$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74cf3500-e2a3-3483-92e6-27591b265690.roa File: 74cf3500-e2a3-3483-92e6-27591b265690.roa (raw, json) Hash identifier: IkBcb/Sc7V0P+3H2XOfFAT7sdl4PQ+Zd9WPCRwyizSE= Subject key identifier: 6C:B0:E1:FF:77:7D:47:B3:BC:B9:92:3F:AC:23:A8:43:DB:7C:3F:B6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C585E79879083EE8B5662980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74cf3500-e2a3-3483-92e6-27591b265690.roa Signing time: Tue 04 Feb 2025 14:10:56 +0000 ROA not before: Tue 04 Feb 2025 14:10:56 +0000 ROA not after: Mon 05 May 2025 13:10:56 +0000 asID: 30036 IP address blocks: 173.20.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:85:e7:98:79:08:3e:e8:b5:66:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:10:56 2025 GMT Not After : May 5 13:10:56 2025 GMT Subject: CN=fceead2c-469e-46bf-a6f6-e8a8d9d835c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:63:a4:f3:b5:27:d3:85:3a:74:bb:fe:e8:a6: 38:a1:c8:10:72:92:7b:bd:0a:2b:41:17:e9:f3:a7: 87:88:89:c8:e9:e2:24:37:4d:db:e6:8b:d9:12:55: 06:df:09:b2:18:ad:45:84:d7:62:73:35:96:78:53: 7e:b9:7e:2a:ac:da:e2:e3:1f:43:92:7c:97:95:a3: 88:6f:31:8c:8f:e5:76:a9:54:c6:69:ca:73:ec:7e: b6:3f:8e:a8:61:15:0c:54:ea:6d:ef:6f:0b:c2:09: b2:31:a5:ba:d1:cc:b3:ec:8e:fb:e4:0e:ea:b4:aa: eb:fc:2c:cc:4f:54:ba:fa:ac:96:03:da:3c:e6:21: 09:33:ed:ba:09:a6:96:89:fa:de:60:df:c7:0f:fc: cb:78:44:eb:d2:93:b1:38:43:f0:ee:26:54:6c:c2: 78:97:73:62:39:73:8c:2b:18:64:17:74:b4:2d:11: 0d:5f:1c:82:c4:6f:d9:ea:97:a8:26:a7:13:bf:bd: e5:87:33:e8:c1:cf:da:ca:92:70:28:26:1d:a1:b4: ff:16:39:fd:c3:1a:73:ba:e3:cf:2a:45:08:73:e3: 8e:e0:82:c2:2c:19:0e:5e:77:c1:2d:fa:14:74:6a: ed:8d:0d:b8:74:13:c1:eb:4c:a2:af:e2:76:7b:93: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B0:E1:FF:77:7D:47:B3:BC:B9:92:3F:AC:23:A8:43:DB:7C:3F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74cf3500-e2a3-3483-92e6-27591b265690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fa:13:d1:0e:ca:18:0a:36:67:bc:3d:5f:14:fe:7c:e6:ec: 08:82:c7:37:df:45:52:06:b6:ea:c5:27:72:2f:0f:30:c0:e8: a7:1a:ad:46:04:c5:bb:f0:00:2c:6a:03:a0:94:03:de:14:5c: 27:39:17:5e:aa:e3:05:c8:49:32:0b:46:8c:63:e2:36:cc:31: cc:31:e1:e5:c1:13:51:4c:20:af:a0:8c:fa:f3:b6:30:f7:d4: 02:49:d8:d0:2f:9a:eb:1a:56:2f:c4:e3:5a:62:ec:35:25:bd: 3c:7d:5f:b1:dd:eb:02:b0:9b:4c:49:47:c9:8d:32:99:6a:48: f9:ec:79:c1:66:51:72:1c:41:08:91:1a:da:5d:c3:62:cd:11: 3f:cf:fd:f6:8f:97:05:1b:73:bc:94:90:f1:cd:df:bb:50:e2: 77:1c:52:fc:cf:62:aa:26:6b:4d:8c:40:c6:63:78:75:a3:ba: b6:97:82:21:c7:f6:66:cf:69:f4:28:90:20:69:89:f9:b3:7d: 35:ad:e2:77:19:62:e2:2f:65:74:31:55:04:e7:e4:65:ec:9d: dc:ed:2c:a2:11:b3:e3:a0:d1:7f:fa:4c:ff:95:ad:d7:e3:a4: 14:de:b5:50:a8:23:f4:e9:06:22:ed:1d:01:8f:a4:90:d3:b5: ef:20:48:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFheeYeQg+6LVmKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MTA1NloXDTI1MDUwNTEzMTA1NlowLzEtMCsGA1UEAxMk ZmNlZWFkMmMtNDY5ZS00NmJmLWE2ZjYtZThhOGQ5ZDgzNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GOk87Un04U6dLv+6KY4ocgQcpJ7vQorQRfp 86eHiInI6eIkN03b5ovZElUG3wmyGK1FhNdiczWWeFN+uX4qrNri4x9DknyXlaOI bzGMj+V2qVTGacpz7H62P46oYRUMVOpt728LwgmyMaW60cyz7I775A7qtKrr/CzM T1S6+qyWA9o85iEJM+26CaaWifreYN/HD/zLeETr0pOxOEPw7iZUbMJ4l3NiOXOM KxhkF3S0LRENXxyCxG/Z6peoJqcTv73lhzPowc/aypJwKCYdobT/Fjn9wxpzuuPP KkUIc+OO4ILCLBkOXnfBLfoUdGrtjQ24dBPB60yir+J2e5MAvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyw4f93fUezvLmSP6wjqEPbfD+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzRjZjM1MDAtZTJhMy0z NDgzLTkyZTYtMjc1OTFiMjY1NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/6E9EOyhgKNme8PV8U/nzm7AiCxzffRVIGturFJ3IvDzDA6KcarUYE xbvwACxqA6CUA94UXCc5F16q4wXISTILRoxj4jbMMcwx4eXBE1FMIK+gjPrztjD3 1AJJ2NAvmusaVi/E41pi7DUlvTx9X7Hd6wKwm0xJR8mNMplqSPnsecFmUXIcQQiR Gtpdw2LNET/P/faPlwUbc7yUkPHN37tQ4nccUvzPYqoma02MQMZjeHWjuraXgiHH 9mbPafQokCBpifmzfTWt4ncZYuIvZXQxVQTn5GXsndztLKIRs+Og0X/6TP+Vrdfj pBTetVCoI/TpBiLtHQGPpJDTte8gSDI= -----END CERTIFICATE-----Generated at Sun Apr 6 06:03:01 2025 by rpki-client