$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f31c20-9026-31b0-bc7a-18496a3d9331.roa File: c5f31c20-9026-31b0-bc7a-18496a3d9331.roa (raw, json) Hash identifier: wNcp+oOdvMp/i6IuY7Y3RRaAGlWkjbpDmQU2pSZFGsg= Subject key identifier: 40:AD:4A:52:66:66:99:83:06:3F:9A:6A:8A:3E:1A:F5:20:3B:25:25 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B735C2B6DF15FBED5EC4FF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f31c20-9026-31b0-bc7a-18496a3d9331.roa Signing time: Thu 30 Jan 2025 11:08:08 +0000 ROA not before: Thu 30 Jan 2025 11:08:08 +0000 ROA not after: Wed 30 Apr 2025 10:08:08 +0000 asID: 30036 IP address blocks: 173.24.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:35:c2:b6:df:15:fb:ed:5e:c4:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:08:08 2025 GMT Not After : Apr 30 10:08:08 2025 GMT Subject: CN=09066445-685c-4287-a0eb-188afa6a7ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:f5:a5:f7:5b:0b:23:17:d5:43:de:7d:23: 5c:33:45:81:80:b5:be:4b:a6:95:e7:68:5a:62:a4: fb:8c:63:8b:d8:ff:0e:a1:fd:17:9f:5a:86:e3:af: be:6a:80:7b:d8:e5:07:05:de:05:b5:c1:ca:c8:b4: 1f:91:a9:38:da:9f:b7:89:7f:28:15:8d:3a:8d:dc: f1:6e:6b:4f:de:ac:cd:2c:6d:d9:69:4d:93:c5:38: 41:56:2e:a4:ee:80:0b:57:a5:70:4e:15:6d:bb:1f: 89:9a:b7:c8:ff:b8:6d:35:a2:f0:0e:fd:55:73:ca: b6:ab:3f:f7:14:15:1a:6b:39:1f:e8:1b:c8:7a:e3: a0:b8:b0:6f:bb:46:8a:4a:3f:5c:70:e3:94:c7:7a: 69:dc:0e:58:ce:5d:a4:f1:02:5e:bb:81:93:eb:35: 2c:0d:61:21:2b:8e:8f:73:6d:79:10:eb:4f:aa:5d: 96:cf:86:71:0b:27:40:97:62:0d:25:e4:21:bc:75: 96:64:36:79:87:a9:70:1b:b6:45:41:de:92:f3:05: fb:54:b3:04:34:f5:25:9e:5e:02:a4:21:e9:68:d2: 29:4e:14:25:ce:22:2c:8e:bf:9f:e5:cc:6c:0f:ed: 26:07:33:cc:aa:f3:28:dd:20:e5:24:6e:2b:63:e9: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AD:4A:52:66:66:99:83:06:3F:9A:6A:8A:3E:1A:F5:20:3B:25:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f31c20-9026-31b0-bc7a-18496a3d9331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:80:87:70:02:f3:80:84:f4:d2:75:d6:9d:75:fc:ee:a2:82: 89:f7:04:80:66:39:ba:62:8d:52:55:e8:03:bb:19:24:9f:e8: 7a:55:47:e5:b7:61:01:7c:20:26:92:a4:b1:26:3e:9a:08:22: 9a:84:c3:d6:59:38:78:82:36:df:2c:30:3f:49:fd:43:bd:04: c3:7c:4c:f1:ac:da:9d:47:af:24:12:e4:5b:b8:5c:fe:10:c6: cc:ef:b6:33:a6:0a:f9:90:be:80:68:bf:9b:b8:15:63:5d:a5: 13:2a:7a:f0:35:1f:b6:0d:23:2a:1a:5e:0e:24:75:85:4c:7b: ad:9b:56:e2:b4:c9:ab:bd:a9:98:53:43:21:9a:af:07:bd:51: 49:03:0b:a0:3e:79:9b:56:1f:a5:43:08:d9:b1:cb:87:38:49: 0d:c4:eb:b5:77:df:73:47:f3:c2:36:fa:89:3d:68:12:82:c8: ea:8c:30:21:f3:0c:81:8c:20:f2:64:77:ca:c5:2c:23:23:ac: 22:e5:ef:2d:8c:ad:65:d1:e8:56:ac:03:e7:41:d9:42:ff:61: 3d:18:44:9c:93:d5:d6:0c:0c:5b:59:e6:ed:1d:66:a3:9e:cf: 4a:83:93:f3:5f:83:2e:a1:ba:b8:c4:1b:82:da:7e:9a:0b:51: c2:aa:86:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NcK23xX77V7E/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDgwOFoXDTI1MDQzMDEwMDgwOFowLzEtMCsGA1UEAxMk MDkwNjY0NDUtNjg1Yy00Mjg3LWEwZWItMTg4YWZhNmE3ZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSj1pfdbCyMX1UPefSNcM0WBgLW+S6aV52ha YqT7jGOL2P8Oof0Xn1qG46++aoB72OUHBd4FtcHKyLQfkak42p+3iX8oFY06jdzx bmtP3qzNLG3ZaU2TxThBVi6k7oALV6VwThVtux+JmrfI/7htNaLwDv1Vc8q2qz/3 FBUaazkf6BvIeuOguLBvu0aKSj9ccOOUx3pp3A5Yzl2k8QJeu4GT6zUsDWEhK46P c215EOtPql2Wz4ZxCydAl2INJeQhvHWWZDZ5h6lwG7ZFQd6S8wX7VLMENPUlnl4C pCHpaNIpThQlziIsjr+f5cxsD+0mBzPMqvMo3SDlJG4rY+nJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECtSlJmZpmDBj+aaoo+GvUgOyUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzVmMzFjMjAtOTAyNi0z MWIwLWJjN2EtMTg0OTZhM2Q5MzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeAh3AC84CE9NJ11p11/O6igon3BIBmObpijVJV6AO7GSSf6HpVR+W3 YQF8ICaSpLEmPpoIIpqEw9ZZOHiCNt8sMD9J/UO9BMN8TPGs2p1HryQS5Fu4XP4Q xszvtjOmCvmQvoBov5u4FWNdpRMqevA1H7YNIyoaXg4kdYVMe62bVuK0yau9qZhT QyGarwe9UUkDC6A+eZtWH6VDCNmxy4c4SQ3E67V333NH88I2+ok9aBKCyOqMMCHz DIGMIPJkd8rFLCMjrCLl7y2MrWXR6FasA+dB2UL/YT0YRJyT1dYMDFtZ5u0dZqOe z0qDk/Nfgy6hurjEG4LafpoLUcKqhnU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:20 2025 by rpki-client