$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9debe40-c277-33ad-8e4c-c157e2bc0c78.roa File: c9debe40-c277-33ad-8e4c-c157e2bc0c78.roa (raw, json) Hash identifier: 9M9kWME6MOx++w80xLEUx8t+ZsNQSLObHd5+JoSZkUM= Subject key identifier: CE:65:E3:33:B7:BA:FB:7D:2B:91:F7:C7:D6:6C:75:42:26:F1:49:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4F780EF8BBBBBC1EE240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9debe40-c277-33ad-8e4c-c157e2bc0c78.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4f:78:0e:f8:bb:bb:bc:1e:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=27e0765e-ead0-43d2-9372-4a2f03829116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:6c:90:73:4e:d0:76:25:40:67:49:03:c4: ab:73:e9:88:22:b5:1a:7d:74:90:35:42:53:77:a0: a1:a4:7a:65:bf:5a:15:41:35:ed:bb:7b:24:c3:60: a1:87:f7:cf:41:ce:37:cc:38:0f:8c:15:52:7e:f6: d2:55:f1:c3:1b:69:21:c6:d1:06:b1:0f:5f:d0:d1: fd:9e:37:14:c4:38:f7:fc:c6:e9:67:06:81:ef:7b: 9c:98:85:73:f6:ed:57:2c:e9:d8:fe:ff:50:78:f8: 04:05:ba:3a:a0:68:76:04:60:8d:bb:c7:e5:b5:e8: d4:36:4b:84:f1:93:2c:d0:7b:99:6b:94:a5:b1:9f: 07:49:96:80:af:fa:13:31:a8:d9:00:08:bf:a7:a5: db:58:84:0e:5d:51:ca:2a:24:54:db:9e:98:e5:9a: 1d:24:5d:82:4a:02:6a:0a:21:3f:c8:39:80:e1:17: 1d:02:e3:38:55:00:2c:58:4d:ef:bf:3e:e3:2d:88: 1f:ba:0d:94:8e:d6:9a:30:5d:49:9d:f5:85:37:8c: 57:01:73:fd:05:cc:05:03:ce:c6:db:dc:c3:b5:52: 6e:26:f4:56:68:0d:4b:9e:09:9a:e9:0b:fc:3d:e7: 75:76:43:6a:7b:9f:80:c4:16:87:5b:06:20:c6:15: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:65:E3:33:B7:BA:FB:7D:2B:91:F7:C7:D6:6C:75:42:26:F1:49:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9debe40-c277-33ad-8e4c-c157e2bc0c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:35:19:28:59:f6:cb:8f:4f:26:a0:b0:48:4e:7e:50:15:91: 88:0d:49:ff:85:bb:b1:48:42:be:11:38:6d:bd:a0:d0:0a:93: 21:2f:46:c0:7c:be:83:16:2f:04:b7:1e:8c:72:10:01:40:b1: d6:62:25:b1:e4:4f:a7:6d:ee:19:fe:71:c2:6a:2e:c7:60:61: 5c:57:ba:04:8c:b7:ae:78:1b:70:78:72:62:7a:19:23:00:41: 97:45:0c:70:ab:c4:15:98:08:49:bb:b6:f7:ea:23:fb:da:a7: 89:b2:d7:e6:04:52:71:72:e1:71:2d:3e:ee:37:34:44:cd:e8: 15:e1:a8:73:d4:6a:37:22:22:99:41:9c:87:39:1a:9a:bb:ca: dd:c8:ed:30:0e:7d:bd:48:53:3e:7d:8a:cd:9e:e7:85:ca:58: db:3c:be:3a:79:ce:8d:ab:72:21:78:86:2e:d8:c6:00:f2:bd: 15:a4:15:ad:2c:8c:34:9b:3b:e4:41:3c:3d:21:a7:5c:04:2a: ed:68:86:ed:82:34:b4:ba:ec:83:9b:7d:99:ae:aa:b3:ef:be: 4c:c4:48:00:a3:28:51:0a:47:5a:43:ec:ad:26:45:99:58:f1: 6c:aa:af:23:cc:e7:f0:a5:b7:94:64:cc:7a:ca:f4:08:cb:cf: ad:c8:2e:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh7094Dvi7u7we4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MjdlMDc2NWUtZWFkMC00M2QyLTkzNzItNGEyZjAzODI5MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGFskHNO0HYlQGdJA8Src+mIIrUafXSQNUJT d6ChpHplv1oVQTXtu3skw2Chh/fPQc43zDgPjBVSfvbSVfHDG2khxtEGsQ9f0NH9 njcUxDj3/MbpZwaB73ucmIVz9u1XLOnY/v9QePgEBbo6oGh2BGCNu8fltejUNkuE 8ZMs0HuZa5SlsZ8HSZaAr/oTMajZAAi/p6XbWIQOXVHKKiRU256Y5ZodJF2CSgJq CiE/yDmA4RcdAuM4VQAsWE3vvz7jLYgfug2UjtaaMF1JnfWFN4xXAXP9BcwFA87G 29zDtVJuJvRWaA1Lngma6Qv8Ped1dkNqe5+AxBaHWwYgxhUelQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5l4zO3uvt9K5H3x9ZsdUIm8UmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzlkZWJlNDAtYzI3Ny0z M2FkLThlNGMtYzE1N2UyYmMwYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrReYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs1GShZ9suPTyagsEhOflAVkYgNSf+Fu7FIQr4ROG29oNAKkyEvRsB8 voMWLwS3HoxyEAFAsdZiJbHkT6dt7hn+ccJqLsdgYVxXugSMt654G3B4cmJ6GSMA QZdFDHCrxBWYCEm7tvfqI/vap4my1+YEUnFy4XEtPu43NETN6BXhqHPUajciIplB nIc5Gpq7yt3I7TAOfb1IUz59is2e54XKWNs8vjp5zo2rciF4hi7YxgDyvRWkFa0s jDSbO+RBPD0hp1wEKu1ohu2CNLS67IObfZmuqrPvvkzESACjKFEKR1pD7K0mRZlY 8WyqryPM5/Clt5RkzHrK9AjLz63ILn4= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:21 2025 by rpki-client