$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa File: 8af8a31e-2de6-3582-8263-f79aff9c711e.roa (raw, json) Hash identifier: F11k/9QD7a6gaNfLJBhtLsupjipJ0+1CqDhNzQk9ClM= Subject key identifier: EB:41:1C:CC:46:A3:D6:BC:B8:33:0F:81:59:87:DD:A2:6F:32:BB:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2F7372E6C364B4E47080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.24.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2f:73:72:e6:c3:64:b4:e4:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=642cd79a-5c7b-499f-95be-a043892d4fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:ff:36:ee:dc:5b:3e:2f:2b:3d:a3:1d:ca: 2d:c3:fc:3a:10:ed:0d:25:62:74:19:52:f2:b9:82: ef:21:38:06:68:63:32:79:bc:1c:ee:b5:66:5b:8c: 21:56:7d:6b:68:f1:8d:4e:8b:0e:cd:3a:26:23:5b: f8:e2:b9:8a:8f:f0:4a:2d:d1:4a:99:5e:8f:ff:62: 9a:57:a7:b9:c1:b9:9d:28:16:8c:21:44:43:21:4a: df:b4:04:18:43:eb:bc:4e:8c:e1:a0:9d:8e:34:1b: 4b:a5:be:77:d6:45:e6:8c:e7:0d:52:53:60:a9:b2: 70:d4:bc:0e:38:c5:db:b0:42:3f:19:28:6e:04:d6: 50:12:0f:8c:be:0c:e9:47:7a:6b:0e:76:b0:0c:e9: 80:29:79:ff:86:75:11:84:10:c2:a3:d7:d8:f1:36: 7c:83:b7:55:58:85:d9:f7:7f:d3:6a:af:36:54:af: 5a:4b:7f:11:24:1c:2b:17:0a:72:fc:f0:6d:6b:7b: ae:1f:0c:74:2a:49:43:7b:9c:d6:c2:31:d6:3b:a8: 32:fc:83:25:bc:00:11:6f:d0:88:8a:7f:b1:7d:61: eb:54:60:db:1d:88:37:1f:9e:12:70:ec:17:33:6f: 75:b3:ae:8e:5b:89:17:3e:30:a8:15:b8:ad:2f:34: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:41:1C:CC:46:A3:D6:BC:B8:33:0F:81:59:87:DD:A2:6F:32:BB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f0:f4:94:f0:10:1c:62:9e:c5:18:e3:0b:ca:f5:3a:86:a5: c3:94:42:ab:d8:7e:a7:59:27:d1:bd:72:ef:12:f2:8c:42:78: 69:c4:7d:07:86:66:c9:91:35:e9:96:0a:dc:f9:ac:a5:52:b2: 5c:df:73:f3:83:61:93:a7:82:39:e5:e2:0f:fa:36:2a:da:4f: 4f:83:7a:dc:48:2e:76:52:05:96:ec:80:81:d9:2e:e5:37:16: f9:19:85:1f:a5:c7:81:44:42:8e:00:c1:d1:9f:5d:cf:b0:81: 8d:ac:10:b2:71:cd:76:0e:ba:50:fd:47:1c:3a:fe:5e:9b:82: b4:6f:fd:6f:c1:8f:f6:bc:89:6f:c3:a4:c5:02:74:e7:85:d5: 5d:93:47:a8:59:85:c1:d1:a2:e2:e9:a2:8b:bc:4f:56:6b:e3: 47:9f:56:ce:a9:7d:24:b9:6a:aa:5b:b2:f8:f5:6a:90:2f:09: 73:b8:0b:7b:a2:00:73:41:9e:ed:76:52:11:8e:9a:51:4e:26: ae:48:28:01:d3:ca:ef:8d:77:61:41:ae:53:87:ee:ec:f8:6d: b0:5d:df:d6:bc:6d:6d:15:d4:17:31:00:f3:be:89:b5:14:c3: 51:48:2d:9e:f3:18:9e:53:b5:5f:63:b9:e5:f1:b7:6c:d6:fd: d2:b4:af:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui9zcubDZLTkcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjQyY2Q3OWEtNWM3Yi00OTlmLTk1YmUtYTA0Mzg5MmQ0ZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnev/Nu7cWz4vKz2jHcotw/w6EO0NJWJ0GVLy uYLvITgGaGMyebwc7rVmW4whVn1raPGNTosOzTomI1v44rmKj/BKLdFKmV6P/2Ka V6e5wbmdKBaMIURDIUrftAQYQ+u8TozhoJ2ONBtLpb531kXmjOcNUlNgqbJw1LwO OMXbsEI/GShuBNZQEg+MvgzpR3prDnawDOmAKXn/hnURhBDCo9fY8TZ8g7dVWIXZ 93/Taq82VK9aS38RJBwrFwpy/PBta3uuHwx0KklDe5zWwjHWO6gy/IMlvAARb9CI in+xfWHrVGDbHYg3H54ScOwXM291s66OW4kXPjCoFbitLzQ3CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtBHMxGo9a8uDMPgVmH3aJvMruZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmOGEzMWUtMmRlNi0z NTgyLTgyNjMtZjc5YWZmOWM3MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/w9JTwEBxinsUY4wvK9TqGpcOUQqvYfqdZJ9G9cu8S8oxCeGnEfQeG ZsmRNemWCtz5rKVSslzfc/ODYZOngjnl4g/6NiraT0+DetxILnZSBZbsgIHZLuU3 FvkZhR+lx4FEQo4AwdGfXc+wgY2sELJxzXYOulD9Rxw6/l6bgrRv/W/Bj/a8iW/D pMUCdOeF1V2TR6hZhcHRouLpoou8T1Zr40efVs6pfSS5aqpbsvj1apAvCXO4C3ui AHNBnu12UhGOmlFOJq5IKAHTyu+Nd2FBrlOH7uz4bbBd39a8bW0V1BcxAPO+ibUU w1FILZ7zGJ5TtV9jueXxt2zW/dK0r+o= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:44 2025 by rpki-client