$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa File: 9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa (raw, json) Hash identifier: XR01MPNDumHkck0R7zrPzxCkIKcmIKGe3g4WARmI5w0= Subject key identifier: E5:DB:EE:21:CE:23:47:35:65:32:93:F3:DC:42:86:1D:58:3A:C8:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C261176591FC91BFD3A84900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa Signing time: Mon 03 Feb 2025 11:09:20 +0000 ROA not before: Mon 03 Feb 2025 11:09:20 +0000 ROA not after: Sun 04 May 2025 10:09:20 +0000 asID: 30036 IP address blocks: 173.19.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:61:17:65:91:fc:91:bf:d3:a8:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:09:20 2025 GMT Not After : May 4 10:09:20 2025 GMT Subject: CN=536cb497-8166-436d-bd66-70afb0cc3f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:77:b1:cf:ba:f2:80:c4:55:ff:fb:98:70: 43:31:f1:6f:c5:ea:50:45:7b:1a:2d:bc:10:4c:c0: 30:7c:14:75:ee:30:a8:54:64:32:36:82:b2:25:0a: 53:e7:33:cb:96:9d:9d:97:e2:fc:67:e4:63:fd:22: b0:8a:4f:5a:59:be:68:ae:fc:2f:14:af:c6:b5:4c: d1:16:a2:64:cb:60:13:02:e7:a3:cb:37:ea:59:7f: a0:57:fb:68:ad:9c:c3:5d:72:f5:ef:8b:cd:0c:be: d6:e1:77:b8:ac:f6:b9:ec:65:e0:b2:16:ee:4f:62: 27:0f:09:08:9e:87:1f:8f:1f:85:3d:78:04:d0:64: d7:7c:7d:01:06:47:6a:25:ac:a5:05:8a:d2:36:9c: 1c:bf:44:26:f7:45:dd:a0:1b:aa:ae:c9:14:4d:2d: cf:52:a4:0c:5e:aa:e5:09:59:fa:f2:69:94:9a:dc: be:7c:cc:d7:41:84:4d:33:5c:d5:a0:71:77:4c:bc: 84:16:52:c1:e9:c4:e1:47:47:f0:de:e5:16:6e:73: 7c:1b:d8:ed:98:44:d3:cc:9f:ec:d2:eb:c8:10:3b: b0:00:19:69:d4:b5:e1:82:85:3c:36:c0:a7:f9:00: 4b:02:08:fa:15:9e:cd:b8:59:e0:e1:84:ba:82:43: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DB:EE:21:CE:23:47:35:65:32:93:F3:DC:42:86:1D:58:3A:C8:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:81:0a:4f:a7:09:25:79:7b:ec:5a:4e:da:cf:9f:6d:56:1f: a0:1c:91:8a:0b:4a:08:c5:23:a4:37:c5:aa:9f:a8:ad:24:43: 49:54:a4:b7:e5:f9:c0:c5:5a:ac:d2:0a:aa:45:2c:15:b2:e5: ce:59:73:e9:b0:8f:86:e1:64:fd:0f:e3:1d:d0:0e:17:1f:c9: 43:53:19:a3:40:6c:7e:c7:60:22:8e:ae:38:46:15:8b:12:40: bf:3d:82:2f:a3:ae:5d:16:74:cb:62:e2:d9:ea:b7:f9:f0:fa: 60:bb:9d:db:7e:cf:62:93:29:8c:ce:76:76:a6:9b:f0:4c:b5: 37:32:b9:08:f8:63:5e:e5:a7:7d:ae:56:c8:2f:e0:1a:5f:f1: e9:81:6c:3a:90:c0:7a:8f:dd:41:67:80:4e:e7:0f:eb:d6:da: cf:5b:33:7b:bb:90:50:c2:ec:0e:09:e6:39:26:3f:53:11:f2: 4b:56:5d:64:43:ce:37:56:a6:32:48:16:f6:c3:7a:6d:0e:71: 1a:5e:30:82:0f:db:eb:4f:fb:09:96:de:f1:32:d1:4a:f6:de: 48:bb:ca:f9:4d:e4:3a:b8:e8:cb:1e:0d:12:d5:1a:70:0d:a2: 80:59:6b:31:3c:bf:8c:79:46:1d:16:d6:77:c9:6e:5b:e4:6c: 4b:c0:62:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYRdlkfyRv9OoSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDkyMFoXDTI1MDUwNDEwMDkyMFowLzEtMCsGA1UEAxMk NTM2Y2I0OTctODE2Ni00MzZkLWJkNjYtNzBhZmIwY2MzZjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEx3sc+68oDEVf/7mHBDMfFvxepQRXsaLbwQ TMAwfBR17jCoVGQyNoKyJQpT5zPLlp2dl+L8Z+Rj/SKwik9aWb5orvwvFK/GtUzR FqJky2ATAuejyzfqWX+gV/torZzDXXL174vNDL7W4Xe4rPa57GXgshbuT2InDwkI nocfjx+FPXgE0GTXfH0BBkdqJaylBYrSNpwcv0Qm90XdoBuqrskUTS3PUqQMXqrl CVn68mmUmty+fMzXQYRNM1zVoHF3TLyEFlLB6cThR0fw3uUWbnN8G9jtmETTzJ/s 0uvIEDuwABlp1LXhgoU8NsCn+QBLAgj6FZ7NuFng4YS6gkMh1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXb7iHOI0c1ZTKT89xChh1YOsi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWNiNmM4ZjgtNjk1Yy0z NmNhLTliNWQtMTg4ZDZlZThhMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyBCk+nCSV5e+xaTtrPn21WH6AckYoLSgjFI6Q3xaqfqK0kQ0lUpLfl +cDFWqzSCqpFLBWy5c5Zc+mwj4bhZP0P4x3QDhcfyUNTGaNAbH7HYCKOrjhGFYsS QL89gi+jrl0WdMti4tnqt/nw+mC7ndt+z2KTKYzOdnamm/BMtTcyuQj4Y17lp32u Vsgv4Bpf8emBbDqQwHqP3UFngE7nD+vW2s9bM3u7kFDC7A4J5jkmP1MR8ktWXWRD zjdWpjJIFvbDem0OcRpeMIIP2+tP+wmW3vEy0Ur23ki7yvlN5Dq46MseDRLVGnAN ooBZazE8v4x5Rh0W1nfJblvkbEvAYu0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:40 2025 by rpki-client