$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa File: 98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa (raw, json) Hash identifier: BDxs8bb8A2n967n1XDMwU15aqczb8fhWbMghzbNl1V8= Subject key identifier: 01:93:7A:F1:96:EF:D0:64:45:1E:6E:7C:60:37:AB:5D:C2:DE:2C:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C585F89DDFBC3C7CE0A18040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa Signing time: Tue 04 Feb 2025 14:11:04 +0000 ROA not before: Tue 04 Feb 2025 14:11:04 +0000 ROA not after: Mon 05 May 2025 13:11:04 +0000 asID: 30036 IP address blocks: 173.20.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:85:f8:9d:df:bc:3c:7c:e0:a1:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:11:04 2025 GMT Not After : May 5 13:11:04 2025 GMT Subject: CN=744ac0a5-bf68-4395-bd07-349c15087f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:5d:64:59:4e:35:6b:26:fb:42:02:87:ac: 73:d6:f4:a4:29:62:99:56:be:92:89:eb:fe:76:f8: b5:a8:b3:71:8e:d2:5f:8b:d6:7e:50:c6:28:77:eb: 3c:69:8c:fd:f9:bd:d1:92:67:8b:40:7f:09:e9:db: 48:d2:42:e6:43:5c:76:15:b2:37:63:77:6a:73:86: df:b5:73:c1:83:bb:c0:14:ca:a4:11:72:04:b8:d4: 0f:dd:df:e0:84:42:8e:07:a6:81:a3:fa:86:56:c9: f5:48:be:2d:32:57:d0:b0:e3:27:97:58:54:9a:9b: af:7d:c0:fa:99:69:9f:51:6e:f2:18:0e:5f:46:a2: 5f:c8:89:dd:4e:df:c5:d4:db:2b:dc:ef:57:31:5d: cd:6e:55:7a:fe:40:f3:3a:1c:3e:54:b9:b8:f6:03: 3f:1e:0c:dc:a8:82:4c:f5:8a:fa:a9:8c:fb:50:9d: 9e:d0:36:1c:af:ec:f5:5d:b6:b9:cd:8f:13:4a:82: 13:46:bd:84:dc:2c:f1:e5:96:7c:bf:32:50:48:42: ad:bc:21:89:18:fb:55:21:9b:23:12:9a:81:8e:ae: fd:0e:20:ce:16:8b:14:64:91:50:73:d6:b0:b4:6f: bd:12:d8:c6:7c:df:17:82:2c:54:12:d3:64:a6:60: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:93:7A:F1:96:EF:D0:64:45:1E:6E:7C:60:37:AB:5D:C2:DE:2C:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f4:55:be:d2:5b:b3:10:ab:12:22:6c:6a:81:03:82:e5:2a: 22:28:26:90:0d:a2:61:ba:76:b2:82:4e:3b:6d:ab:e3:d2:75: f2:22:11:e0:29:7b:75:a1:48:b0:f6:f8:83:0b:9d:d6:0d:8e: 0a:67:31:6d:86:07:67:b2:5f:d7:76:de:e3:c4:1e:e9:3b:52: 65:9e:ce:8d:5e:c8:1f:8c:79:f4:83:f9:7d:7a:01:42:7e:32: c5:b2:c5:d6:a4:22:60:ed:8f:5c:94:f3:b2:91:b8:d3:61:2d: 68:12:ee:ac:4a:c5:cc:8a:06:37:b4:b7:46:6f:58:94:1b:5d: b2:e4:4a:75:8b:86:55:42:1c:58:ca:65:59:41:eb:71:f8:35: 38:59:2b:21:1b:79:d4:a3:fd:d6:35:3d:16:35:63:50:19:c1: cb:fe:7a:5a:cd:df:8d:e4:b8:a7:82:82:46:b7:ad:59:8a:ec: c8:df:4b:f6:d2:c0:1f:e3:42:b7:83:f7:df:30:62:7a:3a:78: 96:99:e7:81:83:0d:f4:dd:a4:68:65:61:23:62:51:32:c0:94: e2:29:51:5e:45:cf:e5:69:5e:34:eb:c5:14:af:be:47:1c:69: 00:21:c2:4f:62:e6:a2:28:4d:9a:aa:19:e4:84:68:a6:80:44: 6c:72:fa:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFhfid37w8fOChgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MTEwNFoXDTI1MDUwNTEzMTEwNFowLzEtMCsGA1UEAxMk NzQ0YWMwYTUtYmY2OC00Mzk1LWJkMDctMzQ5YzE1MDg3ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8ldZFlONWsm+0ICh6xz1vSkKWKZVr6Siev+ dvi1qLNxjtJfi9Z+UMYod+s8aYz9+b3RkmeLQH8J6dtI0kLmQ1x2FbI3Y3dqc4bf tXPBg7vAFMqkEXIEuNQP3d/ghEKOB6aBo/qGVsn1SL4tMlfQsOMnl1hUmpuvfcD6 mWmfUW7yGA5fRqJfyIndTt/F1Nsr3O9XMV3NblV6/kDzOhw+VLm49gM/HgzcqIJM 9Yr6qYz7UJ2e0DYcr+z1Xba5zY8TSoITRr2E3Czx5ZZ8vzJQSEKtvCGJGPtVIZsj EpqBjq79DiDOFosUZJFQc9awtG+9EtjGfN8XgixUEtNkpmDTjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGTevGW79BkRR5ufGA3q13C3iyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTgxOTE5NDUtYzIxZi0z YTU5LTk4YTctOGZmYmJmOWQyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj0Vb7SW7MQqxIibGqBA4LlKiIoJpANomG6drKCTjttq+PSdfIiEeAp e3WhSLD2+IMLndYNjgpnMW2GB2eyX9d23uPEHuk7UmWezo1eyB+MefSD+X16AUJ+ MsWyxdakImDtj1yU87KRuNNhLWgS7qxKxcyKBje0t0ZvWJQbXbLkSnWLhlVCHFjK ZVlB63H4NThZKyEbedSj/dY1PRY1Y1AZwcv+elrN343kuKeCgka3rVmK7MjfS/bS wB/jQreD998wYno6eJaZ54GDDfTdpGhlYSNiUTLAlOIpUV5Fz+VpXjTrxRSvvkcc aQAhwk9i5qIoTZqqGeSEaKaARGxy+lk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:43 2025 by rpki-client