$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa File: ca1af946-2717-3844-93e9-437539eb99b4.roa (raw, json) Hash identifier: aiexXRR17le5wqZTjg0XnU+ybteB1QNSEaZABjmMDvo= Subject key identifier: C5:6B:D8:7F:1B:CE:20:9E:D0:30:64:4B:7E:35:A5:AC:4B:23:5C:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FD9C86C3C665D7222FF0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fd:9c:86:c3:c6:65:d7:22:2f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8f5469f2-2552-4b1e-9334-fe8377073fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:5b:d5:55:9e:0b:1c:46:88:12:98:29:51: 3c:58:1d:97:48:a1:7b:91:c3:ca:b3:d7:21:3f:40: a6:cd:cc:63:86:2b:73:7c:21:a7:e8:3b:3c:d1:7b: 34:ab:15:38:dd:a9:7f:a3:16:e4:47:9a:67:48:b5: a8:76:b6:e2:da:fc:fa:88:ad:5e:36:57:06:4c:a3: df:4d:12:2c:60:0e:b3:0d:d5:c3:35:ad:4d:57:79: 85:29:0d:4b:aa:ef:82:86:c7:35:fb:b7:cc:d9:06: c7:63:88:78:cc:03:e0:75:41:d5:73:cb:db:41:b8: 9d:e6:76:79:50:72:45:d7:fc:83:e0:ae:d3:18:81: 2a:1f:30:47:e0:4e:22:13:02:12:ed:db:ca:8a:50: 0b:f2:59:34:3f:3c:79:3f:da:aa:d9:12:4d:4b:5a: bf:4a:c3:71:05:89:dd:81:cc:c2:8c:e7:66:49:c9: ad:f8:af:97:53:49:20:eb:0d:fb:86:0a:a1:7f:7c: 9a:2f:db:a3:4d:a6:56:e3:e9:49:25:b1:23:d2:72: d0:90:27:f1:2a:fc:c4:d0:3a:ba:6a:8c:8d:04:1a: c3:8a:9a:5a:41:fe:a0:aa:13:6a:e8:07:e8:20:7f: 53:4c:01:83:98:7e:5a:ed:50:9e:4e:49:e5:26:af: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6B:D8:7F:1B:CE:20:9E:D0:30:64:4B:7E:35:A5:AC:4B:23:5C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7d:89:c3:d2:a9:64:a2:5e:9d:e1:a8:63:a4:c3:cd:bd:e9: 2f:ae:99:59:9b:ac:f0:bd:b5:4d:b9:13:49:9c:a2:c8:f3:af: a6:2b:f8:6d:4f:1e:65:27:3a:b9:e5:68:04:a8:96:ec:d3:b9: 98:77:ee:df:28:fb:f3:b9:8e:d2:7e:ab:df:91:c2:79:e2:07: 23:2a:5d:27:82:46:d4:68:79:ad:a2:0f:4c:d4:5d:8d:07:0f: 5c:17:0e:5d:a8:48:ec:c5:64:21:b3:41:24:2b:c6:d3:5f:c9: 9a:3d:79:14:21:69:bc:fd:0d:f8:e1:8c:cd:56:8a:1f:7d:05: 64:85:15:3e:13:c2:4d:b3:7a:b0:1b:fc:82:40:e7:d0:b2:53: 24:37:34:b6:1a:98:bc:43:15:10:1b:04:97:59:ce:e9:29:10: 0b:27:67:e6:08:9a:b3:da:74:a3:41:0d:2f:30:bc:20:06:e8: c1:98:e4:f9:71:09:82:73:4a:6c:b5:42:80:5b:8f:fa:5a:83: e0:87:e6:8c:b1:d5:6e:a6:cf:d0:35:84:9a:8b:91:50:ed:a1: e3:27:48:b9:5b:74:95:2f:e4:3e:00:82:26:49:73:5c:4b:c1: 6c:6f:4f:37:eb:da:8f:34:97:a9:12:f3:bf:d7:24:c1:3b:9c: 80:61:bf:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf2chsPGZdciL/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGY1NDY5ZjItMjU1Mi00YjFlLTkzMzQtZmU4Mzc3MDczZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywJb1VWeCxxGiBKYKVE8WB2XSKF7kcPKs9ch P0CmzcxjhitzfCGn6Ds80Xs0qxU43al/oxbkR5pnSLWodrbi2vz6iK1eNlcGTKPf TRIsYA6zDdXDNa1NV3mFKQ1Lqu+Chsc1+7fM2QbHY4h4zAPgdUHVc8vbQbid5nZ5 UHJF1/yD4K7TGIEqHzBH4E4iEwIS7dvKilAL8lk0Pzx5P9qq2RJNS1q/SsNxBYnd gczCjOdmScmt+K+XU0kg6w37hgqhf3yaL9ujTaZW4+lJJbEj0nLQkCfxKvzE0Dq6 aoyNBBrDippaQf6gqhNq6AfoIH9TTAGDmH5a7VCeTknlJq+F2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVr2H8bziCe0DBkS341paxLI1xFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ExYWY5NDYtMjcxNy0z ODQ0LTkzZTktNDM3NTM5ZWI5OWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ9icPSqWSiXp3hqGOkw8296S+umVmbrPC9tU25E0mcosjzr6Yr+G1P HmUnOrnlaASoluzTuZh37t8o+/O5jtJ+q9+RwnniByMqXSeCRtRoea2iD0zUXY0H D1wXDl2oSOzFZCGzQSQrxtNfyZo9eRQhabz9DfjhjM1Wih99BWSFFT4Twk2zerAb /IJA59CyUyQ3NLYamLxDFRAbBJdZzukpEAsnZ+YImrPadKNBDS8wvCAG6MGY5Plx CYJzSmy1QoBbj/pag+CH5oyx1W6mz9A1hJqLkVDtoeMnSLlbdJUv5D4AgiZJc1xL wWxvTzfr2o80l6kS87/XJME7nIBhv+s= -----END CERTIFICATE-----Generated at Sun Apr 27 15:50:58 2025 by rpki-client