$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c591110-b7d8-3d5d-80c3-5eb51115718f.roa File: 0c591110-b7d8-3d5d-80c3-5eb51115718f.roa (raw, json) Hash identifier: 41VH20Q9iD2+p7UmyXnGnZkvQdrPeGMhN/Becv8RLWs= Subject key identifier: 12:2A:1B:CA:51:6D:B9:92:B6:75:60:F6:FA:5B:A8:CA:39:E1:2B:AB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C557ADB4E850FB8BC7D24530 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c591110-b7d8-3d5d-80c3-5eb51115718f.roa Signing time: Tue 04 Feb 2025 12:37:48 +0000 ROA not before: Tue 04 Feb 2025 12:37:48 +0000 ROA not after: Mon 05 May 2025 11:37:48 +0000 asID: 30036 IP address blocks: 173.20.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:57:ad:b4:e8:50:fb:8b:c7:d2:45:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:37:48 2025 GMT Not After : May 5 11:37:48 2025 GMT Subject: CN=c7a7c25a-61d9-4e91-8a72-72eaa2ef6321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:f5:57:1b:4c:e0:9d:4f:4d:e8:7e:f3:8a: 69:9a:fd:79:47:b4:a5:30:ea:c2:41:9e:3a:0a:87: 78:8e:4e:c5:3d:d6:86:97:14:8a:e1:d3:04:2d:f8: f3:3a:ca:2f:f5:94:85:fe:93:a2:cf:26:e6:20:62: 89:67:60:50:21:c2:d8:ee:80:b2:a8:de:2d:6c:4a: a0:60:01:37:1d:6b:70:e4:fd:19:c5:4d:cf:d3:0e: 4c:ed:c4:81:22:c8:c9:8d:b0:58:1a:33:a8:eb:99: b3:3c:da:66:1e:41:64:d7:c2:ba:75:5c:bb:22:56: d6:ce:3d:cb:b3:d6:69:8c:f8:d2:0f:86:08:ae:67: 4f:10:f2:b0:5c:bf:01:90:f3:db:36:1a:df:ad:01: 08:6a:cd:78:1b:2e:27:71:ba:e8:43:92:72:da:98: 8d:46:ec:a7:ba:8d:aa:85:83:68:aa:55:87:d3:9d: 6c:cb:09:5c:15:82:61:9c:5d:4c:53:40:89:58:fa: 0b:90:ed:ec:7c:47:af:f9:65:91:ee:44:c6:d2:69: 9e:59:4b:0a:2a:39:d4:7f:9f:c5:19:1c:b5:30:2f: 3c:2e:b3:09:d3:a8:f3:7f:03:0f:22:63:1b:54:c5: 66:48:04:2b:7e:71:5b:d2:d0:5b:78:4a:c8:45:fd: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:1B:CA:51:6D:B9:92:B6:75:60:F6:FA:5B:A8:CA:39:E1:2B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c591110-b7d8-3d5d-80c3-5eb51115718f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:be:0a:81:d9:10:47:11:24:2c:da:ed:a2:9d:46:b5:c8:72: 8d:c0:fa:bc:95:d3:93:29:e8:4b:01:16:47:5e:6a:6e:79:8b: d3:fb:db:2c:23:e1:17:d7:0e:48:f4:fc:1b:56:17:39:50:f3: 06:27:bd:95:f1:f5:41:2e:83:35:43:60:cc:de:42:cf:c0:25: b6:c1:91:a1:1d:bf:a5:04:8f:bb:fe:7c:8d:fb:89:0e:ad:e7: 52:6c:1d:7f:98:07:95:0e:f1:d1:5d:ad:52:80:50:c1:e6:87: 60:b4:6f:e8:5f:fb:28:04:2a:cb:9e:3b:ab:eb:e8:ea:bc:89: 12:36:36:39:eb:75:17:08:51:16:eb:d8:82:bc:14:c3:36:c2: be:ba:8c:f6:45:5b:37:37:01:54:7c:d1:09:2e:ba:da:18:ba: f8:12:06:45:e6:ad:79:36:02:ad:59:29:68:6b:69:b6:a1:63: 50:c2:76:c6:5b:5f:d2:43:0d:d7:3a:3d:b5:33:e5:be:7f:b3: b7:a0:07:76:89:5a:e9:37:5a:57:f9:4e:37:c3:76:64:81:86: 47:0e:72:96:10:ef:06:6b:de:0c:7b:33:0d:26:ce:8d:41:ff: d9:9e:95:52:52:ed:e6:ec:f7:e4:32:6b:78:ec:bc:5e:d0:42: 6c:66:99:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFV6206FD7i8fSRTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzc0OFoXDTI1MDUwNTExMzc0OFowLzEtMCsGA1UEAxMk YzdhN2MyNWEtNjFkOS00ZTkxLThhNzItNzJlYWEyZWY2MzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkn1VxtM4J1PTeh+84ppmv15R7SlMOrCQZ46 Cod4jk7FPdaGlxSK4dMELfjzOsov9ZSF/pOizybmIGKJZ2BQIcLY7oCyqN4tbEqg YAE3HWtw5P0ZxU3P0w5M7cSBIsjJjbBYGjOo65mzPNpmHkFk18K6dVy7IlbWzj3L s9ZpjPjSD4YIrmdPEPKwXL8BkPPbNhrfrQEIas14Gy4ncbroQ5Jy2piNRuynuo2q hYNoqlWH051sywlcFYJhnF1MU0CJWPoLkO3sfEev+WWR7kTG0mmeWUsKKjnUf5/F GRy1MC88LrMJ06jzfwMPImMbVMVmSAQrfnFb0tBbeErIRf1FxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIqG8pRbbmStnVg9vpbqMo54SurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGM1OTExMTAtYjdkOC0z ZDVkLTgwYzMtNWViNTExMTU3MThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB++CoHZEEcRJCza7aKdRrXIco3A+ryV05Mp6EsBFkdeam55i9P72ywj 4RfXDkj0/BtWFzlQ8wYnvZXx9UEugzVDYMzeQs/AJbbBkaEdv6UEj7v+fI37iQ6t 51JsHX+YB5UO8dFdrVKAUMHmh2C0b+hf+ygEKsueO6vr6Oq8iRI2NjnrdRcIURbr 2IK8FMM2wr66jPZFWzc3AVR80QkuutoYuvgSBkXmrXk2Aq1ZKWhrabahY1DCdsZb X9JDDdc6PbUz5b5/s7egB3aJWuk3Wlf5TjfDdmSBhkcOcpYQ7wZr3gx7Mw0mzo1B /9melVJS7ebs9+Qya3jsvF7QQmxmmVg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:52 2025 by rpki-client