$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa File: c043170f-a250-3170-a4aa-5ad85a821236.roa (raw, json) Hash identifier: uPgdnk1lqKwme6QONTLJ4aiC2xuaTA4GDwJ+Spqh9xo= Subject key identifier: 75:40:35:6A:D9:DB:76:81:FE:35:1B:0F:F8:31:43:6F:A0:5F:D8:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57F0940A80FD2C700007140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa Signing time: Tue 04 Feb 2025 13:57:06 +0000 ROA not before: Tue 04 Feb 2025 13:57:06 +0000 ROA not after: Mon 05 May 2025 12:57:06 +0000 asID: 30036 IP address blocks: 173.20.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7f:09:40:a8:0f:d2:c7:00:00:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:57:06 2025 GMT Not After : May 5 12:57:06 2025 GMT Subject: CN=ea7c09ea-57c8-4991-9726-0aa741e1a670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:60:a1:a8:af:4b:02:24:ce:7f:21:b0:86: 5b:6b:08:9d:27:c7:5e:85:92:c0:46:5b:9e:2b:e3: ef:96:7e:ee:bd:72:5c:68:1c:06:f4:0b:b8:32:46: a9:b0:0a:75:7e:bf:bb:1a:53:c0:15:67:58:05:03: 13:43:05:24:c9:29:64:57:5d:73:a2:df:c9:92:e5: bf:6c:4a:fa:91:7f:52:11:7e:58:17:8f:dc:b8:f4: f9:33:4e:90:a6:23:22:23:c0:4a:47:dc:8f:57:ae: 7a:23:d0:f7:c9:1c:94:88:7c:d5:74:61:f7:26:7f: 92:a8:b5:3f:40:5b:ac:0e:5a:cc:1d:26:3b:cf:87: c3:23:d2:ce:21:fe:e2:93:65:bb:55:66:8a:5b:f5: 14:82:ee:71:a1:ac:d5:45:fc:60:8f:84:2b:00:49: d3:f1:78:e1:24:ca:83:23:89:8e:f1:51:76:7b:cd: f9:88:1d:3b:33:c9:09:08:cd:7f:c3:42:53:82:2b: 2f:d6:b1:69:a6:02:c7:d2:8c:c1:f2:cb:73:14:e4: 64:47:c0:b0:91:72:1f:90:7a:8e:c0:cb:20:ab:4b: 3e:64:77:db:5c:62:58:9d:6f:56:95:5c:8e:e6:b7: 0b:2b:d6:5e:d6:e0:e9:7b:de:72:e3:0c:41:94:8d: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:40:35:6A:D9:DB:76:81:FE:35:1B:0F:F8:31:43:6F:A0:5F:D8:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:57:ff:cc:39:6e:ee:63:1b:ea:75:23:fc:c4:a1:a6:8b:b9: 1d:a8:af:c0:44:24:54:e2:db:c9:2b:58:7c:35:31:d9:e5:b2: f1:a7:12:c8:cf:64:6f:eb:bb:20:0d:c3:a1:c7:14:65:5c:aa: ef:a1:6e:b8:e2:ba:0d:d0:eb:37:84:e6:1e:f8:85:a4:d7:aa: 94:71:ef:28:20:b0:7c:46:5e:d6:14:cd:9d:7a:b4:ec:28:b6: 3e:16:9f:44:39:4a:bf:67:f4:8c:81:76:ae:08:2c:18:19:80: 8d:fc:4b:06:13:d4:b8:03:44:53:bb:ea:02:5b:19:61:0c:48: fc:24:49:73:f5:56:1d:7d:fb:29:30:fb:0a:87:f2:82:b0:65: b7:7b:cf:9e:8d:2d:1f:c4:fe:c7:7b:4d:4e:21:42:94:ae:bd: cb:06:71:42:77:83:32:c3:98:4a:57:5c:16:ad:ca:08:57:76: 77:54:f9:c2:a5:42:02:b3:5e:c0:a1:46:90:12:09:81:aa:80: ea:c2:01:fd:f9:d4:67:ba:a8:47:2a:b5:48:2b:fe:be:e9:da: 8d:31:05:f9:0a:3f:ae:18:85:c2:b0:da:4e:a8:d5:91:bc:91: b9:c2:e3:d6:63:a9:6b:1d:25:8a:20:f8:e0:cb:93:a2:52:17: cc:d6:ec:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfwlAqA/SxwAAcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTcwNloXDTI1MDUwNTEyNTcwNlowLzEtMCsGA1UEAxMk ZWE3YzA5ZWEtNTdjOC00OTkxLTk3MjYtMGFhNzQxZTFhNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJZgoaivSwIkzn8hsIZbawidJ8dehZLARlue K+Pvln7uvXJcaBwG9Au4MkapsAp1fr+7GlPAFWdYBQMTQwUkySlkV11zot/JkuW/ bEr6kX9SEX5YF4/cuPT5M06QpiMiI8BKR9yPV656I9D3yRyUiHzVdGH3Jn+SqLU/ QFusDlrMHSY7z4fDI9LOIf7ik2W7VWaKW/UUgu5xoazVRfxgj4QrAEnT8XjhJMqD I4mO8VF2e835iB07M8kJCM1/w0JTgisv1rFppgLH0ozB8stzFORkR8CwkXIfkHqO wMsgq0s+ZHfbXGJYnW9WlVyO5rcLK9Ze1uDpe95y4wxBlI3tKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVANWrZ23aB/jUbD/gxQ2+gX9iTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzA0MzE3MGYtYTI1MC0z MTcwLWE0YWEtNWFkODVhODIxMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBX/8w5bu5jG+p1I/zEoaaLuR2or8BEJFTi28krWHw1MdnlsvGnEsjP ZG/ruyANw6HHFGVcqu+hbrjiug3Q6zeE5h74haTXqpRx7yggsHxGXtYUzZ16tOwo tj4Wn0Q5Sr9n9IyBdq4ILBgZgI38SwYT1LgDRFO76gJbGWEMSPwkSXP1Vh19+ykw +wqH8oKwZbd7z56NLR/E/sd7TU4hQpSuvcsGcUJ3gzLDmEpXXBatyghXdndU+cKl QgKzXsChRpASCYGqgOrCAf351Ge6qEcqtUgr/r7p2o0xBfkKP64YhcKw2k6o1ZG8 kbnC49ZjqWsdJYog+ODLk6JSF8zW7BQ= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:56 2025 by rpki-client