$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa File: 3882367a-4385-354c-b426-03b9c22717da.roa (raw, json) Hash identifier: CTIKElq3Ln/1D39QifF/ZBDV3lOUypEaNkEm2HDUEmo= Subject key identifier: 64:65:3F:A3:01:BB:19:C1:73:52:FD:66:C4:70:9C:DE:45:FE:03:6C Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499C168FEF5F1C58B689F35B00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa Signing time: Tue 22 Apr 2025 10:45:23 +0000 ROA not before: Tue 22 Apr 2025 10:45:23 +0000 ROA not after: Mon 21 Jul 2025 10:45:23 +0000 asID: 32043 IP address blocks: 173.232.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:16:8f:ef:5f:1c:58:b6:89:f3:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 10:45:23 2025 GMT Not After : Jul 21 10:45:23 2025 GMT Subject: CN=3a954747-a09d-42ab-b371-95e5f2c832d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:ff:c7:c0:be:b3:72:f6:dd:63:df:df:b0: 85:c2:c7:5b:b2:fe:b4:37:42:d7:62:00:14:05:c4: b0:8e:e5:bc:fc:52:af:37:53:13:85:68:88:cc:62: 4f:97:fa:0b:e7:98:b4:4f:30:83:72:bb:90:e9:7b: 02:ee:8d:e6:da:aa:61:03:4e:55:9c:b4:3c:fb:9c: 2a:b6:94:26:0f:34:a9:6f:1e:4f:82:df:8a:48:3f: 0c:94:27:8e:23:17:69:35:85:96:dd:9d:18:1e:8d: b2:6f:11:61:fe:22:0c:c8:9c:89:d5:fc:9c:2c:b1: 41:9f:0a:50:6d:76:10:b0:64:05:78:ff:8e:b6:da: 40:67:d9:f3:a4:ed:21:ce:c1:1d:e3:ad:d2:52:fb: 38:ce:c0:1d:46:05:a6:85:a8:f2:e9:af:02:38:16: c9:a8:54:36:ee:29:e0:8b:be:5a:31:92:1e:b3:31: 1e:ef:3c:99:a1:c8:69:20:82:8f:08:27:d5:bb:ca: 66:69:44:44:52:c9:0f:37:cb:5c:9a:13:f6:b7:54: fb:d1:ce:5c:cc:62:b9:5e:fd:b5:cc:7d:d4:87:c1: 16:c5:ae:d2:2e:bd:83:aa:f8:6b:5a:5c:04:68:07: 5b:dc:f4:65:0c:b1:40:e4:cc:b8:1f:a7:38:64:cf: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:65:3F:A3:01:BB:19:C1:73:52:FD:66:C4:70:9C:DE:45:FE:03:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:49:ae:f4:1d:4b:c3:b3:16:1c:51:9f:57:bc:a5:9a:72:09: 71:fe:dd:69:25:00:8c:38:ad:6d:ba:d2:2a:88:c5:a4:ab:5b: b3:db:d2:cb:a9:90:ec:05:d8:67:da:c2:44:96:f2:00:32:3e: 13:5f:12:90:29:81:21:03:4c:a7:41:40:95:75:81:e7:30:8c: cb:93:e0:39:6e:68:1a:1a:3d:0d:b9:2a:d8:3f:7f:e9:82:fc: c9:b6:5d:d6:29:a1:bd:2c:c7:e7:70:1c:96:22:dc:81:ad:c3: a0:a3:79:53:ec:99:99:10:2d:b4:75:96:9a:38:7a:a3:b9:74: 90:6e:c0:bd:ed:29:b7:67:fd:04:3c:fe:bf:b9:8b:e8:4f:7e: 29:bf:92:ea:26:e5:db:b1:ae:88:45:69:8c:75:e9:08:0d:2a: 41:71:6d:d0:4a:05:8f:89:ec:02:87:ab:b4:7a:d5:cc:4a:85: f1:15:ff:c7:3f:1d:ec:ea:f8:d6:82:9e:c7:1b:e8:98:a4:6a: 44:e9:1a:ea:c9:5a:6c:fd:2d:5a:79:09:6d:32:07:ba:d0:73: b4:89:ec:d6:d3:3e:87:4a:10:42:7a:ec:9d:a1:6b:f8:55:68: 18:32:38:07:19:31:5c:95:41:c0:87:69:76:82:a9:32:86:79: 81:6a:4a:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcFo/vXxxYtonzWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjEwNDUyM1oXDTI1MDcyMTEwNDUyM1owLzEtMCsGA1UEAxMk M2E5NTQ3NDctYTA5ZC00MmFiLWIzNzEtOTVlNWYyYzgzMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnH/x8C+s3L23WPf37CFwsdbsv60N0LXYgAU BcSwjuW8/FKvN1MThWiIzGJPl/oL55i0TzCDcruQ6XsC7o3m2qphA05VnLQ8+5wq tpQmDzSpbx5Pgt+KSD8MlCeOIxdpNYWW3Z0YHo2ybxFh/iIMyJyJ1fycLLFBnwpQ bXYQsGQFeP+OttpAZ9nzpO0hzsEd463SUvs4zsAdRgWmhajy6a8COBbJqFQ27ing i75aMZIeszEe7zyZochpIIKPCCfVu8pmaUREUskPN8tcmhP2t1T70c5czGK5Xv21 zH3Uh8EWxa7SLr2DqvhrWlwEaAdb3PRlDLFA5My4H6c4ZM99ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRlP6MBuxnBc1L9ZsRwnN5F/gNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzg4MjM2N2EtNDM4NS0z NTRjLWI0MjYtMDNiOWMyMjcxN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBJrvQdS8OzFhxRn1e8pZpyCXH+3WklAIw4rW260iqIxaSrW7Pb0sup kOwF2GfawkSW8gAyPhNfEpApgSEDTKdBQJV1gecwjMuT4DluaBoaPQ25Ktg/f+mC /Mm2XdYpob0sx+dwHJYi3IGtw6CjeVPsmZkQLbR1lpo4eqO5dJBuwL3tKbdn/QQ8 /r+5i+hPfim/kuom5duxrohFaYx16QgNKkFxbdBKBY+J7AKHq7R61cxKhfEV/8c/ Hezq+NaCnscb6JikakTpGurJWmz9LVp5CW0yB7rQc7SJ7NbTPodKEEJ67J2ha/hV aBgyOAcZMVyVQcCHaXaCqTKGeYFqSuQ= -----END CERTIFICATE-----Generated at Sun Apr 27 04:24:38 2025 by rpki-client