$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa File: 624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa (raw, json) Hash identifier: e2qoXGst9eZKVBFYGfXrArWDlkt87Pt6W3SgC8ASMnM= Subject key identifier: B5:D3:AF:93:58:F3:13:7A:60:B8:3C:15:45:C3:99:9C:3A:6E:C7:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B7360515694D8AA153402080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa Signing time: Thu 30 Jan 2025 11:08:40 +0000 ROA not before: Thu 30 Jan 2025 11:08:40 +0000 ROA not after: Wed 30 Apr 2025 10:08:40 +0000 asID: 30036 IP address blocks: 173.20.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:05:15:69:4d:8a:a1:53:40:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:08:40 2025 GMT Not After : Apr 30 10:08:40 2025 GMT Subject: CN=b4aeb6c1-69f1-448e-a2bb-a22862f1d332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:9c:61:7b:54:4c:57:45:8e:34:f0:bb:c8: eb:ef:ea:de:f5:40:17:76:78:48:f2:c5:44:8e:ee: b9:bb:b8:2a:3a:45:b8:6c:a8:1f:3f:50:ba:4c:7d: df:7f:c9:63:f4:28:50:8b:b6:c9:c1:e4:09:ef:6c: 6d:e6:ad:90:5c:64:a5:3c:2c:d5:e0:1a:fa:e9:d3: e3:7e:e6:f0:2a:dd:58:ff:9e:dc:d7:a5:01:96:8d: 8a:9a:20:51:44:a6:59:69:d1:ee:03:96:b5:2a:2e: 4d:d6:68:d7:43:b7:cc:21:2e:3e:00:2f:6a:60:89: e4:bd:a1:68:ea:5c:83:78:2a:38:1c:7a:0f:cc:c1: b6:9f:c3:d8:8e:fc:70:17:67:74:31:03:6a:19:a5: fa:4f:c8:7a:1f:64:74:d1:25:e7:2e:36:b5:9d:95: c3:08:20:89:58:b1:d3:97:54:a3:e8:e8:c3:67:8b: bf:47:56:fb:1d:25:20:42:90:c7:2e:6c:19:c6:0d: 72:db:d0:4f:50:ea:e3:38:92:0d:31:d2:4b:f2:5f: 7a:2b:5b:36:a3:5f:65:09:46:a0:c9:35:84:e2:0f: 89:0e:9b:8c:2d:24:d8:97:01:9e:1d:bd:c0:74:ac: cb:d2:4f:d8:e9:a8:b6:57:d4:0b:cd:82:95:f1:5f: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D3:AF:93:58:F3:13:7A:60:B8:3C:15:45:C3:99:9C:3A:6E:C7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d5:0a:03:02:90:4b:0c:7c:e3:8c:94:a6:2a:67:c1:c7:ea: b6:05:c8:ce:29:d5:59:75:a4:02:12:41:8f:be:36:cc:08:25: 87:ad:ea:c1:be:ad:fc:d9:75:c6:65:97:15:67:cd:c5:83:95: 6e:11:28:fb:d4:bc:ab:4f:e1:90:c8:34:bc:76:a0:36:aa:21: a0:21:eb:54:a4:5b:7d:fa:72:19:ce:43:d5:2a:d7:2d:94:ee: 9a:33:87:1b:34:c4:72:3e:62:e6:fd:54:15:29:4d:66:db:aa: 97:14:3e:64:ac:a0:58:2e:f1:43:b2:b3:bc:c7:86:f0:7c:9f: be:04:30:93:71:2a:fb:4b:61:20:9f:d1:e0:57:92:53:7f:a9: 85:70:ae:f0:03:83:86:62:f0:5a:f7:45:ba:75:7e:c7:87:9e: c0:4a:b7:eb:59:f4:40:e1:41:44:7d:22:58:53:48:70:ff:66: c5:6f:09:51:7e:46:a5:8f:52:5d:ce:c3:fd:b5:12:50:9c:d4: 97:4a:d3:83:55:f5:d8:51:db:ff:f8:cd:1d:27:83:08:86:d8: d8:cc:a2:15:5b:9a:c8:00:a5:f2:48:36:71:18:be:7c:c2:c0: 0a:fe:ad:99:fe:26:61:fd:bb:2f:47:93:c4:1d:30:32:84:06: 95:28:d7:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NgUVaU2KoVNAIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDg0MFoXDTI1MDQzMDEwMDg0MFowLzEtMCsGA1UEAxMk YjRhZWI2YzEtNjlmMS00NDhlLWEyYmItYTIyODYyZjFkMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1mcYXtUTFdFjjTwu8jr7+re9UAXdnhI8sVE ju65u7gqOkW4bKgfP1C6TH3ff8lj9ChQi7bJweQJ72xt5q2QXGSlPCzV4Br66dPj fubwKt1Y/57c16UBlo2KmiBRRKZZadHuA5a1Ki5N1mjXQ7fMIS4+AC9qYInkvaFo 6lyDeCo4HHoPzMG2n8PYjvxwF2d0MQNqGaX6T8h6H2R00SXnLja1nZXDCCCJWLHT l1Sj6OjDZ4u/R1b7HSUgQpDHLmwZxg1y29BPUOrjOJINMdJL8l96K1s2o19lCUag yTWE4g+JDpuMLSTYlwGeHb3AdKzL0k/Y6ai2V9QLzYKV8V+AuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXTr5NY8xN6YLg8FUXDmZw6bscZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjI0ZmZiNDktNDc3My0z OWQ1LThhZTctOWQxM2ExZjAzMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbVCgMCkEsMfOOMlKYqZ8HH6rYFyM4p1Vl1pAISQY++NswIJYet6sG+ rfzZdcZllxVnzcWDlW4RKPvUvKtP4ZDINLx2oDaqIaAh61SkW336chnOQ9Uq1y2U 7pozhxs0xHI+Yub9VBUpTWbbqpcUPmSsoFgu8UOys7zHhvB8n74EMJNxKvtLYSCf 0eBXklN/qYVwrvADg4Zi8Fr3Rbp1fseHnsBKt+tZ9EDhQUR9IlhTSHD/ZsVvCVF+ RqWPUl3Ow/21ElCc1JdK04NV9dhR2//4zR0ngwiG2NjMohVbmsgApfJINnEYvnzC wAr+rZn+JmH9uy9Hk8QdMDKEBpUo18g= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:46 2025 by rpki-client