxOC00YWY3LWJiYWEtZWFkNzZhMWRjZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFjiqdI0lPsWJJEZ6WxWzRUBeis1jWantmQN r/3bd2ujNDyEF8uixYKaJkIthuJDYZnKXriO4Gg5Fcu59ZUL1MNWKTA+uch5CKhv AAghLCkUWJ7F0Yl3HfvmaOFPPK+PVxWDkbpWbe2ggYIGW+3uDMb80GdIfxh+kA+Z 3tVWxQE2bmlER7dGAZDmxVJ8bq24IDIfeyEwgyjuOos2KtVAObK0EYc3GhB6osIc f2NAP/wRR5fI1uN1aDGGmczMhqbsjKaVJ3RMAU7/hSuVDAbeUwFS10mjs9Dj7Lol WblI7zLkIlm8lcbuYYtaGsq9RI/A7HVWDdKVVSv2XCQ58o+o2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8juY1VAZX8D9BToHJMVaDulgeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGVkMTI5ODktMmYxNS0z NzU1LWJmNWYtMDk4NzZjMDg3YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBFS84WglXEHLFfqyzot+V8gSPbfRe6LVHt84MA1LPd1GG/2+LHwpDB MeM+Ucjgm1Y2lWVConBQYbs15Zx8b/HyNqNle+NEGpw5G4w9Ub8PN6Qg4Ye/rcni x/H8GCo48z4lStpp1Z54ta3ex6m6b6gcyuQxZywknLLDCwkeMAqAueR7TFY2OQ3/ UTbJTEMTUttq0uU7ill5HSCfxSMTrCbW8s7wvp9PLpNcHHQpd1SCngVNrzzsUskD ungRWEAUHu0yo6mdVZXzYCbsViJtSwsnbHtzv24ko//U1217kjKGPtDIvHlMHAEz f7gp9vkqR2hSb/BW40l+jVNok4FDtJU= -----END CERTIFICATE-----Generated at Sun Jun 15 01:54:12 2025 by rpki-client