$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dce47229-8eb5-3581-b6c3-d0342e58179f.roa File: dce47229-8eb5-3581-b6c3-d0342e58179f.roa (raw, json) Hash identifier: 32F91SDBem89iNEJAH6CU4OjM8MiWNbV3epTErrVNC8= Subject key identifier: 83:59:A9:02:2D:E8:3C:69:D4:88:4D:A6:1C:BF:52:7B:3E:A7:E8:82 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA16C0E3684B663D373A50 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dce47229-8eb5-3581-b6c3-d0342e58179f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:16:c0:e3:68:4b:66:3d:37:3a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f9a5e491-7981-4a9f-bca2-3c20b6cbc5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d3:16:f0:cc:c7:0a:9f:cf:29:d7:bb:0b:be: 9a:2b:1c:b2:d5:4b:fb:71:f5:bd:f2:0b:40:a4:89: bd:9d:94:fc:3b:95:d3:ad:13:28:f9:cb:3f:04:73: 4b:50:69:0a:4a:63:d5:8d:e9:19:c3:91:81:f2:38: 30:44:23:61:89:4a:4a:81:7c:fe:02:06:cc:6d:6d: 6e:fd:41:26:19:0a:da:1e:7a:b1:6e:99:6b:05:7a: 6e:03:f5:7b:9b:6a:50:a9:30:51:43:8c:85:29:b8: d6:fe:59:2d:61:b9:71:2a:f4:f6:24:a9:52:8c:9e: 38:c2:3b:17:56:89:2f:e5:5b:1f:76:29:3e:7a:2a: 70:58:01:36:4c:ce:e8:d8:50:ba:d6:a8:d2:29:83: cb:35:69:0a:a0:51:03:4c:12:c6:b1:97:45:3d:7f: a2:04:05:37:6d:ca:56:c2:dc:87:95:13:af:63:aa: e9:0a:5c:0a:a9:e0:ab:88:f1:83:b6:14:95:e4:04: 91:c6:9b:2e:74:d0:b8:cc:55:b8:fd:a5:94:a9:a1: 21:2e:10:67:49:f1:82:56:45:02:0e:7e:e1:a0:09: ab:dc:c5:50:96:d2:03:5f:45:0e:42:35:05:a4:5c: 3f:5d:86:90:48:c7:fc:77:e2:91:f6:cc:cd:ac:38: ee:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:59:A9:02:2D:E8:3C:69:D4:88:4D:A6:1C:BF:52:7B:3E:A7:E8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dce47229-8eb5-3581-b6c3-d0342e58179f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cf:0c:1c:db:08:41:11:59:cf:e7:93:5e:f3:54:e7:a4:f9: 74:6b:bc:e2:ae:ca:b4:10:65:44:b4:0c:b9:d0:07:0d:dc:84: b3:9a:bc:b6:6d:01:ff:0c:20:ed:6f:ae:5c:7d:01:16:7f:bc: f4:47:69:33:9b:97:25:f6:4e:b8:a6:ce:ee:53:e6:c4:3f:9f: 9f:ad:85:83:cf:6e:9c:ad:9f:ae:82:bb:ba:67:f6:b2:07:bc: 9e:d2:0e:b3:df:51:b2:61:a8:3d:bd:f2:fd:36:59:4f:3e:ce: 01:fc:d4:fe:b5:de:be:dc:34:c6:2f:9d:39:b4:79:72:83:b4: f9:f3:a0:f0:0b:3a:cd:d1:30:b9:1c:f7:89:65:ca:6a:d2:40: b0:f7:2c:43:16:a5:9c:96:85:c2:97:c9:3e:3a:21:7a:40:ec: fc:77:f6:aa:92:cd:2f:de:38:d4:71:4f:bd:6f:0b:ec:d1:fa: a0:32:7f:fb:e2:96:6d:c6:33:98:8e:e5:78:9c:c2:64:c3:0f: f6:1f:4f:03:8b:99:38:95:04:f4:fb:57:87:48:f9:f9:7d:66: bb:ba:e5:2d:f3:46:52:25:94:eb:6e:e2:8e:14:73:68:a1:76: 6d:15:40:fa:4c:b5:05:74:42:31:4c:10:cc:ee:0b:26:23:4b: a7:5e:01:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhbA42hLZj03OlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjlhNWU0OTEtNzk4MS00YTlmLWJjYTItM2MyMGI2Y2JjNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39MW8MzHCp/PKde7C76aKxyy1Uv7cfW98gtA pIm9nZT8O5XTrRMo+cs/BHNLUGkKSmPVjekZw5GB8jgwRCNhiUpKgXz+AgbMbW1u /UEmGQraHnqxbplrBXpuA/V7m2pQqTBRQ4yFKbjW/lktYblxKvT2JKlSjJ44wjsX Vokv5Vsfdik+eipwWAE2TM7o2FC61qjSKYPLNWkKoFEDTBLGsZdFPX+iBAU3bcpW wtyHlROvY6rpClwKqeCriPGDthSV5ASRxpsudNC4zFW4/aWUqaEhLhBnSfGCVkUC Dn7hoAmr3MVQltIDX0UOQjUFpFw/XYaQSMf8d+KR9szNrDjuRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINZqQIt6Dxp1IhNphy/Uns+p+iCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGNlNDcyMjktOGViNS0z NTgxLWI2YzMtZDAzNDJlNTgxNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTPDBzbCEERWc/nk17zVOek+XRrvOKuyrQQZUS0DLnQBw3chLOavLZt Af8MIO1vrlx9ARZ/vPRHaTOblyX2Trimzu5T5sQ/n5+thYPPbpytn66Cu7pn9rIH vJ7SDrPfUbJhqD298v02WU8+zgH81P613r7cNMYvnTm0eXKDtPnzoPALOs3RMLkc 94llymrSQLD3LEMWpZyWhcKXyT46IXpA7Px39qqSzS/eONRxT71vC+zR+qAyf/vi lm3GM5iO5XicwmTDD/YfTwOLmTiVBPT7V4dI+fl9Zru65S3zRlIllOtu4o4Uc2ih dm0VQPpMtQV0QjFMEMzuCyYjS6deATM= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:18 2025 by rpki-client