$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa File: a63c59ce-5a49-3f3e-8855-0d302277390e.roa (raw, json) Hash identifier: tFQ4Hs6nBvyfUEg2gZPBVJqkV00U4AXbkIg7uhabZtA= Subject key identifier: 10:D3:29:AF:97:57:1C:F0:D8:48:AF:7C:1F:AB:D8:B2:31:68:0D:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF5A4D74A92DFDD9C17880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.24.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:5a:4d:74:a9:2d:fd:d9:c1:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=d5d302e3-1a08-4725-a12a-70c9d9677f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:81:2c:af:35:02:d4:2d:53:90:44:d9:6f: 58:69:47:ea:40:a9:a7:fb:90:01:43:37:a7:c7:71: e3:99:fd:4d:11:41:b0:6d:39:f5:73:6a:d5:a5:e6: e8:a9:1d:7e:c2:da:a1:d7:0e:7c:91:8a:c6:d7:93: 99:42:41:ed:61:42:a1:66:84:84:3e:04:88:9d:ce: bc:3f:27:42:13:6f:79:13:37:69:d2:19:cd:db:ed: cf:9f:41:03:6a:25:c9:27:88:43:29:67:83:bd:99: fa:21:eb:63:da:fc:d0:e6:68:fe:fc:7a:ec:6e:37: 10:e7:fd:b0:86:f0:ec:e2:1a:b2:f5:ce:9b:e3:ce: 93:ab:ed:71:ca:51:6b:cb:19:14:84:1d:f7:11:f1: 5f:a6:26:4a:4a:88:79:bb:78:96:df:20:64:8d:8a: 72:58:90:44:fb:70:20:19:23:90:50:da:57:6f:c1: 63:fc:5d:cb:de:9b:d8:c4:ee:74:da:c4:01:ce:c5: ce:9a:1a:f9:06:01:dd:7f:e9:c0:42:eb:e4:88:dd: 86:45:23:03:e7:ae:0b:0b:58:f8:92:a4:6e:c3:48: c6:88:0f:94:db:21:45:2c:2a:f4:af:c0:2a:d4:dd: 66:21:d9:46:79:c6:70:16:02:5d:ff:f0:80:ee:2e: b0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D3:29:AF:97:57:1C:F0:D8:48:AF:7C:1F:AB:D8:B2:31:68:0D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6b:26:f9:49:a3:f1:84:23:a6:6b:da:49:46:c3:2c:42:89: 88:0b:3f:d1:e8:00:b6:21:34:87:da:92:37:52:89:bd:2f:f8: dc:60:61:5b:45:07:4f:c1:16:07:3d:e9:e6:78:44:c5:88:c7: 1f:1b:16:75:01:6d:32:17:cc:00:0d:5a:19:fd:6a:86:c5:52: 48:2d:32:9c:0c:0d:e7:5c:ed:a5:5b:11:94:34:67:52:e5:09: f7:6b:e7:da:09:d0:75:17:4f:ca:94:a0:92:bb:f3:0a:af:18: 5b:90:cb:d1:c4:dd:39:20:5a:bc:bc:62:5a:6c:9a:90:24:47: 04:43:bf:21:94:4d:f0:0f:e0:7b:81:a3:7e:98:5f:c2:a9:3e: 76:d4:8f:40:f0:03:7b:7f:9b:e5:5e:5c:d3:5e:62:20:b9:5c: b1:82:5c:62:9b:ba:a9:ba:66:b1:51:9e:1d:05:b0:0d:c3:6d: e7:4e:a9:0a:83:3f:b9:5e:bb:a7:e8:12:ec:09:61:d5:8b:67: 02:87:26:6a:dc:c4:49:30:af:cd:79:ce:91:11:26:6d:9a:cf: dc:e4:2f:8d:26:95:49:22:64:99:fe:81:d9:b7:bb:9f:7e:a4: 8a:87:cd:6d:a3:81:0e:af:c2:cc:fd:19:51:9b:60:fa:97:b9: 85:60:af:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71pNdKkt/dnBeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDVkMzAyZTMtMWEwOC00NzI1LWExMmEtNzBjOWQ5Njc3Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq16BLK81AtQtU5BE2W9YaUfqQKmn+5ABQzen x3Hjmf1NEUGwbTn1c2rVpeboqR1+wtqh1w58kYrG15OZQkHtYUKhZoSEPgSInc68 PydCE295Ezdp0hnN2+3Pn0EDaiXJJ4hDKWeDvZn6Ietj2vzQ5mj+/HrsbjcQ5/2w hvDs4hqy9c6b486Tq+1xylFryxkUhB33EfFfpiZKSoh5u3iW3yBkjYpyWJBE+3Ag GSOQUNpXb8Fj/F3L3pvYxO502sQBzsXOmhr5BgHdf+nAQuvkiN2GRSMD564LC1j4 kqRuw0jGiA+U2yFFLCr0r8Aq1N1mIdlGecZwFgJd//CA7i6weQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDTKa+XVxzw2EivfB+r2LIxaA1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYzYzU5Y2UtNWE0OS0z ZjNlLTg4NTUtMGQzMDIyNzczOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9rJvlJo/GEI6Zr2klGwyxCiYgLP9HoALYhNIfakjdSib0v+NxgYVtF B0/BFgc96eZ4RMWIxx8bFnUBbTIXzAANWhn9aobFUkgtMpwMDedc7aVbEZQ0Z1Ll Cfdr59oJ0HUXT8qUoJK78wqvGFuQy9HE3TkgWry8YlpsmpAkRwRDvyGUTfAP4HuB o36YX8KpPnbUj0DwA3t/m+VeXNNeYiC5XLGCXGKbuqm6ZrFRnh0FsA3DbedOqQqD P7leu6foEuwJYdWLZwKHJmrcxEkwr815zpERJm2az9zkL40mlUkiZJn+gdm3u59+ pIqHzW2jgQ6vwsz9GVGbYPqXuYVgr14= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:08 2025 by rpki-client