$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa File: b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa (raw, json) Hash identifier: 4g82FhYG7HoAbkKDWEC77HL5FPZO2M/vfFKs9S1Yv14= Subject key identifier: 90:4A:0D:8E:41:DF:D5:C3:0F:A0:3D:AF:11:4A:43:EC:40:0B:4A:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B91FDF2E500A92D3FF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b9:1f:df:2e:50:0a:92:d3:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c71dd474-36e4-463f-b1ab-755ffc6b7939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:ba:c4:5e:25:9a:2f:24:c7:77:a4:6f:7a: ce:57:77:8f:48:78:d9:e7:4a:61:c4:e9:95:e9:0a: 9f:68:61:1f:27:ec:3a:e9:4d:9b:d3:45:05:b0:04: 4e:fc:64:32:49:02:0e:3b:c8:a5:ac:57:d2:73:f3: 0f:28:54:b8:d6:8f:56:1a:76:73:8f:2e:5f:c2:3c: c9:72:96:74:f2:f4:50:8b:ba:19:b9:96:96:7c:63: db:25:1b:c0:fe:e2:42:95:18:cc:c9:9b:06:0a:23: 51:b4:49:e8:2d:a7:94:bc:eb:40:32:ff:7b:15:c3: 0c:36:d0:3c:c5:1b:3a:89:59:f9:70:c1:0f:fb:28: d3:ca:7d:5e:2a:eb:e6:10:ff:f2:a1:29:1e:c8:47: e2:21:d7:63:55:6f:8c:bc:7f:a7:0c:07:ab:d0:71: 4b:89:64:87:59:24:b0:45:03:73:2c:59:0d:66:30: a1:81:65:80:61:14:68:6b:6c:11:47:e1:fa:71:ab: bd:11:67:b1:4c:97:e6:c4:d6:8f:fe:36:88:0d:0b: 28:bb:ab:c7:60:39:aa:59:5a:2d:96:98:ae:fa:47: d0:29:1b:64:68:cc:60:cd:ca:56:af:47:a0:39:ce: 35:ad:12:66:47:1a:33:6a:6c:7d:8a:e5:fc:2b:fc: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:0D:8E:41:DF:D5:C3:0F:A0:3D:AF:11:4A:43:EC:40:0B:4A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b23ecdcc-6038-37a5-bf1f-2b0b8228889b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7e:01:42:c8:bb:e7:c6:83:4b:c5:6c:33:b6:e1:75:ad:64: ff:73:e7:dc:1f:c2:bc:ae:e3:56:21:36:6b:a4:1a:7c:2e:80: 6f:31:93:77:e4:9c:4f:00:fb:8b:4c:df:f5:30:d9:78:1c:56: eb:27:d3:1e:dd:11:d0:9c:62:e7:42:f3:41:0e:4a:b0:62:3e: b7:73:a1:c2:dd:a1:78:35:39:c0:a1:ed:83:d5:4c:19:88:b4: 3d:e5:ac:69:99:c0:12:41:94:3d:16:eb:52:64:78:35:92:46: cc:98:e8:77:4c:07:28:2c:67:09:eb:28:8b:c8:c6:61:1f:5d: 8c:cd:00:dc:62:9e:fe:57:ac:fd:6c:8c:b8:e2:f8:96:67:82: 8e:09:b3:5c:d4:c2:70:cc:d6:79:5c:31:c0:f4:90:98:34:4f: 16:4a:d6:08:46:b0:f0:a2:e0:98:cf:84:73:2c:e0:c1:16:1d: eb:d2:89:0e:1d:4f:08:92:f0:74:f4:c6:d4:69:30:f5:c4:2e: 60:e5:9b:6e:68:53:94:2a:07:22:de:4e:f7:3d:22:d9:55:e5: ea:e9:72:70:24:e8:bc:5b:84:c5:f8:1a:8b:ac:c0:ea:a3:b0: 00:02:d5:0c:f2:39:66:9f:12:d4:4f:ed:af:92:d1:06:e2:90: 05:dc:04:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLkf3y5QCpLT/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzcxZGQ0NzQtMzZlNC00NjNmLWIxYWItNzU1ZmZjNmI3OTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lK6xF4lmi8kx3ekb3rOV3ePSHjZ50phxOmV 6QqfaGEfJ+w66U2b00UFsARO/GQySQIOO8ilrFfSc/MPKFS41o9WGnZzjy5fwjzJ cpZ08vRQi7oZuZaWfGPbJRvA/uJClRjMyZsGCiNRtEnoLaeUvOtAMv97FcMMNtA8 xRs6iVn5cMEP+yjTyn1eKuvmEP/yoSkeyEfiIddjVW+MvH+nDAer0HFLiWSHWSSw RQNzLFkNZjChgWWAYRRoa2wRR+H6cau9EWexTJfmxNaP/jaIDQsou6vHYDmqWVot lpiu+kfQKRtkaMxgzcpWr0egOc41rRJmRxozamx9iuX8K/ypaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBKDY5B39XDD6A9rxFKQ+xAC0p/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjIzZWNkY2MtNjAzOC0z N2E1LWJmMWYtMmIwYjgyMjg4ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN+AULIu+fGg0vFbDO24XWtZP9z59wfwryu41YhNmukGnwugG8xk3fk nE8A+4tM3/Uw2XgcVusn0x7dEdCcYudC80EOSrBiPrdzocLdoXg1OcCh7YPVTBmI tD3lrGmZwBJBlD0W61JkeDWSRsyY6HdMBygsZwnrKIvIxmEfXYzNANxinv5XrP1s jLji+JZngo4Js1zUwnDM1nlcMcD0kJg0TxZK1ghGsPCi4JjPhHMs4MEWHevSiQ4d TwiS8HT0xtRpMPXELmDlm25oU5QqByLeTvc9ItlV5erpcnAk6LxbhMX4GouswOqj sAAC1QzyOWafEtRP7a+S0QbikAXcBG4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:53 2025 by rpki-client