$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5dc63f6-6b05-3746-9ef7-995deb8c6b98.roa File: c5dc63f6-6b05-3746-9ef7-995deb8c6b98.roa (raw, json) Hash identifier: s660IH9Fcjspd98UpW40Etpt+6P4bJHjt4LZ+pRrQeU= Subject key identifier: C9:75:4D:F2:5F:3F:E6:65:18:60:3C:F2:DC:9D:70:28:89:60:D9:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C261C22FAE6B7D4A9FC28A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5dc63f6-6b05-3746-9ef7-995deb8c6b98.roa Signing time: Mon 03 Feb 2025 11:10:41 +0000 ROA not before: Mon 03 Feb 2025 11:10:41 +0000 ROA not after: Sun 04 May 2025 10:10:41 +0000 asID: 30036 IP address blocks: 173.20.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:61:c2:2f:ae:6b:7d:4a:9f:c2:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:10:41 2025 GMT Not After : May 4 10:10:41 2025 GMT Subject: CN=25753df8-633d-4765-8e9f-eafa4e332dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:11:a2:e0:50:f3:99:16:3f:39:c5:cc:c6: f6:1b:8d:68:7a:c1:c8:99:65:d4:a2:e9:84:1e:72: 28:c6:a7:59:0d:53:cd:2e:80:8f:6d:c9:da:1a:b5: 45:b9:87:fb:c4:c0:f1:70:87:44:71:8e:19:62:6a: dd:f6:7e:41:40:cb:41:a1:87:3d:36:74:69:45:2f: 38:14:79:ea:21:c6:92:22:3b:04:d1:7f:17:e3:a2: 42:28:b8:76:39:b7:bf:3d:9a:d2:a6:f8:01:6d:ab: a2:92:76:07:c5:a2:e1:28:f0:07:bb:d5:71:40:51: 5b:f7:75:1e:aa:7d:a3:75:75:1e:88:5f:fc:af:d9: 4b:78:3c:d2:f1:f4:4e:ea:34:a0:63:ac:aa:84:ec: bb:94:6a:e0:98:42:d3:bf:43:44:53:29:51:9e:ec: 2e:a0:99:73:65:59:88:22:71:89:8b:fe:c7:c4:50: 41:e7:05:90:79:58:66:83:71:3a:e9:50:a4:26:1f: 7f:d1:95:13:9e:78:06:e8:6c:47:a4:88:13:98:cf: 07:1d:1b:d5:ef:83:ab:f0:21:a0:01:0c:9c:97:44: c6:94:e5:50:81:12:b3:41:ef:1f:3d:26:b0:3b:96: a7:83:65:99:d9:b4:21:5f:97:99:91:63:d6:a7:b6: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:75:4D:F2:5F:3F:E6:65:18:60:3C:F2:DC:9D:70:28:89:60:D9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5dc63f6-6b05-3746-9ef7-995deb8c6b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c7:18:d1:91:2e:d3:82:29:f9:f1:f6:be:16:4a:de:10:fb: 30:36:d7:fa:b1:82:e7:38:d3:36:e1:1e:24:b2:84:a1:b3:aa: fe:d2:11:8e:e8:f2:8b:e9:2b:6f:a9:fc:40:59:ff:f7:81:63: 0d:77:a7:08:e5:09:9c:56:f2:db:94:09:40:22:d3:09:83:00: f5:3c:de:ae:4f:5d:6e:f2:b5:28:42:a5:b4:bc:21:6a:a6:e7: ed:93:e0:ed:4e:d7:6a:71:ce:5e:5d:3c:b1:27:3d:4b:81:64: d9:d0:15:3f:f9:c1:cb:49:76:b0:66:de:a5:b2:c0:3b:87:0f: 1e:65:76:0d:2d:fa:49:3e:3a:8f:6c:90:39:da:95:fa:ce:42: 12:60:53:4f:7d:5f:85:b6:81:37:26:df:ff:05:50:24:d0:03: 2d:00:63:1f:ba:e0:7b:c6:aa:0e:48:26:ee:aa:9a:c6:0c:dc: 48:db:39:4d:44:a8:6e:bc:53:19:8d:27:d4:99:d5:a3:e0:77: 9c:11:63:f8:cd:76:99:ea:5b:30:4a:5d:55:41:d5:b3:ee:8d: 56:79:a8:5d:ba:ed:72:76:53:e1:9f:c7:ea:a4:66:85:f2:12: 7d:a7:12:11:73:3a:12:b5:93:42:66:a6:a3:41:0d:c6:b2:b6: bd:aa:49:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYcIvrmt9Sp/CioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTA0MVoXDTI1MDUwNDEwMTA0MVowLzEtMCsGA1UEAxMk MjU3NTNkZjgtNjMzZC00NzY1LThlOWYtZWFmYTRlMzMyZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3wRouBQ85kWPznFzMb2G41oesHImWXUoumE HnIoxqdZDVPNLoCPbcnaGrVFuYf7xMDxcIdEcY4ZYmrd9n5BQMtBoYc9NnRpRS84 FHnqIcaSIjsE0X8X46JCKLh2Obe/PZrSpvgBbauiknYHxaLhKPAHu9VxQFFb93Ue qn2jdXUeiF/8r9lLeDzS8fRO6jSgY6yqhOy7lGrgmELTv0NEUylRnuwuoJlzZVmI InGJi/7HxFBB5wWQeVhmg3E66VCkJh9/0ZUTnngG6GxHpIgTmM8HHRvV74Or8CGg AQycl0TGlOVQgRKzQe8fPSawO5ang2WZ2bQhX5eZkWPWp7b0VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMl1TfJfP+ZlGGA88tydcCiJYNlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzVkYzYzZjYtNmIwNS0z NzQ2LTllZjctOTk1ZGViOGM2Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzHGNGRLtOCKfnx9r4WSt4Q+zA21/qxguc40zbhHiSyhKGzqv7SEY7o 8ovpK2+p/EBZ//eBYw13pwjlCZxW8tuUCUAi0wmDAPU83q5PXW7ytShCpbS8IWqm 5+2T4O1O12pxzl5dPLEnPUuBZNnQFT/5wctJdrBm3qWywDuHDx5ldg0t+kk+Oo9s kDnalfrOQhJgU099X4W2gTcm3/8FUCTQAy0AYx+64HvGqg5IJu6qmsYM3EjbOU1E qG68UxmNJ9SZ1aPgd5wRY/jNdpnqWzBKXVVB1bPujVZ5qF267XJ2U+Gfx+qkZoXy En2nEhFzOhK1k0JmpqNBDcaytr2qSYQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:25 2025 by rpki-client