$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fa4faba-2f7a-32d7-9e40-25a154c91f10.roa File: 3fa4faba-2f7a-32d7-9e40-25a154c91f10.roa (raw, json) Hash identifier: 4+vYBNJpSnggX6meixCnCQeuquenckX8Bea/hf+udjI= Subject key identifier: F1:BF:1A:96:A0:8A:CE:D1:A3:75:B2:BC:20:7E:AF:DD:26:60:49:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C533948EEAB339056E901680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fa4faba-2f7a-32d7-9e40-25a154c91f10.roa Signing time: Tue 04 Feb 2025 11:25:04 +0000 ROA not before: Tue 04 Feb 2025 11:25:04 +0000 ROA not after: Mon 05 May 2025 10:25:04 +0000 asID: 30036 IP address blocks: 173.20.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:33:94:8e:ea:b3:39:05:6e:90:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:25:04 2025 GMT Not After : May 5 10:25:04 2025 GMT Subject: CN=3e635c20-6b5f-4b41-a7a8-54f9e77fbe55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:82:2e:3f:b2:27:14:24:54:8f:21:a0:7a: 53:93:58:50:97:32:66:00:45:2f:79:b3:e8:25:40: 0f:59:ed:62:b5:32:79:5f:b5:3f:75:8c:c7:22:d1: 9c:71:5e:d3:c5:62:dc:97:e6:db:84:f8:3b:cf:ca: cd:20:69:47:eb:69:3f:26:00:8a:51:da:df:45:e4: 2d:fa:68:a5:8c:ea:b0:68:a8:0d:19:b0:3b:92:81: 17:57:ff:f2:ca:a3:07:25:d1:1f:0b:85:cc:5a:c2: e7:59:55:9d:1b:55:9d:8e:2c:78:d7:60:a0:b9:b7: 3a:9d:78:91:3d:64:77:ac:1d:04:0f:77:a6:6f:d9: cc:7b:7f:68:bf:dc:97:c6:2e:f7:91:a0:d4:f0:2d: 83:1d:48:25:d7:c0:25:51:fd:5f:e8:51:37:bf:64: 66:e0:0f:6c:fc:74:31:5b:8e:8d:1b:67:75:46:a1: 06:37:20:2b:e0:9c:56:06:53:2b:05:72:c3:5d:25: 2e:52:7a:d8:c3:bf:e1:8f:c2:83:49:91:73:86:73: 46:6a:8a:07:61:b9:57:95:10:e3:7b:b6:9e:ae:63: f2:48:a5:81:da:01:eb:86:da:a9:00:74:66:32:93: 78:76:f6:d3:79:3e:9e:bf:48:87:89:a7:23:24:42: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BF:1A:96:A0:8A:CE:D1:A3:75:B2:BC:20:7E:AF:DD:26:60:49:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fa4faba-2f7a-32d7-9e40-25a154c91f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4a:d5:04:8c:1c:da:dd:00:25:85:51:8c:0b:72:96:6b:13: 15:ea:e8:2b:e8:4b:38:ee:7d:cc:0f:f9:2f:3f:21:8a:88:01: 14:b4:5e:c5:24:47:19:45:49:30:b6:5b:5b:07:26:59:97:2e: 8b:cb:d7:30:6a:e3:c6:9e:33:e2:de:ee:bc:c9:6a:c0:41:32: e4:5f:ee:9e:ce:7e:c2:0b:b6:9c:58:9d:22:07:42:a4:e8:d3: 03:9e:cb:3b:95:5b:53:58:6a:ca:3f:12:20:7f:3e:fd:65:60: 6a:a2:9b:e6:19:29:0c:c2:40:a2:ed:80:f7:8e:31:78:6e:74: ed:9a:2d:96:50:90:9e:c4:bf:86:aa:9b:a2:70:4b:1c:77:f5: 5f:77:01:ae:84:24:e1:10:d8:77:24:67:5a:7b:4b:61:3d:e9: aa:82:ca:7e:8e:6b:d0:ff:69:5e:11:e5:38:df:2c:75:ff:d5: 66:88:b2:c7:2d:82:15:f3:c0:08:70:ec:ef:7f:ad:d1:a8:6b: db:98:cd:56:74:e6:1a:f1:2b:02:88:af:40:aa:3d:d8:ab:d5: 0d:f7:bd:60:f8:59:ac:3e:7d:ee:cb:b4:6b:d3:68:49:18:48: c2:bc:06:75:5c:2b:02:89:f8:86:a4:26:fe:df:cc:f5:5a:d1: 8c:68:d6:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM5SO6rM5BW6QFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjUwNFoXDTI1MDUwNTEwMjUwNFowLzEtMCsGA1UEAxMk M2U2MzVjMjAtNmI1Zi00YjQxLWE3YTgtNTRmOWU3N2ZiZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqCCLj+yJxQkVI8hoHpTk1hQlzJmAEUvebPo JUAPWe1itTJ5X7U/dYzHItGccV7TxWLcl+bbhPg7z8rNIGlH62k/JgCKUdrfReQt +miljOqwaKgNGbA7koEXV//yyqMHJdEfC4XMWsLnWVWdG1Wdjix412Cgubc6nXiR PWR3rB0ED3emb9nMe39ov9yXxi73kaDU8C2DHUgl18AlUf1f6FE3v2Rm4A9s/HQx W46NG2d1RqEGNyAr4JxWBlMrBXLDXSUuUnrYw7/hj8KDSZFzhnNGaooHYblXlRDj e7aermPySKWB2gHrhtqpAHRmMpN4dvbTeT6ev0iHiacjJEJLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG/Gpagis7Ro3WyvCB+r90mYEmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZhNGZhYmEtMmY3YS0z MmQ3LTllNDAtMjVhMTU0YzkxZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlK1QSMHNrdACWFUYwLcpZrExXq6CvoSzjufcwP+S8/IYqIARS0XsUk RxlFSTC2W1sHJlmXLovL1zBq48aeM+Le7rzJasBBMuRf7p7OfsILtpxYnSIHQqTo 0wOeyzuVW1NYaso/EiB/Pv1lYGqim+YZKQzCQKLtgPeOMXhudO2aLZZQkJ7Ev4aq m6JwSxx39V93Aa6EJOEQ2HckZ1p7S2E96aqCyn6Oa9D/aV4R5TjfLHX/1WaIssct ghXzwAhw7O9/rdGoa9uYzVZ05hrxKwKIr0CqPdir1Q33vWD4Waw+fe7LtGvTaEkY SMK8BnVcKwKJ+IakJv7fzPVa0Yxo1nM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:24 2025 by rpki-client