$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa File: c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa (raw, json) Hash identifier: 9JkcDGszgcxzYLvzmnLamM5xxsiZp5oMjS7dQgQmqbw= Subject key identifier: DB:2E:D0:9E:CC:EC:7E:A0:E8:9E:35:F9:94:11:E8:51:BC:F0:45:D0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55F306DE3679F1670B63100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa Signing time: Tue 04 Feb 2025 12:52:56 +0000 ROA not before: Tue 04 Feb 2025 12:52:56 +0000 ROA not after: Mon 05 May 2025 11:52:56 +0000 asID: 30036 IP address blocks: 173.20.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:30:6d:e3:67:9f:16:70:b6:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:52:56 2025 GMT Not After : May 5 11:52:56 2025 GMT Subject: CN=4d5571c3-eab5-4be5-b8ac-81925c5ae77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:06:a6:b0:72:fa:84:57:2b:a8:f3:a3:45: 91:a7:c6:06:86:e6:be:c5:9b:1c:21:3e:1d:48:53: 4d:1c:c4:4a:d4:34:04:8c:84:1d:8a:01:f6:cc:83: 44:f0:3a:7c:0d:fd:23:4f:25:a1:30:cf:21:d5:ca: 20:14:8e:f2:9a:ef:d7:b7:cb:9f:6a:26:9f:84:72: 32:0c:3b:13:cf:93:59:93:8e:a2:74:89:8d:ba:b9: 46:a1:31:d7:de:1c:3d:7e:ba:5e:bc:24:1a:cb:a1: 2b:56:02:0d:d3:df:58:c9:40:ab:67:2c:f8:3d:43: df:d3:eb:9e:ee:65:bf:c8:cc:cb:01:cf:51:07:03: c9:53:7c:1a:8d:2e:8a:00:53:ba:d5:2b:68:06:4b: f2:a2:92:ff:46:b7:10:08:a8:56:a3:92:14:be:bc: a6:f2:49:5e:b4:62:84:4f:33:a1:9b:39:1f:11:5d: 3e:32:59:df:e5:11:ec:5d:b8:7a:bd:c9:d1:7b:06: 49:42:33:15:2b:84:49:0a:9a:21:c3:2d:73:64:98: fa:16:d2:e8:4d:9c:64:dc:37:a6:54:e5:0f:23:1a: f8:b7:bf:67:55:1f:33:43:97:f9:55:19:e3:cd:d4: 81:81:fd:01:11:cb:a8:34:bf:81:1e:64:22:48:52: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2E:D0:9E:CC:EC:7E:A0:E8:9E:35:F9:94:11:E8:51:BC:F0:45:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:15:e5:76:91:bc:4c:46:b3:ad:11:21:fe:b9:87:43:47:d3: 16:e7:e9:df:1f:ad:41:97:ed:9d:64:94:76:cc:6b:f1:0a:9f: ee:e3:5c:5e:1b:fa:50:71:9a:26:bc:a3:de:7b:9e:ed:43:4c: f5:91:2a:ce:f3:46:61:cf:15:dc:fb:6e:ce:23:fe:32:41:4d: 6b:6f:96:3a:03:c2:4f:8e:c4:2f:2e:ba:d6:48:e8:80:4a:0c: db:90:73:3b:8b:f8:1c:81:d9:d0:f2:a9:4a:92:27:73:80:d8: 68:6a:27:bc:e0:82:1c:c7:1c:3a:80:c8:c1:8d:21:63:6d:51: 4c:5d:6f:0d:fc:21:a5:49:c4:6d:66:82:97:37:7a:7c:ea:b6: 07:ce:7e:09:f9:76:81:e6:19:17:a6:69:81:fc:63:68:ac:9c: 52:0d:95:8d:9b:3d:3b:b3:47:a4:6b:0b:a4:0c:d6:c9:e5:2d: d3:9e:eb:a7:a1:53:ac:69:64:03:98:5b:20:a1:d6:fb:54:34: 46:60:76:ab:47:21:fb:2d:e6:a8:18:87:07:75:e7:25:ef:94: 57:8f:33:b3:7d:0f:99:cf:23:8e:0e:ae:7f:3c:11:62:1c:19: 0b:19:94:d4:fb:bd:3a:3d:58:27:59:1e:91:5d:01:34:d2:fd: 9f:c3:f2:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFXzBt42efFnC2MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNTI1NloXDTI1MDUwNTExNTI1NlowLzEtMCsGA1UEAxMk NGQ1NTcxYzMtZWFiNS00YmU1LWI4YWMtODE5MjVjNWFlNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHQGprBy+oRXK6jzo0WRp8YGhua+xZscIT4d SFNNHMRK1DQEjIQdigH2zINE8Dp8Df0jTyWhMM8h1cogFI7ymu/Xt8ufaiafhHIy DDsTz5NZk46idImNurlGoTHX3hw9frpevCQay6ErVgIN099YyUCrZyz4PUPf0+ue 7mW/yMzLAc9RBwPJU3wajS6KAFO61StoBkvyopL/RrcQCKhWo5IUvrym8kletGKE TzOhmzkfEV0+Mlnf5RHsXbh6vcnRewZJQjMVK4RJCpohwy1zZJj6FtLoTZxk3Dem VOUPIxr4t79nVR8zQ5f5VRnjzdSBgf0BEcuoNL+BHmQiSFKntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsu0J7M7H6g6J41+ZQR6FG88EXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzJmNmRhOGUtN2U3Ny0z ZTVjLWFjNzYtZTcyZjFiZTU5YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEV5XaRvExGs60RIf65h0NH0xbn6d8frUGX7Z1klHbMa/EKn+7jXF4b +lBxmia8o957nu1DTPWRKs7zRmHPFdz7bs4j/jJBTWtvljoDwk+OxC8uutZI6IBK DNuQczuL+ByB2dDyqUqSJ3OA2GhqJ7zgghzHHDqAyMGNIWNtUUxdbw38IaVJxG1m gpc3enzqtgfOfgn5doHmGRemaYH8Y2isnFINlY2bPTuzR6RrC6QM1snlLdOe66eh U6xpZAOYWyCh1vtUNEZgdqtHIfst5qgYhwd15yXvlFePM7N9D5nPI44Orn88EWIc GQsZlNT7vTo9WCdZHpFdATTS/Z/D8o4= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:27 2025 by rpki-client