$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa File: c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa (raw, json) Hash identifier: jLddli+4a6fE7jwlfxJhsfNO+4L1ULkkbd81nQXuJfw= Subject key identifier: AF:8C:EA:D1:27:53:9F:14:16:F3:82:AF:19:D9:5E:FA:C8:96:DB:3D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57F14FF257E5AECBB70A080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa Signing time: Tue 04 Feb 2025 13:57:11 +0000 ROA not before: Tue 04 Feb 2025 13:57:11 +0000 ROA not after: Mon 05 May 2025 12:57:11 +0000 asID: 30036 IP address blocks: 173.20.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7f:14:ff:25:7e:5a:ec:bb:70:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:57:11 2025 GMT Not After : May 5 12:57:11 2025 GMT Subject: CN=13fe23f7-8350-488c-85e4-fba46cf329c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:66:3a:fa:9e:09:bd:0c:93:5f:cc:72:9b:25: b1:6a:03:0a:64:9b:89:d9:7e:cc:81:28:de:06:79: da:ea:25:a0:b1:a6:9b:09:d4:c0:d3:9e:88:2e:c3: a8:0e:d8:cb:4d:6c:40:df:0d:b2:9a:22:72:81:f9: e6:c2:21:f8:02:04:3b:00:23:e7:f6:9c:3b:f4:24: 71:18:ea:d5:0f:66:ad:3b:ac:7d:28:9b:44:8b:ee: b4:a1:c6:17:e7:30:af:fd:46:c8:6b:93:11:03:c6: ae:57:93:84:60:5f:b2:b5:b5:10:55:74:5a:aa:9b: 23:73:2e:58:07:e2:70:43:b3:f1:8f:05:e6:75:23: e7:f2:ea:26:2a:cd:85:fe:29:78:1e:e8:2b:8e:3e: 18:14:7f:77:a9:c9:8d:b0:aa:0f:7c:ac:48:84:bc: 4c:9e:87:89:74:b1:a6:7f:5c:d7:09:1e:bf:d7:2d: 4c:37:65:5f:f6:b1:33:c0:00:2c:33:a2:ac:7b:a3: 20:0c:03:92:db:b4:a9:d8:c1:86:12:25:ac:21:72: 41:11:0b:e5:17:68:cd:39:a7:73:a1:bd:06:9e:28: 5e:ac:f6:d1:72:58:be:06:41:00:87:2f:24:94:0f: 3f:63:7c:88:84:7c:71:7d:a9:08:ff:6b:21:a7:b5: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8C:EA:D1:27:53:9F:14:16:F3:82:AF:19:D9:5E:FA:C8:96:DB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:df:9a:04:97:d4:56:2b:1c:69:70:fe:3e:33:f8:a5:e8:9a: f5:78:8c:16:38:57:75:b6:ae:50:9b:e9:d2:d0:53:d3:77:76: b1:14:33:62:47:b7:b1:cb:b4:06:9b:26:0f:13:54:53:2b:77: 0e:8a:f3:c6:54:77:d7:f0:fd:e5:a1:ab:0e:7e:b1:8f:5a:7c: d4:1b:2a:a6:75:01:a0:36:f6:04:c1:04:d9:7f:74:24:8b:67: cf:bf:7c:5f:04:2b:b7:e1:af:49:fa:44:68:ea:0f:c5:71:a4: 50:b2:3e:c6:24:b7:1c:58:cd:52:d1:b7:03:b6:89:67:fe:03: dd:21:b6:ed:d8:82:ad:0c:59:d5:46:27:d2:a9:ec:02:00:32: 2c:d9:5e:78:5f:35:be:1c:f3:c4:48:d8:b4:88:16:d4:e8:88: 56:f9:66:7b:84:d0:d0:65:82:03:3e:3d:5c:43:93:c1:7c:e0: e1:f3:5d:b7:9b:27:c0:f7:5c:8a:15:b4:f5:43:e5:6e:a9:88: fb:67:b3:78:29:a0:53:aa:3f:c0:39:38:a7:6c:8e:8a:07:f0: 2a:0c:52:cb:79:88:00:19:9c:52:86:f6:7f:75:2c:c0:4c:a5: 74:c1:df:4c:0f:15:55:da:28:a0:72:e4:21:de:b6:de:5d:67: 5a:30:91:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfxT/JX5a7LtwoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTcxMVoXDTI1MDUwNTEyNTcxMVowLzEtMCsGA1UEAxMk MTNmZTIzZjctODM1MC00ODhjLTg1ZTQtZmJhNDZjZjMyOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GY6+p4JvQyTX8xymyWxagMKZJuJ2X7MgSje Bnna6iWgsaabCdTA056ILsOoDtjLTWxA3w2ymiJygfnmwiH4AgQ7ACPn9pw79CRx GOrVD2atO6x9KJtEi+60ocYX5zCv/UbIa5MRA8auV5OEYF+ytbUQVXRaqpsjcy5Y B+JwQ7PxjwXmdSPn8uomKs2F/il4Hugrjj4YFH93qcmNsKoPfKxIhLxMnoeJdLGm f1zXCR6/1y1MN2Vf9rEzwAAsM6Kse6MgDAOS27Sp2MGGEiWsIXJBEQvlF2jNOadz ob0GniherPbRcli+BkEAhy8klA8/Y3yIhHxxfakI/2shp7WcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+M6tEnU58UFvOCrxnZXvrIlts9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzlhMzJkMmMtYTNkOS0z ZWUzLWJmOTktNTFlYjE3NWQwNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDfmgSX1FYrHGlw/j4z+KXomvV4jBY4V3W2rlCb6dLQU9N3drEUM2JH t7HLtAabJg8TVFMrdw6K88ZUd9fw/eWhqw5+sY9afNQbKqZ1AaA29gTBBNl/dCSL Z8+/fF8EK7fhr0n6RGjqD8VxpFCyPsYktxxYzVLRtwO2iWf+A90htu3Ygq0MWdVG J9Kp7AIAMizZXnhfNb4c88RI2LSIFtToiFb5ZnuE0NBlggM+PVxDk8F84OHzXbeb J8D3XIoVtPVD5W6piPtns3gpoFOqP8A5OKdsjooH8CoMUst5iAAZnFKG9n91LMBM pXTB30wPFVXaKKBy5CHett5dZ1owkc0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:22 2025 by rpki-client