$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa File: a23c0de1-1441-3458-bc00-40d7cbcba868.roa (raw, json) Hash identifier: IBFJ+i5feX01FUz2LuTvQkMkQUeO0KaWFZd4usfZMZQ= Subject key identifier: 87:4F:B6:F2:29:2B:6F:DE:F6:B3:10:60:37:60:C1:6D:E2:97:EF:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF48257B892D610B499700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:48:25:7b:89:2d:61:0b:49:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=97da32b4-5de0-4823-b667-078c13f1946a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:71:bb:68:ca:0e:82:ca:58:33:2c:27:63: 3b:90:10:ec:d5:d4:20:a1:7e:d3:66:97:24:f8:df: 87:7c:37:0a:75:24:78:62:f5:c6:1f:fe:d9:d7:19: 4d:ec:bf:a3:d4:18:c3:ea:23:83:c1:08:49:ca:c4: 4b:ff:e4:a1:b9:80:7d:25:c3:15:37:ef:a8:2d:3a: a7:01:26:b4:01:37:4d:09:d1:4d:6d:6d:c4:05:b5: 31:a5:65:5d:cb:4c:5c:95:b2:31:7c:93:c6:04:4b: 0a:69:78:fa:47:30:76:ee:9d:64:6c:68:19:d5:d9: 4d:4b:85:c2:6c:8c:72:ed:3c:95:7b:b6:e5:ff:46: d7:f4:67:f9:b8:c4:15:da:dc:7e:d0:e6:1b:97:cc: 16:99:16:77:d4:93:91:ce:c2:89:5f:96:4b:b3:cf: ee:02:f8:a1:41:fe:df:89:05:9f:58:c9:b9:4e:4d: 60:71:b6:89:a0:f2:ba:c2:a1:19:87:ec:43:aa:89: 92:fb:b2:86:2e:2b:46:90:04:f9:97:d6:98:96:29: cf:20:fc:2d:ce:33:dc:b1:6d:5c:49:1f:05:63:8b: 55:01:64:6a:27:f8:ac:be:3b:7d:87:ba:17:0f:63: fd:97:ac:ea:7d:b4:0b:dc:cc:96:b9:c6:f7:c9:63: c5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:B6:F2:29:2B:6F:DE:F6:B3:10:60:37:60:C1:6D:E2:97:EF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9d:de:6c:4a:b4:8a:32:2a:ce:e6:4e:6e:3b:f2:36:00:49: d1:39:10:48:78:84:b2:90:e9:c0:5a:b9:e5:6c:6b:28:45:bc: 84:3e:04:84:75:25:e1:1c:01:c2:18:e3:24:0a:ef:1a:ca:b3: 38:d7:f2:0d:f5:5d:5f:d5:63:f5:c1:a3:66:23:5b:14:6c:57: 01:ad:0e:5c:96:ea:e5:04:41:55:ee:be:a9:af:cb:19:91:35: 99:63:4e:17:78:6d:70:e6:16:9a:33:fd:aa:fa:01:33:61:8a: 88:68:f0:b3:22:c5:33:7d:07:fc:27:9e:e5:98:66:72:32:49: 02:f7:cd:d0:c2:c4:21:06:dd:19:5d:33:41:3c:ad:a0:92:1b: bc:c1:fa:cc:c7:bc:b8:95:7e:fc:9b:ea:d9:f2:7e:98:69:ea: 0e:e9:6d:ee:43:fb:7a:f4:94:06:63:bc:53:d3:ef:92:bb:85: 7e:94:4b:4a:44:9f:58:4e:19:e4:a1:af:36:86:25:02:02:3c: f5:b3:92:c5:30:e0:78:05:3b:a7:8c:ad:01:f2:77:65:3a:1a: 41:78:af:62:f8:5f:43:91:5b:8a:7b:4f:37:75:1f:18:ec:da: e5:33:41:9f:67:18:98:1f:69:50:75:53:ea:8c:e3:1c:54:c0: 01:e4:ab:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70gle4ktYQtJlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OTdkYTMyYjQtNWRlMC00ODIzLWI2NjctMDc4YzEzZjE5NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOtxu2jKDoLKWDMsJ2M7kBDs1dQgoX7TZpck +N+HfDcKdSR4YvXGH/7Z1xlN7L+j1BjD6iODwQhJysRL/+ShuYB9JcMVN++oLTqn ASa0ATdNCdFNbW3EBbUxpWVdy0xclbIxfJPGBEsKaXj6RzB27p1kbGgZ1dlNS4XC bIxy7TyVe7bl/0bX9Gf5uMQV2tx+0OYbl8wWmRZ31JORzsKJX5ZLs8/uAvihQf7f iQWfWMm5Tk1gcbaJoPK6wqEZh+xDqomS+7KGLitGkAT5l9aYlinPIPwtzjPcsW1c SR8FY4tVAWRqJ/isvjt9h7oXD2P9l6zqfbQL3MyWucb3yWPFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdPtvIpK2/e9rMQYDdgwW3il++yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIzYzBkZTEtMTQ0MS0z NDU4LWJjMDAtNDBkN2NiY2JhODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAid3mxKtIoyKs7mTm478jYASdE5EEh4hLKQ6cBaueVsayhFvIQ+BIR1 JeEcAcIY4yQK7xrKszjX8g31XV/VY/XBo2YjWxRsVwGtDlyW6uUEQVXuvqmvyxmR NZljThd4bXDmFpoz/ar6ATNhioho8LMixTN9B/wnnuWYZnIySQL3zdDCxCEG3Rld M0E8raCSG7zB+szHvLiVfvyb6tnyfphp6g7pbe5D+3r0lAZjvFPT75K7hX6US0pE n1hOGeShrzaGJQICPPWzksUw4HgFO6eMrQHyd2U6GkF4r2L4X0ORW4p7Tzd1Hxjs 2uUzQZ9nGJgfaVB1U+qM4xxUwAHkq/c= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:56 2025 by rpki-client