$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19397180-5cf1-3610-9843-71b04f6d99d4.roa File: 19397180-5cf1-3610-9843-71b04f6d99d4.roa (raw, json) Hash identifier: Ld1aAqoAhWoslX5wKg5e/BVT16ujdvic1umU2QzknqM= Subject key identifier: CE:32:B4:82:5B:AE:55:1D:1F:A7:4B:24:B1:77:DE:2F:97:5D:12:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B7364D2A85A905A697857180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19397180-5cf1-3610-9843-71b04f6d99d4.roa Signing time: Thu 30 Jan 2025 11:09:14 +0000 ROA not before: Thu 30 Jan 2025 11:09:14 +0000 ROA not after: Wed 30 Apr 2025 10:09:14 +0000 asID: 30036 IP address blocks: 173.20.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:4d:2a:85:a9:05:a6:97:85:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:09:14 2025 GMT Not After : Apr 30 10:09:14 2025 GMT Subject: CN=271c2c3a-95a7-4d40-a9f9-18315b6caac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:4f:0f:26:7b:b0:0d:08:8c:d5:8a:be:52: 58:b9:cc:2c:72:09:3d:d2:7c:63:de:d2:74:8a:a4: 7d:99:bc:c6:51:2e:17:e0:a1:56:8f:ae:f6:8c:16: f1:7d:3d:e8:e9:9d:1c:6c:5b:f0:d1:2d:13:79:17: e8:81:7b:0e:27:0e:3e:9c:4f:36:b4:ea:6d:bd:e8: ae:86:8e:40:7a:59:f4:88:ab:61:90:6a:fd:00:84: d6:fc:0a:e1:8a:2e:51:7e:2f:54:42:97:17:82:af: 43:3e:74:33:28:2f:5f:04:dd:6e:ef:8e:91:90:94: ed:5e:c9:8d:ea:fb:d8:14:4c:9a:fb:e6:02:47:3d: 34:76:79:41:26:a3:d8:86:6b:05:de:4d:77:2f:78: 21:9b:7c:7f:ec:76:17:3d:fb:2f:8b:cd:4c:ab:0d: cb:33:d4:f7:c4:7d:45:98:68:0f:36:7f:c8:cd:23: 04:02:c7:42:83:b3:c4:a0:a3:f8:6e:79:89:7b:e3: 4e:42:50:5a:3b:3d:99:69:00:88:ab:c1:9c:6d:7e: 19:5f:80:29:ca:72:af:2f:79:64:38:6f:13:67:cb: 8d:9a:34:3e:13:24:d3:4c:75:24:75:ea:8b:9c:c5: 14:6a:5e:ae:96:28:bd:5b:c8:c8:51:76:72:30:c1: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:B4:82:5B:AE:55:1D:1F:A7:4B:24:B1:77:DE:2F:97:5D:12:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19397180-5cf1-3610-9843-71b04f6d99d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:30:38:39:27:9d:02:07:1a:2d:f1:75:00:00:1f:d2:f3:6e: 0f:bf:56:92:a3:6d:b2:2a:3b:b3:8e:94:e3:14:1a:96:d9:ab: dd:ac:21:e1:cf:d7:54:f6:bb:85:9e:a1:47:66:f6:0e:be:4f: 78:36:36:6f:cb:a5:bf:1c:af:ae:c3:8d:e5:df:15:59:fd:2c: c5:ea:04:57:f1:8f:a5:91:50:68:17:9a:72:34:c7:75:c1:9f: a8:68:9b:9f:3b:06:d1:29:a0:0e:05:54:f2:65:bc:79:db:27: 54:e1:70:39:a2:68:f5:ca:34:c3:5a:db:c6:cb:76:b2:0b:b3: 6a:c4:79:50:ed:36:71:45:33:da:f1:51:a1:94:3e:f4:7b:f5: 21:a7:bd:9a:61:e4:bc:03:93:fb:e7:87:77:ee:d5:d5:61:c5: 26:23:a7:01:b0:f5:86:9a:8b:a7:6c:cf:18:36:b9:be:11:9a: 83:25:16:e1:91:0b:a8:e0:a2:a6:e8:cc:4c:5b:8c:7f:38:90: 63:c7:ae:ca:9e:a1:9b:61:6d:a8:9e:18:b1:19:8b:c3:db:8b: 68:cb:60:5c:2f:a7:eb:0f:40:a8:68:a7:34:00:17:aa:c3:46: e1:82:4f:f7:18:f0:49:87:dc:00:ce:40:8d:da:0c:16:d4:85: e4:69:81:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nk0qhakFppeFcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDkxNFoXDTI1MDQzMDEwMDkxNFowLzEtMCsGA1UEAxMk MjcxYzJjM2EtOTVhNy00ZDQwLWE5ZjktMTgzMTViNmNhYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJFPDyZ7sA0IjNWKvlJYucwscgk90nxj3tJ0 iqR9mbzGUS4X4KFWj672jBbxfT3o6Z0cbFvw0S0TeRfogXsOJw4+nE82tOptveiu ho5Aeln0iKthkGr9AITW/Arhii5Rfi9UQpcXgq9DPnQzKC9fBN1u746RkJTtXsmN 6vvYFEya++YCRz00dnlBJqPYhmsF3k13L3ghm3x/7HYXPfsvi81Mqw3LM9T3xH1F mGgPNn/IzSMEAsdCg7PEoKP4bnmJe+NOQlBaOz2ZaQCIq8GcbX4ZX4ApynKvL3lk OG8TZ8uNmjQ+EyTTTHUkdeqLnMUUal6ulii9W8jIUXZyMMExDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4ytIJbrlUdH6dLJLF33i+XXRLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTkzOTcxODAtNWNmMS0z NjEwLTk4NDMtNzFiMDRmNmQ5OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8wODknnQIHGi3xdQAAH9Lzbg+/VpKjbbIqO7OOlOMUGpbZq92sIeHP 11T2u4WeoUdm9g6+T3g2Nm/Lpb8cr67DjeXfFVn9LMXqBFfxj6WRUGgXmnI0x3XB n6hom587BtEpoA4FVPJlvHnbJ1ThcDmiaPXKNMNa28bLdrILs2rEeVDtNnFFM9rx UaGUPvR79SGnvZph5LwDk/vnh3fu1dVhxSYjpwGw9Yaai6dszxg2ub4RmoMlFuGR C6jgoqbozExbjH84kGPHrsqeoZthbaieGLEZi8Pbi2jLYFwvp+sPQKhopzQAF6rD RuGCT/cY8EmH3ADOQI3aDBbUheRpgRE= -----END CERTIFICATE-----Generated at Sun Apr 6 08:28:07 2025 by rpki-client