$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa File: 76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa (raw, json) Hash identifier: VDACmsNB8DWsqztCeGbmryhfB6AuheWRO7zwZ8dEc6Q= Subject key identifier: 66:20:7C:FD:0F:51:71:7F:87:6C:55:2F:BE:ED:B0:43:2C:54:25:B1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CCE2CD7A1C8E95FBCAB580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa Signing time: Thu 24 Apr 2025 11:51:47 +0000 ROA not before: Thu 24 Apr 2025 11:51:47 +0000 ROA not after: Wed 23 Jul 2025 11:51:47 +0000 asID: 19905 IP address blocks: 173.19.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cc:e2:cd:7a:1c:8e:95:fb:ca:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:51:47 2025 GMT Not After : Jul 23 11:51:47 2025 GMT Subject: CN=1bf1a4c6-a2a9-4332-81b0-ef15e0bd649f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:ed:74:1b:44:aa:18:db:2f:ef:e4:31:54: 63:d9:fe:49:99:3b:19:56:fc:bd:d4:42:8c:90:89: 46:f4:c1:aa:ec:c7:10:62:66:83:91:d8:90:ff:1b: 1a:39:cb:ed:d4:c9:7c:99:0b:d4:f2:1b:4c:c3:e5: df:c3:3e:fc:f3:8b:1d:0d:de:c1:96:04:4b:1b:a8: 5c:0a:9a:2d:e3:f9:72:18:2b:1f:db:23:a4:c8:6c: a6:68:24:e8:35:a5:c3:98:41:1e:66:52:d3:34:f8: f9:7b:39:29:b4:5c:c0:e2:6e:60:c8:4c:11:93:e7: a7:d2:c9:0e:bd:3a:db:07:f7:fc:7a:6a:a5:30:27: 55:0e:6c:9f:da:e7:fa:03:84:65:08:38:96:2f:eb: 85:a3:2d:d3:ca:6f:ee:1d:10:38:27:ad:ba:6f:76: 47:12:77:f8:e7:fc:ac:de:35:da:43:5c:5f:f4:3e: 72:42:dd:f0:c6:63:82:0b:d8:7a:63:00:0b:d4:f0: dc:17:65:8c:47:fc:84:42:97:7d:b0:43:80:7a:cc: 93:4f:d0:00:b9:92:0b:3d:f6:b9:9e:71:02:25:47: 42:bb:07:01:70:fe:81:1e:67:5e:e2:0c:03:fc:b8: 1c:97:1a:44:03:a1:d7:08:a1:95:0b:fc:5c:ab:0b: de:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:20:7C:FD:0F:51:71:7F:87:6C:55:2F:BE:ED:B0:43:2C:54:25:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:15:31:c1:f9:a8:cb:7c:37:b5:31:d4:5d:5a:95:2e:5d:a8: c8:d5:ce:48:c1:5e:c7:5a:7d:a5:d8:23:c3:b5:a0:b7:a3:d7: 03:d9:7d:11:93:63:e5:f2:b7:b8:b0:e1:9a:99:f0:1f:93:1a: 4e:03:87:43:87:10:ba:6e:a4:28:ed:dd:05:1d:d5:3f:39:32: 2a:43:a4:ab:e2:11:63:a1:dd:14:1d:21:ac:1c:00:2c:63:e6: 7e:9b:56:57:58:2a:a8:67:4c:35:3e:6e:f8:5c:68:6a:b4:0b: 97:31:aa:69:54:52:4d:28:9c:73:d7:51:fc:ed:48:9a:9d:cf: d8:39:b4:92:78:38:8d:b2:6b:bd:fb:10:37:b8:ab:72:59:25: 30:15:aa:50:8f:54:61:6f:fa:e9:4b:fe:51:bb:45:4c:87:43: d1:10:73:91:d0:5b:43:a8:ad:6b:54:7e:58:1d:f7:4d:93:ed: 0a:01:47:b5:7f:71:31:fd:69:63:8a:a7:ca:16:9d:e8:e5:4a: 90:41:b9:c4:3c:3c:c8:25:25:e1:9e:08:c5:47:e8:bf:10:f4: 32:8e:c6:7d:25:cc:6c:b6:c0:88:15:0c:60:ca:57:b9:e3:38: 08:1a:79:9e:0b:e0:0f:8c:41:2a:4b:30:f6:71:4a:c7:c4:24: 3d:a1:50:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzOLNehyOlfvKtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTE0N1oXDTI1MDcyMzExNTE0N1owLzEtMCsGA1UEAxMk MWJmMWE0YzYtYTJhOS00MzMyLTgxYjAtZWYxNWUwYmQ2NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+3tdBtEqhjbL+/kMVRj2f5JmTsZVvy91EKM kIlG9MGq7McQYmaDkdiQ/xsaOcvt1Ml8mQvU8htMw+Xfwz7884sdDd7BlgRLG6hc Cpot4/lyGCsf2yOkyGymaCToNaXDmEEeZlLTNPj5ezkptFzA4m5gyEwRk+en0skO vTrbB/f8emqlMCdVDmyf2uf6A4RlCDiWL+uFoy3Tym/uHRA4J626b3ZHEnf45/ys 3jXaQ1xf9D5yQt3wxmOCC9h6YwAL1PDcF2WMR/yEQpd9sEOAesyTT9AAuZILPfa5 nnECJUdCuwcBcP6BHmde4gwD/LgclxpEA6HXCKGVC/xcqwvexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYgfP0PUXF/h2xVL77tsEMsVCWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzZlNjBlYzktYmZhNy0z NDg5LTlmMGUtMGU2M2IzODQ5Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwVMcH5qMt8N7Ux1F1alS5dqMjVzkjBXsdafaXYI8O1oLej1wPZfRGT Y+Xyt7iw4ZqZ8B+TGk4Dh0OHELpupCjt3QUd1T85MipDpKviEWOh3RQdIawcACxj 5n6bVldYKqhnTDU+bvhcaGq0C5cxqmlUUk0onHPXUfztSJqdz9g5tJJ4OI2ya737 EDe4q3JZJTAVqlCPVGFv+ulL/lG7RUyHQ9EQc5HQW0OorWtUflgd902T7QoBR7V/ cTH9aWOKp8oWnejlSpBBucQ8PMglJeGeCMVH6L8Q9DKOxn0lzGy2wIgVDGDKV7nj OAgaeZ4L4A+MQSpLMPZxSsfEJD2hUOg= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:55 2025 by rpki-client