$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f2f419d-9580-3e15-b3fb-c724423d184c.roa File: 2f2f419d-9580-3e15-b3fb-c724423d184c.roa (raw, json) Hash identifier: /Ck4zyDRZbA6icdc0ZCIdu7xg96DODoISmdoJhbz88E= Subject key identifier: 7B:1B:C5:A6:49:D8:44:66:54:FD:0D:B9:0B:37:B9:93:08:F3:CF:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57DE5BCDA0A12EA0C60E3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f2f419d-9580-3e15-b3fb-c724423d184c.roa Signing time: Tue 04 Feb 2025 13:54:48 +0000 ROA not before: Tue 04 Feb 2025 13:54:48 +0000 ROA not after: Mon 05 May 2025 12:54:48 +0000 asID: 30036 IP address blocks: 173.20.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:e5:bc:da:0a:12:ea:0c:60:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:54:48 2025 GMT Not After : May 5 12:54:48 2025 GMT Subject: CN=8613deae-5d75-4360-a3f1-4d8c5692b4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:77:6f:1e:18:4e:c1:66:02:31:f8:0e:9f:2e: 18:d1:fd:26:d1:a7:e0:d9:98:f3:06:b0:b2:d9:ce: d6:40:7f:b7:35:98:cb:7d:0a:13:0e:cf:bd:2e:31: e4:cf:da:d1:ae:c5:b7:a7:26:08:e5:b9:62:88:96: d0:35:60:28:6e:bc:2b:b2:b5:68:08:9a:0b:05:1c: e4:af:b6:bb:18:dd:21:6c:ca:70:51:6e:02:60:6e: 2b:d5:db:eb:33:7d:ee:82:cf:1b:d1:f4:90:6b:27: 09:82:0b:f5:75:2c:e8:54:b9:c5:91:a0:2f:fe:45: d4:b1:47:77:4a:8f:5a:79:2d:e7:f9:37:ee:04:b0: 05:95:c0:1e:af:2e:03:92:28:88:8b:da:2f:72:78: 42:f5:fa:4b:47:eb:6b:84:00:e7:d7:61:e5:95:c3: 25:34:a7:4b:f1:a3:56:49:19:cd:0c:55:da:92:64: 08:18:ce:9e:86:20:5a:61:b0:9e:80:bb:09:a8:06: ba:77:6d:7e:0a:ac:3c:9e:37:77:ea:1e:e3:46:a9: 8a:0d:df:4b:ef:95:0a:ef:bf:28:6f:b9:b8:2a:04: a9:fc:b1:2e:99:01:f1:ac:59:db:c3:54:31:80:72: 21:d7:77:58:7b:0b:5f:e8:45:86:2a:b0:9a:e4:14: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1B:C5:A6:49:D8:44:66:54:FD:0D:B9:0B:37:B9:93:08:F3:CF:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f2f419d-9580-3e15-b3fb-c724423d184c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:35:0f:09:d8:96:30:80:3b:40:aa:74:46:e2:bb:62:70:63: 75:67:c1:a5:a6:cc:de:14:21:b4:5d:65:f0:43:af:df:86:96: e2:bf:e4:7f:c5:41:78:39:cc:9e:a8:ee:e5:1d:56:79:62:9d: 1d:96:64:97:c6:0d:b0:5f:cf:77:45:ec:71:28:25:b8:57:56: ff:9c:3d:13:b8:68:42:29:9e:7f:2a:04:49:d7:53:73:bc:fe: 98:49:e2:e5:d2:6d:8d:b9:13:04:d6:bf:32:96:0c:4e:ce:bf: 9d:a2:98:71:3d:41:db:e5:34:e1:f1:82:27:72:68:34:77:ff: bf:65:81:df:ea:c9:e7:fd:2c:a8:98:9c:ab:86:0e:60:4d:3b: f6:d4:a2:13:59:22:55:6d:68:1d:9e:90:82:a2:ab:58:99:eb: ab:46:3f:a3:be:67:17:0f:fe:9f:66:f0:3b:34:d6:65:89:8d: a9:b7:e8:d0:32:80:ef:41:06:1f:1c:18:ae:47:be:3f:d4:89: c3:f0:d0:97:d4:43:af:b3:c1:7f:1e:8d:76:2e:72:32:b6:86: d6:8c:1f:91:35:22:02:31:97:3a:44:db:3e:c0:dd:3e:bf:0d: 85:08:9c:8a:ba:86:59:b3:76:1c:64:3d:72:13:28:d5:4c:2b: 17:bc:6f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfeW82goS6gxg48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTQ0OFoXDTI1MDUwNTEyNTQ0OFowLzEtMCsGA1UEAxMk ODYxM2RlYWUtNWQ3NS00MzYwLWEzZjEtNGQ4YzU2OTJiNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXdvHhhOwWYCMfgOny4Y0f0m0afg2ZjzBrCy 2c7WQH+3NZjLfQoTDs+9LjHkz9rRrsW3pyYI5bliiJbQNWAobrwrsrVoCJoLBRzk r7a7GN0hbMpwUW4CYG4r1dvrM33ugs8b0fSQaycJggv1dSzoVLnFkaAv/kXUsUd3 So9aeS3n+TfuBLAFlcAery4DkiiIi9ovcnhC9fpLR+trhADn12HllcMlNKdL8aNW SRnNDFXakmQIGM6ehiBaYbCegLsJqAa6d21+Cqw8njd36h7jRqmKDd9L75UK778o b7m4KgSp/LEumQHxrFnbw1QxgHIh13dYewtf6EWGKrCa5BSF9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsbxaZJ2ERmVP0NuQs3uZMI889jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmYyZjQxOWQtOTU4MC0z ZTE1LWIzZmItYzcyNDQyM2QxODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc1DwnYljCAO0CqdEbiu2JwY3VnwaWmzN4UIbRdZfBDr9+GluK/5H/F QXg5zJ6o7uUdVnlinR2WZJfGDbBfz3dF7HEoJbhXVv+cPRO4aEIpnn8qBEnXU3O8 /phJ4uXSbY25EwTWvzKWDE7Ov52imHE9QdvlNOHxgidyaDR3/79lgd/qyef9LKiY nKuGDmBNO/bUohNZIlVtaB2ekIKiq1iZ66tGP6O+ZxcP/p9m8Ds01mWJjam36NAy gO9BBh8cGK5Hvj/UicPw0JfUQ6+zwX8ejXYucjK2htaMH5E1IgIxlzpE2z7A3T6/ DYUInIq6hlmzdhxkPXITKNVMKxe8b4E= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:29 2025 by rpki-client