$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7b1325f-55bb-3043-8a1a-8a0b69fbaa21.roa File: f7b1325f-55bb-3043-8a1a-8a0b69fbaa21.roa (raw, json) Hash identifier: sHLC4Q0AaL1c+UTbDlcxXZw5tVKyPPoQx92uaDy5qSc= Subject key identifier: 11:FA:EE:47:39:3D:5B:A9:EA:1D:44:C9:5D:5E:B7:1C:48:9B:2F:B7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4AB7900C2947625BAE90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7b1325f-55bb-3043-8a1a-8a0b69fbaa21.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4a:b7:90:0c:29:47:62:5b:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=f87bcb07-375e-4c5c-bc70-147ab2eb30a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:00:63:5b:5b:a0:34:11:7c:79:a6:f5:9a: c9:2f:6a:4b:81:7e:af:d6:9c:fd:b6:5b:fd:6c:bf: f3:dd:e7:f3:dd:b9:dc:64:4d:c0:5a:e1:92:21:5d: 24:7e:89:58:bd:75:bb:e8:59:28:04:39:91:95:5a: c0:0f:4d:51:ac:16:86:7d:b5:7c:e5:ef:56:88:92: 53:dd:22:a2:b3:da:cb:1b:da:6f:a2:c1:2b:af:67: 98:df:bd:39:e4:4e:e1:a5:78:a4:24:77:b0:4e:9f: 8e:aa:98:b1:7c:89:60:7f:ed:5e:e4:1e:83:36:25: 44:99:36:5f:24:e1:11:25:50:fd:ff:bd:d4:ef:3d: 11:ed:86:90:47:11:d4:dc:2f:98:50:76:09:4a:08: 69:ce:14:c9:21:9c:c7:bf:e2:e0:92:66:d1:23:18: 78:ac:43:f6:de:dc:fe:8f:56:03:b0:ec:be:9d:46: a2:de:75:ab:4d:86:cd:30:e2:71:94:d5:ef:44:95: 48:91:ba:e6:03:34:ad:55:58:47:9d:55:df:dc:44: 0b:94:39:ad:01:aa:40:88:18:79:ad:28:06:39:a8: 73:db:6d:f7:15:d0:c3:60:29:9b:39:de:81:eb:62: 22:60:2f:05:ec:c6:c0:6b:e3:a6:8b:bb:ea:1b:1d: d8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FA:EE:47:39:3D:5B:A9:EA:1D:44:C9:5D:5E:B7:1C:48:9B:2F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7b1325f-55bb-3043-8a1a-8a0b69fbaa21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9b:3a:cc:1f:42:33:d6:57:9b:75:81:5d:b8:b5:c0:a3:d6: d1:15:1f:86:8a:e6:c6:cf:97:0a:58:4a:f1:e0:20:c8:b3:7f: 0d:4b:9f:d7:e0:01:7c:3d:ab:78:04:2e:3b:75:d1:8d:c0:bf: 48:30:87:3e:9c:87:ab:93:8d:90:ce:e8:38:59:e2:3f:da:04: 95:59:a4:66:cc:4e:71:3d:f3:92:64:83:ac:9b:29:a0:3d:f9: 0b:eb:0d:86:cd:64:58:c2:f9:39:91:6e:f9:fa:66:fd:83:ca: a5:33:dd:29:ad:c2:5e:3b:03:7f:ae:28:36:7c:5e:75:7e:09: a7:ed:f7:e8:96:a3:70:8e:d8:d4:d0:e3:1f:4e:cf:d9:3f:0a: 38:ff:c0:6d:91:dd:f1:67:64:0a:2d:71:80:2b:b0:59:d8:41: b3:e5:86:32:a2:58:2c:47:65:e0:73:75:d0:bb:b9:42:3a:d8: 6d:35:3b:c3:7b:e0:6a:2f:0c:c0:61:64:3e:d8:08:c7:ba:49: b3:3e:2f:d3:14:74:37:39:fc:16:fd:b6:a8:83:76:c9:2e:86: 25:75:5a:e2:2d:e0:5b:d8:53:62:90:ba:51:93:5c:5b:a6:db: a5:2a:17:74:54:b7:4d:0f:89:0d:f8:fb:02:63:47:ac:be:e0: 95:bd:74:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70q3kAwpR2JbrpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Zjg3YmNiMDctMzc1ZS00YzVjLWJjNzAtMTQ3YWIyZWIzMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EAAY1tboDQRfHmm9ZrJL2pLgX6v1pz9tlv9 bL/z3efz3bncZE3AWuGSIV0kfolYvXW76FkoBDmRlVrAD01RrBaGfbV85e9WiJJT 3SKis9rLG9pvosErr2eY37055E7hpXikJHewTp+OqpixfIlgf+1e5B6DNiVEmTZf JOERJVD9/73U7z0R7YaQRxHU3C+YUHYJSghpzhTJIZzHv+LgkmbRIxh4rEP23tz+ j1YDsOy+nUai3nWrTYbNMOJxlNXvRJVIkbrmAzStVVhHnVXf3EQLlDmtAapAiBh5 rSgGOahz2233FdDDYCmbOd6B62IiYC8F7MbAa+Omi7vqGx3Y/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH67kc5PVup6h1EyV1etxxImy+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjdiMTMyNWYtNTViYi0z MDQzLThhMWEtOGEwYjY5ZmJhYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCbOswfQjPWV5t1gV24tcCj1tEVH4aK5sbPlwpYSvHgIMizfw1Ln9fg AXw9q3gELjt10Y3Av0gwhz6ch6uTjZDO6DhZ4j/aBJVZpGbMTnE985Jkg6ybKaA9 +QvrDYbNZFjC+TmRbvn6Zv2DyqUz3Smtwl47A3+uKDZ8XnV+Caft9+iWo3CO2NTQ 4x9Oz9k/Cjj/wG2R3fFnZAotcYArsFnYQbPlhjKiWCxHZeBzddC7uUI62G01O8N7 4GovDMBhZD7YCMe6SbM+L9MUdDc5/Bb9tqiDdskuhiV1WuIt4FvYU2KQulGTXFum 26UqF3RUt00PiQ34+wJjR6y+4JW9dKk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:11 2025 by rpki-client