$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa File: 84e3b569-c77e-369f-9d81-aa06c2742984.roa (raw, json) Hash identifier: nC3HKl8V5pwtDcAmyCbbrQSESVKD1TXTBpAwGsmraF4= Subject key identifier: 1D:8F:5E:AD:5C:ED:B3:DC:1E:18:A7:FB:E2:2C:8B:DA:33:B1:C5:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4B0B10C397ED34DAC480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4b:0b:10:c3:97:ed:34:da:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=67b831a8-5747-4e1c-ba41-aff68c61b2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:d2:cc:4c:82:97:72:70:79:00:7f:6e:73: ed:c8:6b:92:29:17:95:ac:29:23:e6:f9:67:ac:90: 4c:18:64:60:99:6d:0a:44:93:d0:4c:80:17:1e:40: b7:96:4c:dc:07:72:a4:f3:5a:07:49:b8:3f:c8:46: b8:12:aa:7f:c8:8c:d5:4a:70:88:ab:eb:52:89:4f: eb:38:63:ac:5b:41:45:f6:52:2e:21:dc:e2:88:e5: f1:5b:d3:40:a9:ce:64:65:54:d4:8d:82:16:30:0f: da:fc:e6:9a:88:ef:a6:30:f9:fe:d3:ee:15:9b:ae: fb:d3:75:b6:9d:4c:91:40:8e:bb:61:69:69:2c:ac: 24:c1:17:76:44:da:92:34:eb:91:b7:88:92:54:c5: 3e:ed:f1:bc:5b:c6:31:48:5f:68:f1:4b:a9:07:0e: f7:54:c9:fa:99:b7:19:cc:96:c5:49:8e:40:88:32: b2:82:cc:25:1e:28:76:da:64:3c:e7:95:f6:36:0b: 0f:ba:37:f0:17:7e:e9:8f:f0:ff:14:c3:7d:87:ff: af:43:07:f0:fa:04:9d:fb:22:83:3a:e5:5d:a8:2a: c7:ac:de:1e:c9:c5:c5:de:53:29:2f:e7:b7:d1:bc: bf:44:13:60:c6:e5:68:6a:9f:34:65:3b:29:5a:0f: 48:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8F:5E:AD:5C:ED:B3:DC:1E:18:A7:FB:E2:2C:8B:DA:33:B1:C5:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:23:5b:86:8d:2d:df:1c:d6:b0:ea:12:ea:e9:e2:26:6c:da: f4:36:ff:fc:30:3c:98:4f:44:7c:6a:c7:c5:2b:5f:a5:23:93: ac:84:94:d6:ad:2e:13:cd:a4:0c:c7:5f:b9:5b:23:38:16:51: a2:d2:02:c8:5c:a6:8a:b8:46:15:97:b1:b2:a5:4e:ac:e4:5d: fd:dd:a8:d2:a7:ef:ea:f5:05:df:c3:41:1b:02:e9:7a:98:07: 08:e9:92:ba:b5:de:57:f3:8b:b2:7a:bf:20:2f:2e:60:05:10: 6b:af:c0:76:b7:a0:ed:70:75:9f:0a:88:2a:33:a4:e1:c0:7b: 81:22:ea:8e:9c:c5:3b:4e:cc:c9:cf:67:6f:fc:91:9d:93:6a: 7d:1b:1c:21:ab:b0:ac:9f:1e:dc:4a:7d:89:93:93:96:2a:ab: 65:78:65:3f:f5:79:61:76:24:29:ad:c6:d9:88:0f:2f:ab:b4: 3f:0b:45:59:2d:7b:d9:76:ce:8e:6f:78:72:88:a9:a7:a0:56: 08:3d:19:98:84:33:ca:07:fb:30:0a:45:2e:9b:3b:fb:fc:56: e5:e3:e0:04:2c:04:b7:0a:76:b3:29:62:d9:85:91:3e:1a:99: 0e:c9:04:1b:9b:e7:9d:99:c9:f4:61:f0:3e:ce:7d:76:7b:24: b7:81:f6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70sLEMOX7TTaxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NjdiODMxYTgtNTc0Ny00ZTFjLWJhNDEtYWZmNjhjNjFiMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSfSzEyCl3JweQB/bnPtyGuSKReVrCkj5vln rJBMGGRgmW0KRJPQTIAXHkC3lkzcB3Kk81oHSbg/yEa4Eqp/yIzVSnCIq+tSiU/r OGOsW0FF9lIuIdziiOXxW9NAqc5kZVTUjYIWMA/a/OaaiO+mMPn+0+4Vm67703W2 nUyRQI67YWlpLKwkwRd2RNqSNOuRt4iSVMU+7fG8W8YxSF9o8UupBw73VMn6mbcZ zJbFSY5AiDKygswlHih22mQ855X2NgsPujfwF37pj/D/FMN9h/+vQwfw+gSd+yKD OuVdqCrHrN4eycXF3lMpL+e30by/RBNgxuVoap80ZTspWg9IHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2PXq1c7bPcHhin++Isi9ozscWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRlM2I1NjktYzc3ZS0z NjlmLTlkODEtYWEwNmMyNzQyOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkjW4aNLd8c1rDqEurp4iZs2vQ2//wwPJhPRHxqx8UrX6Ujk6yElNat LhPNpAzHX7lbIzgWUaLSAshcpoq4RhWXsbKlTqzkXf3dqNKn7+r1Bd/DQRsC6XqY Bwjpkrq13lfzi7J6vyAvLmAFEGuvwHa3oO1wdZ8KiCozpOHAe4Ei6o6cxTtOzMnP Z2/8kZ2Tan0bHCGrsKyfHtxKfYmTk5Yqq2V4ZT/1eWF2JCmtxtmIDy+rtD8LRVkt e9l2zo5veHKIqaegVgg9GZiEM8oH+zAKRS6bO/v8VuXj4AQsBLcKdrMpYtmFkT4a mQ7JBBub552ZyfRh8D7OfXZ7JLeB9gA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:30:35 2025 by rpki-client