$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c0fffb7-b37f-3ad7-b6b2-a6d6354cc5c4.roa File: 3c0fffb7-b37f-3ad7-b6b2-a6d6354cc5c4.roa (raw, json) Hash identifier: fmBzFO/b9kJpUuOZRDjvLZoCTxYkBM9bZ1O116W76TQ= Subject key identifier: 0F:8E:5F:C5:A7:32:B4:20:97:0B:63:28:8E:59:45:4F:C5:FF:16:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B736DB7138D1B3C55C056980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c0fffb7-b37f-3ad7-b6b2-a6d6354cc5c4.roa Signing time: Thu 30 Jan 2025 11:10:21 +0000 ROA not before: Thu 30 Jan 2025 11:10:21 +0000 ROA not after: Wed 30 Apr 2025 10:10:21 +0000 asID: 30036 IP address blocks: 173.20.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:db:71:38:d1:b3:c5:5c:05:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:10:21 2025 GMT Not After : Apr 30 10:10:21 2025 GMT Subject: CN=0a39d623-8949-480f-a0d8-27986054ff67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:ef:69:f0:62:aa:4b:3d:ee:9d:92:92:4c: 71:ea:a4:6a:03:e4:45:6e:37:75:b1:9e:9a:f5:67: 46:c0:72:15:31:2e:70:99:1f:dd:b9:cc:2b:24:9d: 35:43:7f:20:41:4e:49:4c:73:88:95:90:07:f9:08: 65:4a:d3:62:fa:c6:b9:b5:85:76:31:0c:e5:1c:96: 41:b1:d4:59:83:26:88:1d:c0:6f:53:7a:f3:50:46: 61:3b:37:4c:e7:5a:87:9a:af:8d:fe:eb:3f:fd:66: f3:9e:46:e5:49:89:17:d5:92:01:dd:7c:7d:81:db: 98:15:6d:01:61:36:7e:af:56:5d:3a:31:13:08:69: ae:35:19:1b:11:f0:e6:1a:27:f8:7c:9f:ea:17:50: 33:8d:ec:56:b9:4f:d8:cb:1b:ca:79:ed:a8:b5:f9: 9a:83:df:67:4b:a6:a1:03:ad:2b:e5:a6:45:0a:eb: a0:f0:45:c0:34:11:6e:74:7d:38:f7:ed:05:7b:a0: ad:c6:f5:13:22:a7:00:25:e4:b3:19:c6:c6:81:e7: f7:b1:e1:3b:75:ea:f2:10:e5:a9:38:59:fb:a1:2f: 21:61:95:5a:ea:8b:d3:27:0d:c4:2c:30:c6:59:d8: c0:68:55:87:03:e3:49:87:df:9f:84:05:ac:82:16: 95:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:5F:C5:A7:32:B4:20:97:0B:63:28:8E:59:45:4F:C5:FF:16:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c0fffb7-b37f-3ad7-b6b2-a6d6354cc5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:47:87:5f:43:f4:2a:88:18:88:ab:10:3a:1d:6d:c0:89:a4: 42:de:04:c0:4a:3c:9d:66:b7:7e:83:b4:34:e9:0d:c2:61:71: 7b:4d:af:00:5f:9d:0f:a1:9c:35:11:6e:15:3e:33:f9:c7:71: 73:76:54:8b:3d:19:a6:e2:58:61:2a:3b:c3:7a:ed:c5:fa:a5: 96:72:87:11:22:c6:b1:0d:89:fe:ba:f1:41:b0:c7:45:e2:8c: cf:8d:81:a3:04:f1:3e:18:83:11:52:17:72:9f:2b:93:c7:d1: 18:1a:f2:4d:2c:e6:5e:e9:7e:37:ee:2f:83:ff:3b:9d:18:95: 3b:53:e0:ee:52:d3:cf:8c:69:ff:76:c3:e5:33:59:9e:62:4c: a6:5d:bd:15:4f:80:1a:c9:2e:8e:3d:7d:4c:5c:f8:ec:8e:0c: 26:41:90:65:07:48:f8:0f:92:3c:c8:d0:86:7b:c1:60:37:41: 5f:f9:4d:8a:e7:0d:46:66:89:9d:71:97:06:81:e8:9b:44:5a: 8a:ba:0c:4e:4b:3c:87:82:96:c0:1b:df:b5:54:fe:4e:8e:2f: 89:34:bd:29:61:c4:03:f1:c2:e3:1d:36:bd:36:93:55:69:2b: b7:71:d8:8d:4f:b9:5b:63:d6:43:ce:61:12:8d:56:a2:e7:fa: ec:5e:c3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NttxONGzxVwFaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTAyMVoXDTI1MDQzMDEwMTAyMVowLzEtMCsGA1UEAxMk MGEzOWQ2MjMtODk0OS00ODBmLWEwZDgtMjc5ODYwNTRmZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3HvafBiqks97p2Skkxx6qRqA+RFbjd1sZ6a 9WdGwHIVMS5wmR/ducwrJJ01Q38gQU5JTHOIlZAH+QhlStNi+sa5tYV2MQzlHJZB sdRZgyaIHcBvU3rzUEZhOzdM51qHmq+N/us//WbznkblSYkX1ZIB3Xx9gduYFW0B YTZ+r1ZdOjETCGmuNRkbEfDmGif4fJ/qF1AzjexWuU/YyxvKee2otfmag99nS6ah A60r5aZFCuug8EXANBFudH049+0Fe6CtxvUTIqcAJeSzGcbGgef3seE7deryEOWp OFn7oS8hYZVa6ovTJw3ELDDGWdjAaFWHA+NJh9+fhAWsghaVWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+OX8WnMrQglwtjKI5ZRU/F/xbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2MwZmZmYjctYjM3Zi0z YWQ3LWI2YjItYTZkNjM1NGNjNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1Hh19D9CqIGIirEDodbcCJpELeBMBKPJ1mt36DtDTpDcJhcXtNrwBf nQ+hnDURbhU+M/nHcXN2VIs9GabiWGEqO8N67cX6pZZyhxEixrENif668UGwx0Xi jM+NgaME8T4YgxFSF3KfK5PH0Rga8k0s5l7pfjfuL4P/O50YlTtT4O5S08+Maf92 w+UzWZ5iTKZdvRVPgBrJLo49fUxc+OyODCZBkGUHSPgPkjzI0IZ7wWA3QV/5TYrn DUZmiZ1xlwaB6JtEWoq6DE5LPIeClsAb37VU/k6OL4k0vSlhxAPxwuMdNr02k1Vp K7dx2I1PuVtj1kPOYRKNVqLn+uxew8M= -----END CERTIFICATE-----Generated at Tue Apr 8 18:15:04 2025 by rpki-client