$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c220597b-a935-3eca-8172-4ff7b099f2e2.roa File: c220597b-a935-3eca-8172-4ff7b099f2e2.roa (raw, json) Hash identifier: Nhj0AihtnjV12q5lrcfVI+iCexHn3g9BIDFf7CL+bN0= Subject key identifier: BD:1A:B4:32:34:3A:0F:6C:36:11:6B:68:8E:AF:7D:DA:3A:1C:8B:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF501050E611AE2887AB4C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c220597b-a935-3eca-8172-4ff7b099f2e2.roa Signing time: Tue 22 Apr 2025 09:37:46 +0000 ROA not before: Tue 22 Apr 2025 09:37:46 +0000 ROA not after: Mon 21 Jul 2025 09:37:46 +0000 asID: 19905 IP address blocks: 173.23.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f5:01:05:0e:61:1a:e2:88:7a:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:46 2025 GMT Not After : Jul 21 09:37:46 2025 GMT Subject: CN=7018000e-800b-40e5-b36e-4a0aee925a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:ab:fe:eb:a0:38:0e:22:8a:3f:45:77:9a: 39:15:b9:13:a4:11:4e:a7:af:8f:74:60:76:9f:b0: 9a:f0:84:9a:ef:38:28:7d:3a:14:bf:58:b1:02:14: a5:2d:84:f7:37:39:be:0e:aa:bb:08:e9:17:35:65: bf:55:24:90:ce:44:51:f0:ec:2f:8a:2a:50:5b:0b: 20:c2:aa:a1:8b:76:72:06:56:34:30:b9:1d:b7:aa: ac:5a:33:11:0b:49:f1:12:99:28:95:06:54:db:f7: 71:7a:43:1c:42:d3:78:c3:66:74:c7:f2:ab:cc:07: 59:5a:06:9f:e1:d0:5a:05:a9:a6:85:00:ae:e2:bc: 42:98:30:79:e9:34:07:e9:4e:cc:51:25:62:0f:a1: 7e:3d:d1:ae:2e:d8:55:a7:51:f0:bc:81:2c:cd:57: 8e:ca:af:a1:c1:7a:0c:2f:ba:44:23:c3:34:8b:1d: 1b:cd:a6:a5:87:b3:ae:57:fd:b4:d4:18:e7:31:ec: 8d:28:c2:4f:aa:9f:2c:09:0d:5d:95:0a:cb:a8:0f: 81:50:5a:e0:b3:d5:70:d8:b5:89:cd:d9:2d:af:c9: 8c:98:b7:38:0e:63:38:cf:e7:47:77:1b:ca:ac:f9: cc:9e:17:5f:3d:0a:0a:37:7a:b8:c0:01:45:52:07: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1A:B4:32:34:3A:0F:6C:36:11:6B:68:8E:AF:7D:DA:3A:1C:8B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c220597b-a935-3eca-8172-4ff7b099f2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:36:72:ed:39:58:b2:25:64:bf:ab:17:fc:0f:a6:b8:3e:e7: 20:da:d6:f4:c0:cd:0c:87:78:ab:c8:65:57:1a:fe:c4:37:2b: 9b:b2:b2:c7:1e:36:1d:4e:64:0e:88:57:44:49:f2:b2:9f:d1: 36:ab:c1:08:c3:cb:2c:63:6f:61:64:36:6c:16:08:aa:f2:3f: 9f:31:21:86:9a:f2:89:68:c0:83:8e:50:64:8b:89:61:42:cc: ae:73:cc:37:4f:88:b4:53:c3:3f:65:cb:d7:22:0c:0d:48:29: d8:47:a0:68:1f:27:c8:ab:b5:47:63:7a:da:61:85:c9:03:1e: 4d:e4:78:c6:35:65:db:e4:99:bd:22:7e:4c:89:c1:d8:b6:53: 40:49:50:8f:f7:59:42:05:34:5a:26:1c:b9:06:09:a7:48:a2: f1:93:ce:cd:9f:ee:68:95:22:40:86:4e:43:96:30:fd:e6:8e: 85:33:bc:17:f4:c5:3e:2d:a0:0e:67:31:9b:4d:3e:64:22:4f: 76:8d:f4:9d:d1:cb:87:c5:9d:1a:54:45:d1:c9:78:2a:d4:e9: 39:ee:92:60:dc:0e:59:c3:7a:20:46:41:95:d6:18:d5:12:86: 9d:40:7b:69:fa:9c:30:ca:f8:26:83:ef:34:f0:fc:bc:1b:6d: 5e:20:e4:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9QEFDmEa4oh6tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5Mzc0NloXDTI1MDcyMTA5Mzc0NlowLzEtMCsGA1UEAxMk NzAxODAwMGUtODAwYi00MGU1LWIzNmUtNGEwYWVlOTI1YTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi92r/uugOA4iij9Fd5o5FbkTpBFOp6+PdGB2 n7Ca8ISa7zgofToUv1ixAhSlLYT3Nzm+Dqq7COkXNWW/VSSQzkRR8OwviipQWwsg wqqhi3ZyBlY0MLkdt6qsWjMRC0nxEpkolQZU2/dxekMcQtN4w2Z0x/KrzAdZWgaf 4dBaBammhQCu4rxCmDB56TQH6U7MUSViD6F+PdGuLthVp1HwvIEszVeOyq+hwXoM L7pEI8M0ix0bzaalh7OuV/201BjnMeyNKMJPqp8sCQ1dlQrLqA+BUFrgs9Vw2LWJ zdktr8mMmLc4DmM4z+dHdxvKrPnMnhdfPQoKN3q4wAFFUgetawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0atDI0Og9sNhFraI6vfdo6HIt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzIyMDU5N2ItYTkzNS0z ZWNhLTgxNzItNGZmN2IwOTlmMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY2cu05WLIlZL+rF/wPprg+5yDa1vTAzQyHeKvIZVca/sQ3K5uyssce Nh1OZA6IV0RJ8rKf0TarwQjDyyxjb2FkNmwWCKryP58xIYaa8olowIOOUGSLiWFC zK5zzDdPiLRTwz9ly9ciDA1IKdhHoGgfJ8irtUdjetphhckDHk3keMY1Zdvkmb0i fkyJwdi2U0BJUI/3WUIFNFomHLkGCadIovGTzs2f7miVIkCGTkOWMP3mjoUzvBf0 xT4toA5nMZtNPmQiT3aN9J3Ry4fFnRpURdHJeCrU6TnukmDcDlnDeiBGQZXWGNUS hp1Ae2n6nDDK+CaD7zTw/LwbbV4g5H4= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:45 2025 by rpki-client