$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/936ec917-e177-334e-a14b-24b549dcaca5.roa File: 936ec917-e177-334e-a14b-24b549dcaca5.roa (raw, json) Hash identifier: uWNNcyMN7N9IOYLg/732za0rbK2THHlC1CNPLLHaDDQ= Subject key identifier: 82:EF:47:60:81:53:BE:0D:1C:C9:7A:42:E8:AB:18:12:4C:A5:DC:8C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FEF8967E3C151AA52E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/936ec917-e177-334e-a14b-24b549dcaca5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fe:f8:96:7e:3c:15:1a:a5:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=eafcbddf-52a4-43a6-9ed4-4ee8c945ef59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:07:e5:4e:b2:db:5d:6a:ba:27:16:42:13: 23:04:3a:1c:30:b1:53:be:57:15:a3:03:14:ae:a1: ad:23:f9:ec:7e:24:23:82:20:2a:57:6a:7b:a9:b7: 37:bd:3c:ee:8b:df:4b:65:8f:8e:92:d0:62:66:9f: 49:26:98:e0:66:b8:6e:50:04:e1:ff:88:e9:56:8f: d4:36:da:f3:53:9f:ce:ae:4f:26:ae:f4:7c:bb:32: 56:0d:02:0b:c3:14:be:45:3c:92:33:02:f0:9c:5b: 42:8f:08:76:b0:a8:49:32:c2:ef:6a:56:01:d7:f4: f2:7b:67:df:16:d7:07:33:a6:67:db:75:34:31:90: 3f:1b:1a:98:8a:97:e1:47:10:20:39:56:60:3a:fd: d6:de:58:a1:66:29:27:f0:6b:8e:74:23:64:bf:b4: 53:4f:7d:ed:e0:d2:6e:f3:aa:94:c0:4b:6f:c0:68: 62:8c:2f:4a:83:9d:da:5d:aa:c6:5d:29:e8:b0:02: a2:a6:ec:fb:d8:72:91:93:bf:3c:e1:5c:f9:f0:e7: 9f:21:f3:50:cd:1c:43:ef:08:dc:c2:db:b1:92:83: 62:78:a5:db:2a:11:84:fe:48:85:52:e9:5f:7f:81: 03:a5:ed:24:79:97:96:54:a5:a3:0b:a8:f9:df:23: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EF:47:60:81:53:BE:0D:1C:C9:7A:42:E8:AB:18:12:4C:A5:DC:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/936ec917-e177-334e-a14b-24b549dcaca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:49:5b:29:4d:67:7a:60:1b:ee:37:11:de:b4:90:b5:cf:08: 8a:02:05:85:a5:a5:1a:d0:e1:19:6a:6d:59:34:d9:ee:1c:4f: f6:5f:9e:da:cd:54:2f:94:b6:e7:84:4b:be:14:ca:38:84:c7: 82:fe:85:56:cf:b0:03:a8:73:62:ea:6c:f8:e0:74:46:8f:ae: 84:c6:ad:6c:3f:0b:17:dd:3c:f4:a8:ea:92:f0:5e:31:6d:3f: 3b:c9:e6:a9:52:e2:aa:2b:c5:7d:c4:93:eb:b7:c1:6b:c2:da: ac:4b:b8:69:22:75:30:05:b6:a7:3b:e9:ec:f5:85:54:9c:6e: c7:14:f1:1d:b1:1a:ca:4e:cb:e4:d4:fe:28:83:0a:88:ea:25: 81:5b:1c:59:18:0c:d8:9b:64:e3:64:94:ea:76:fc:0b:91:63: 33:55:f3:d4:a5:7c:b6:b2:04:ee:d9:80:70:20:8d:a4:9b:64: e2:e2:6a:09:f6:77:f1:68:8a:24:da:34:31:d7:a1:4f:ac:47: fd:d7:8a:48:a2:57:c3:e1:91:5f:a6:4e:64:45:ca:c6:2c:5b: 95:57:2a:45:80:77:b1:35:03:84:2f:df:79:88:4a:29:89:07: e9:e6:ff:92:1f:6f:ac:b7:10:cb:43:17:06:7f:f8:ad:b8:bd: a0:5b:d4:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf74ln48FRqlLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWFmY2JkZGYtNTJhNC00M2E2LTllZDQtNGVlOGM5NDVlZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkskH5U6y211quicWQhMjBDocMLFTvlcVowMU rqGtI/nsfiQjgiAqV2p7qbc3vTzui99LZY+OktBiZp9JJpjgZrhuUATh/4jpVo/U NtrzU5/Ork8mrvR8uzJWDQILwxS+RTySMwLwnFtCjwh2sKhJMsLvalYB1/Tye2ff FtcHM6Zn23U0MZA/GxqYipfhRxAgOVZgOv3W3lihZikn8GuOdCNkv7RTT33t4NJu 86qUwEtvwGhijC9Kg53aXarGXSnosAKipuz72HKRk7884Vz58OefIfNQzRxD7wjc wtuxkoNieKXbKhGE/kiFUulff4EDpe0keZeWVKWjC6j53yPJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILvR2CBU74NHMl6QuirGBJMpdyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTM2ZWM5MTctZTE3Ny0z MzRlLWExNGItMjRiNTQ5ZGNhY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlJWylNZ3pgG+43Ed60kLXPCIoCBYWlpRrQ4RlqbVk02e4cT/ZfntrN VC+UtueES74UyjiEx4L+hVbPsAOoc2LqbPjgdEaProTGrWw/CxfdPPSo6pLwXjFt PzvJ5qlS4qorxX3Ek+u3wWvC2qxLuGkidTAFtqc76ez1hVScbscU8R2xGspOy+TU /iiDCojqJYFbHFkYDNibZONklOp2/AuRYzNV89SlfLayBO7ZgHAgjaSbZOLiagn2 d/FoiiTaNDHXoU+sR/3XikiiV8PhkV+mTmRFysYsW5VXKkWAd7E1A4Qv33mISimJ B+nm/5Ifb6y3EMtDFwZ/+K24vaBb1AQ= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:44 2025 by rpki-client