$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa File: bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa (raw, json) Hash identifier: Zq5oDtO7C32294phcvGhaZa7dsa3IqlP7MFsdnDbKtE= Subject key identifier: E3:04:8E:CF:FE:94:5E:42:E2:EA:89:1F:C6:E4:05:84:6D:2D:A6:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55F8344E36D065AA1021900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa Signing time: Tue 04 Feb 2025 12:53:35 +0000 ROA not before: Tue 04 Feb 2025 12:53:35 +0000 ROA not after: Mon 05 May 2025 11:53:35 +0000 asID: 30036 IP address blocks: 173.20.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:83:44:e3:6d:06:5a:a1:02:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:53:35 2025 GMT Not After : May 5 11:53:35 2025 GMT Subject: CN=86e271d3-febf-4e4d-8de7-a5ecbe19bc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:86:0a:c0:93:5a:2b:12:03:33:af:d8:a7: 52:61:9d:7c:df:69:07:8c:0f:af:bb:8d:64:41:b4: 04:74:fa:bd:97:0e:0b:fa:40:6a:0b:f6:f4:41:62: 55:6b:2a:9d:e8:00:bc:e7:5e:69:8e:c7:3b:7b:01: 35:47:07:56:d8:f3:29:ac:44:35:22:d5:08:a7:13: 9f:52:c0:3b:5e:e3:a8:13:43:92:64:d8:d2:31:13: f6:67:5a:5e:94:5e:ab:03:58:cf:eb:61:a9:b5:94: 6b:1c:81:50:0f:c1:71:9b:3d:90:2c:d7:8a:bc:35: 04:b0:ef:64:25:09:ed:1d:36:2a:7f:2a:53:04:8e: 39:d0:b2:09:10:b6:ff:60:43:18:1d:58:1f:13:51: 38:d1:87:23:3b:56:4b:a1:38:35:7e:6c:c7:47:91: 8f:23:7f:b0:4c:75:88:c8:93:da:03:fe:41:40:07: c9:bf:13:33:fd:13:ad:b6:45:f3:a2:76:dc:63:ad: 58:72:09:ec:24:f1:ea:c5:e0:03:c3:b5:5b:5e:a5: aa:24:e9:cb:69:e5:c2:71:c0:62:47:ce:e5:15:ce: 41:6b:18:80:bd:d2:bf:e2:eb:61:ef:f8:25:7e:f8: 75:50:10:f3:8c:98:bc:ee:38:62:76:45:8a:32:31: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:04:8E:CF:FE:94:5E:42:E2:EA:89:1F:C6:E4:05:84:6D:2D:A6:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1a:70:fa:2a:e1:d0:dd:bd:5c:ee:1e:60:3b:35:09:f5:25: 57:12:c6:41:94:5f:66:ab:ed:d3:6f:e5:04:14:30:1a:55:3d: f7:d2:e8:85:af:2f:8c:d5:56:02:c7:81:2b:99:73:69:25:55: 43:a7:4f:b8:c1:a6:41:45:23:64:f6:17:90:70:9a:74:05:3f: 0f:fc:7e:70:c2:23:b0:f1:ff:2d:42:42:e6:d0:61:57:99:fc: b5:ff:64:6e:0a:3e:9f:60:da:ef:ce:9c:15:bd:a5:ea:58:0b: 91:76:ab:9d:4c:94:fd:95:63:e7:31:b7:17:ae:2e:76:7f:ee: 80:9c:c9:68:6f:2c:3b:0e:45:d5:70:ef:69:0e:e2:fe:c7:cd: 43:f9:9d:56:e1:a1:d3:59:4e:87:e1:6d:35:c9:bd:a5:12:d9: 81:5a:c7:c4:d6:b3:47:70:57:5b:50:90:5f:5e:85:37:96:eb: 9a:86:ad:26:e8:d8:16:a8:0d:9f:78:b4:d0:16:5b:fd:57:69: c9:03:14:98:8e:37:b0:4c:4a:d2:18:b3:e3:21:52:c8:8b:df: 2d:37:80:d2:41:b0:f4:9d:d3:d3:2c:5f:91:f9:f6:66:4e:7b: ca:59:ac:60:79:32:9f:e7:1e:71:1b:17:e2:74:db:a7:8c:f0: 4b:3b:02:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFX4NE420GWqECGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNTMzNVoXDTI1MDUwNTExNTMzNVowLzEtMCsGA1UEAxMk ODZlMjcxZDMtZmViZi00ZTRkLThkZTctYTVlY2JlMTliYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUSGCsCTWisSAzOv2KdSYZ1832kHjA+vu41k QbQEdPq9lw4L+kBqC/b0QWJVayqd6AC8515pjsc7ewE1RwdW2PMprEQ1ItUIpxOf UsA7XuOoE0OSZNjSMRP2Z1pelF6rA1jP62GptZRrHIFQD8Fxmz2QLNeKvDUEsO9k JQntHTYqfypTBI450LIJELb/YEMYHVgfE1E40YcjO1ZLoTg1fmzHR5GPI3+wTHWI yJPaA/5BQAfJvxMz/ROttkXzonbcY61YcgnsJPHqxeADw7VbXqWqJOnLaeXCccBi R87lFc5BaxiAvdK/4uth7/glfvh1UBDzjJi87jhidkWKMjHpdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMEjs/+lF5C4uqJH8bkBYRtLaYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFlODJmMzctNjA4Yi0z ZjJlLWIwZTQtYzAwYWQ3MTA2YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgacPoq4dDdvVzuHmA7NQn1JVcSxkGUX2ar7dNv5QQUMBpVPffS6IWv L4zVVgLHgSuZc2klVUOnT7jBpkFFI2T2F5BwmnQFPw/8fnDCI7Dx/y1CQubQYVeZ /LX/ZG4KPp9g2u/OnBW9pepYC5F2q51MlP2VY+cxtxeuLnZ/7oCcyWhvLDsORdVw 72kO4v7HzUP5nVbhodNZTofhbTXJvaUS2YFax8TWs0dwV1tQkF9ehTeW65qGrSbo 2BaoDZ94tNAWW/1XackDFJiON7BMStIYs+MhUsiL3y03gNJBsPSd09MsX5H59mZO e8pZrGB5Mp/nHnEbF+J026eM8Es7Aj8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:21 2025 by rpki-client