$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa File: aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa (raw, json) Hash identifier: WjY2LbnIgdu2mN6Ztj00WivHdRnKZ3/rg3AZ33U3sc0= Subject key identifier: 37:F0:C4:42:D1:DC:14:F9:6F:2E:1A:E4:25:27:5D:13:99:64:32:2A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF59C8A895F03C55247E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:59:c8:a8:95:f0:3c:55:24:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=8b39c9c4-5ba4-49bc-9aaa-661baccb1af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:ca:4a:08:ef:ce:c9:63:e6:10:f2:90:8b: ef:a7:58:6f:ee:f1:f1:c5:67:0b:17:26:a8:f8:12: 75:34:2e:be:60:5b:3e:bf:4b:b0:f6:63:b0:91:fc: ad:aa:71:db:63:07:22:5c:a3:f8:1e:51:c2:d5:7e: cf:e0:8a:e8:ad:0e:1d:5d:ff:7f:77:39:e4:0a:d0: ca:65:bf:73:42:45:c1:a7:b8:e7:aa:3b:56:af:fe: d2:5d:28:ac:a5:04:1a:d9:ef:5c:40:d0:e6:2b:7e: 95:ca:50:bd:e7:aa:65:37:8f:21:4e:e3:25:15:01: 5f:7f:8d:5f:bc:bd:97:64:b1:15:ff:bb:4e:8d:cc: 10:21:d1:9d:2b:78:dd:fa:42:dc:d9:c3:60:51:4c: b0:ce:39:7a:e1:60:c3:e4:ed:25:3d:82:f4:e5:3c: 16:b2:a0:00:ba:7e:57:97:fd:57:3c:e7:97:e7:63: f5:70:0f:10:16:5f:6f:9a:74:e9:53:08:9c:20:ab: 59:f1:80:83:99:3e:44:fa:2a:ca:97:89:82:8b:33: 69:61:8f:d5:4b:1b:d6:bd:85:1a:32:e8:f9:ea:41: dc:39:68:57:fc:e4:a9:e1:77:af:69:6c:4a:9e:7b: f3:68:57:48:c1:a3:83:49:16:cc:41:c3:78:1c:9c: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F0:C4:42:D1:DC:14:F9:6F:2E:1A:E4:25:27:5D:13:99:64:32:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b6:b7:57:37:29:d2:10:ed:66:13:b5:68:31:4e:46:b7:38: 44:80:da:fd:df:d5:14:5c:65:17:c4:20:64:55:e9:53:e1:ed: 90:8b:e8:3d:26:74:54:cb:21:17:04:a0:ac:f5:3a:81:4e:e6: 51:66:aa:d4:87:05:37:27:96:0c:ef:24:21:7a:8d:ff:b7:bd: 16:40:7a:c7:5f:e0:b8:ba:be:76:c1:d6:81:1c:c4:07:75:da: 8d:aa:af:12:c4:e8:06:da:3e:16:52:74:5a:22:8e:fa:ff:dc: a7:26:dc:60:01:68:7e:65:2d:2f:45:e9:80:b4:e1:0f:1d:29: 73:07:be:fe:64:65:fe:d0:a9:6e:e0:1b:be:95:ee:27:9d:70: 7e:04:a2:bb:39:ba:27:ad:a2:24:b7:41:0f:67:ef:7f:5c:43: b0:49:01:f7:9b:ce:de:dd:13:36:82:82:f7:0b:c1:ea:a2:b7: 3e:29:0a:2c:5f:fa:33:07:93:2e:b4:28:1f:6a:3d:14:f0:43: 72:f7:45:13:b0:49:07:35:62:11:97:19:86:d8:e1:f1:f8:4f: 50:dc:f9:95:a3:16:a0:07:43:cc:04:9c:b1:1f:85:bc:fb:94: 37:20:b3:d2:bc:6b:9f:7b:a5:df:ab:03:c4:af:cc:e8:a7:e6: 5d:5e:74:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71nIqJXwPFUkfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OGIzOWM5YzQtNWJhNC00OWJjLTlhYWEtNjYxYmFjY2IxYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvevKSgjvzslj5hDykIvvp1hv7vHxxWcLFyao +BJ1NC6+YFs+v0uw9mOwkfytqnHbYwciXKP4HlHC1X7P4IrorQ4dXf9/dznkCtDK Zb9zQkXBp7jnqjtWr/7SXSispQQa2e9cQNDmK36VylC956plN48hTuMlFQFff41f vL2XZLEV/7tOjcwQIdGdK3jd+kLc2cNgUUywzjl64WDD5O0lPYL05TwWsqAAun5X l/1XPOeX52P1cA8QFl9vmnTpUwicIKtZ8YCDmT5E+irKl4mCizNpYY/VSxvWvYUa Muj56kHcOWhX/OSp4XevaWxKnnvzaFdIwaODSRbMQcN4HJw/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfwxELR3BT5by4a5CUnXROZZDIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWE1OWQ5ZDItY2Q4NS0z NWZhLWE0NWItN2UyYTFkOGJhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG2t1c3KdIQ7WYTtWgxTka3OESA2v3f1RRcZRfEIGRV6VPh7ZCL6D0m dFTLIRcEoKz1OoFO5lFmqtSHBTcnlgzvJCF6jf+3vRZAesdf4Li6vnbB1oEcxAd1 2o2qrxLE6AbaPhZSdFoijvr/3Kcm3GABaH5lLS9F6YC04Q8dKXMHvv5kZf7QqW7g G76V7iedcH4Eors5uietoiS3QQ9n739cQ7BJAfebzt7dEzaCgvcLweqitz4pCixf +jMHky60KB9qPRTwQ3L3RROwSQc1YhGXGYbY4fH4T1Dc+ZWjFqAHQ8wEnLEfhbz7 lDcgs9K8a597pd+rA8SvzOin5l1edIw= -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:43 2025 by rpki-client