$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa File: 619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa (raw, json) Hash identifier: DPj8C2iQzy6O1elftiAHhRXWp1jGdP876UzVBB9IQ1c= Subject key identifier: CF:F0:D9:A2:94:76:4E:00:70:8E:71:A0:EF:08:A6:3F:11:3B:B5:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C575B0300CE4FB9BBA29CD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa Signing time: Tue 04 Feb 2025 13:38:16 +0000 ROA not before: Tue 04 Feb 2025 13:38:16 +0000 ROA not after: Mon 05 May 2025 12:38:16 +0000 asID: 30036 IP address blocks: 173.20.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:75:b0:30:0c:e4:fb:9b:ba:29:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:38:16 2025 GMT Not After : May 5 12:38:16 2025 GMT Subject: CN=e45dd847-711a-4c1f-9913-8cfad26c15bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a8:c1:be:75:3b:8f:38:e8:f2:9e:c9:25:67: 8e:46:8a:ac:ba:56:ae:63:5f:02:57:e2:16:a5:6b: ac:df:7e:86:2c:1f:c6:3a:c6:47:d4:fe:ed:4b:b1: 5f:00:42:ad:a5:a9:a2:0a:1e:a5:df:bb:e4:c0:0f: 49:cb:2e:28:19:8e:68:fd:af:61:41:b4:c2:d8:9c: 3d:61:15:be:00:53:5c:5d:cc:2b:36:a8:ef:8b:0d: fc:a6:d0:c2:e6:dc:f6:4b:6f:5c:06:18:81:96:3c: ec:e7:14:73:a7:d8:59:5e:6c:0a:4a:44:47:8f:8b: d0:aa:af:e2:d7:40:f0:3a:a3:de:2e:c1:b7:53:9b: 8b:bb:52:e9:40:cc:6b:a3:a9:b8:b7:c6:23:f8:cd: 7a:53:8f:64:7d:71:3c:3b:30:e5:74:3b:5c:25:cc: 1f:f6:1a:8a:50:dd:76:a8:6d:08:a8:8a:4b:08:b0: f9:77:dd:a4:8e:51:17:4a:98:dc:74:5d:48:c9:53: 8c:c5:77:fc:10:bd:64:24:34:40:b5:19:b3:ca:10: 09:ad:39:3b:56:d4:08:27:f1:75:74:8a:e6:64:95: f6:4a:27:af:68:cc:f1:e0:32:ed:51:86:1b:4c:c5: f4:81:e9:28:97:1e:c0:ba:14:08:fa:43:89:39:22: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F0:D9:A2:94:76:4E:00:70:8E:71:A0:EF:08:A6:3F:11:3B:B5:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:08:48:d4:f8:84:ab:90:d8:8a:49:d4:91:af:1a:63:b7:c4: d6:16:52:a1:d4:c7:ba:f1:73:32:c4:64:32:63:e0:ee:b4:59: 4a:c3:53:b5:49:bd:16:2e:33:9a:c4:65:54:18:dd:95:0e:6c: 90:07:1f:c5:5b:48:61:41:74:9c:98:89:e3:9a:16:fd:10:07: cb:9a:c7:69:5e:f9:4e:f1:8c:9c:ab:7b:1a:1f:66:27:fe:1b: d1:6b:d2:4c:1f:15:14:d9:2e:84:d2:23:13:4e:e5:0e:8c:3e: 89:7c:ac:ad:60:a0:0d:bf:2b:51:59:80:3f:b2:43:5a:ba:a2: a7:24:52:e6:92:c6:45:fb:12:10:4d:e9:e4:19:8c:7e:d0:03: 31:cd:32:b5:a8:de:44:70:ea:ac:cf:a4:dd:6e:b2:7f:06:32: 92:08:f0:30:79:9d:7f:8a:43:ca:10:67:89:84:65:8e:95:58: 6a:d6:cb:7b:c0:95:b5:7f:ee:66:db:f5:fe:f5:f9:34:b2:d6: dd:31:1d:2d:bd:b8:8e:cc:58:da:72:df:cd:f6:87:55:e9:4e: d9:7b:dc:52:65:ca:84:d1:cf:6e:6e:d7:d2:7c:b8:b5:7c:a0: 10:28:28:fd:9e:48:bd:e1:fb:67:e9:5d:fa:4a:f3:fa:10:bb: 2e:62:a3:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdbAwDOT7m7opzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzMzgxNloXDTI1MDUwNTEyMzgxNlowLzEtMCsGA1UEAxMk ZTQ1ZGQ4NDctNzExYS00YzFmLTk5MTMtOGNmYWQyNmMxNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKjBvnU7jzjo8p7JJWeORoqsulauY18CV+IW pWus336GLB/GOsZH1P7tS7FfAEKtpamiCh6l37vkwA9Jyy4oGY5o/a9hQbTC2Jw9 YRW+AFNcXcwrNqjviw38ptDC5tz2S29cBhiBljzs5xRzp9hZXmwKSkRHj4vQqq/i 10DwOqPeLsG3U5uLu1LpQMxro6m4t8Yj+M16U49kfXE8OzDldDtcJcwf9hqKUN12 qG0IqIpLCLD5d92kjlEXSpjcdF1IyVOMxXf8EL1kJDRAtRmzyhAJrTk7VtQIJ/F1 dIrmZJX2SievaMzx4DLtUYYbTMX0gekolx7AuhQI+kOJOSIuFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/w2aKUdk4AcI5xoO8Ipj8RO7WVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjE5ZGJlMTUtM2M0ZS0z NDgzLTlkZDctZTVkYzA5ZjNlMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoISNT4hKuQ2IpJ1JGvGmO3xNYWUqHUx7rxczLEZDJj4O60WUrDU7VJ vRYuM5rEZVQY3ZUObJAHH8VbSGFBdJyYieOaFv0QB8uax2le+U7xjJyrexofZif+ G9Fr0kwfFRTZLoTSIxNO5Q6MPol8rK1goA2/K1FZgD+yQ1q6oqckUuaSxkX7EhBN 6eQZjH7QAzHNMrWo3kRw6qzPpN1usn8GMpII8DB5nX+KQ8oQZ4mEZY6VWGrWy3vA lbV/7mbb9f71+TSy1t0xHS29uI7MWNpy3832h1XpTtl73FJlyoTRz25u19J8uLV8 oBAoKP2eSL3h+2fpXfpK8/oQuy5io90= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:15 2025 by rpki-client