$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa File: e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa (raw, json) Hash identifier: xF+FuPRZIBVMNUGUEO/MhO4Hm4IbVXmeRnVwi7jBcd4= Subject key identifier: 79:BD:CA:27:B7:FE:61:C2:E5:A9:BD:6C:09:0C:B2:DE:3C:28:90:E3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F2E7E0115D3B49A3DD400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.17.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:2e:7e:01:15:d3:b4:9a:3d:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=2d6f6050-4503-46fb-9fb5-39f537022599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:40:3f:45:4f:c2:78:22:1f:42:7c:67:45: 1d:93:88:f1:67:9e:1b:54:f8:7b:62:c0:8f:6f:e5: 60:1f:af:00:37:09:bd:82:ac:c6:21:d2:7b:34:a3: e2:ab:c6:e3:24:39:0f:6f:86:00:7d:4f:3f:35:23: 4d:63:30:6f:0c:31:3b:b6:13:db:0e:88:3e:d1:7a: 8c:94:56:57:b2:23:91:a9:cb:21:86:37:cf:2a:a8: d4:09:31:2f:3d:f0:1a:88:7b:47:b2:58:f7:58:f5: 33:67:7b:04:99:94:f1:05:24:8f:cc:2c:b9:99:b4: 9d:8e:44:01:fa:ae:22:6f:db:ca:dc:9e:54:69:3d: 36:58:f9:0e:6f:ad:c0:2b:29:f2:79:1c:59:a5:07: 8c:cc:6c:5b:85:6e:e7:aa:b8:53:62:56:e8:ed:f2: eb:05:64:6b:77:7a:05:1e:f4:df:8c:c4:11:98:71: 4c:0a:a3:bc:1f:a5:91:e9:22:2c:a2:2a:2a:7a:56: 5f:ff:f4:5c:e2:8f:08:70:34:6e:f6:67:31:6e:eb: be:49:6b:ed:18:32:75:18:ce:1d:42:ad:e3:10:66: c9:13:af:29:97:b4:c0:fc:c1:2b:0a:15:12:11:d9: 58:d5:00:b7:b1:17:6d:85:ef:c8:af:2f:21:1b:62: c2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BD:CA:27:B7:FE:61:C2:E5:A9:BD:6C:09:0C:B2:DE:3C:28:90:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:43:9d:6d:6e:8c:5d:08:62:00:9a:d6:ee:09:1d:a1:93:f5: 52:82:3c:b0:42:01:e1:bd:e4:6d:24:19:57:33:1e:08:fa:bf: a0:12:ca:49:c4:96:3b:94:dc:63:bc:01:48:60:50:6f:75:4e: 70:f4:80:5b:c2:cc:7d:94:9b:25:d9:38:e9:d1:86:f5:c1:9d: 5c:26:ae:3b:1f:c8:d5:7f:11:95:af:99:c2:06:53:d0:2e:2a: 04:4c:e5:cf:e0:42:c7:fc:8f:52:dd:e1:12:23:56:47:ec:68: 73:8d:48:31:a2:7e:26:e4:e4:7f:4d:3a:2a:ba:29:17:60:41: 8d:98:cc:cb:34:d9:d3:91:15:99:ea:3c:56:81:04:0a:41:cb: 84:ce:69:cc:30:ec:35:55:2f:e3:4d:c0:0f:1b:54:dd:80:ad: 1f:50:73:cd:1f:14:b4:c8:4c:77:b9:dd:3c:4f:c1:e0:4b:82: de:5c:0b:96:00:dd:b0:2b:25:4a:95:20:6a:a0:75:03:5e:d9: 2c:6f:1b:25:7c:35:ef:d6:8d:2a:e5:6e:73:0e:63:d2:2a:bb: 31:89:34:76:8b:09:cd:ed:37:8a:62:e9:0f:91:0a:65:77:79: 80:0b:3a:96:d6:31:a3:fb:c0:32:89:3e:69:05:11:c6:7c:22: 88:7d:8e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHy5+ARXTtJo91AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MmQ2ZjYwNTAtNDUwMy00NmZiLTlmYjUtMzlmNTM3MDIyNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1hAP0VPwngiH0J8Z0Udk4jxZ54bVPh7YsCP b+VgH68ANwm9gqzGIdJ7NKPiq8bjJDkPb4YAfU8/NSNNYzBvDDE7thPbDog+0XqM lFZXsiORqcshhjfPKqjUCTEvPfAaiHtHslj3WPUzZ3sEmZTxBSSPzCy5mbSdjkQB +q4ib9vK3J5UaT02WPkOb63AKynyeRxZpQeMzGxbhW7nqrhTYlbo7fLrBWRrd3oF HvTfjMQRmHFMCqO8H6WR6SIsoioqelZf//Rc4o8IcDRu9mcxbuu+SWvtGDJ1GM4d Qq3jEGbJE68pl7TA/MErChUSEdlY1QC3sRdthe/Iry8hG2LCzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm9yie3/mHC5am9bAkMst48KJDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTcwY2Q0NDktMzBhMy0z YjJiLWE0OGMtNTJjOGZjYzliMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtDnW1ujF0IYgCa1u4JHaGT9VKCPLBCAeG95G0kGVczHgj6v6ASyknE ljuU3GO8AUhgUG91TnD0gFvCzH2UmyXZOOnRhvXBnVwmrjsfyNV/EZWvmcIGU9Au KgRM5c/gQsf8j1Ld4RIjVkfsaHONSDGifibk5H9NOiq6KRdgQY2YzMs02dORFZnq PFaBBApBy4TOacww7DVVL+NNwA8bVN2ArR9Qc80fFLTITHe53TxPweBLgt5cC5YA 3bArJUqVIGqgdQNe2SxvGyV8Ne/WjSrlbnMOY9IquzGJNHaLCc3tN4pi6Q+RCmV3 eYALOpbWMaP7wDKJPmkFEcZ8Ioh9jnI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:14 2025 by rpki-client