$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cedfe69d-e048-3aae-9c81-46b373aee30e.roa File: cedfe69d-e048-3aae-9c81-46b373aee30e.roa (raw, json) Hash identifier: QUv+7xkPz2xAu+svLl4EhuF20ugtC40f5FATN3P6BeE= Subject key identifier: 10:0D:AF:9F:AA:E5:54:0B:8C:64:7D:38:98:ED:2F:80:F5:A7:B0:2A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FD136A95FC8D955BA23300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cedfe69d-e048-3aae-9c81-46b373aee30e.roa Signing time: Wed 05 Feb 2025 11:22:40 +0000 ROA not before: Wed 05 Feb 2025 11:22:40 +0000 ROA not after: Tue 06 May 2025 10:22:40 +0000 asID: 30036 IP address blocks: 173.18.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:13:6a:95:fc:8d:95:5b:a2:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:22:40 2025 GMT Not After : May 6 10:22:40 2025 GMT Subject: CN=def9fc00-464b-46be-b126-5c2a4c408f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d1:56:8d:4a:37:45:07:27:d7:1d:f2:c6:f1: b3:85:ba:59:9c:49:0d:ba:08:09:a6:f3:cd:bf:be: 01:32:07:4d:88:97:e3:58:07:19:16:f7:9a:2e:ae: fd:c3:c2:ab:e9:b8:e9:5c:7b:67:53:fa:f9:10:31: 95:23:94:fe:d4:71:c6:f1:51:5d:0a:99:43:59:03: 63:ce:50:fd:d1:51:bc:da:65:d5:ba:71:73:78:16: 18:df:5c:3c:86:15:8a:ac:f3:c0:8d:c5:00:f0:a3: c0:db:89:7e:2d:76:89:24:f3:36:ec:80:4c:08:cf: 6a:a7:79:8a:62:bf:56:84:1d:fa:2a:dd:48:4f:2e: c1:72:f1:3e:ea:25:42:ff:f0:31:4a:f9:f3:84:23: e7:ae:cf:df:a3:35:92:c3:a8:74:b5:5b:ca:f3:81: cb:16:17:e0:9b:25:ff:f9:a3:b8:fc:fd:b7:26:d7: 1c:64:d6:76:76:e9:b3:05:df:03:46:16:c6:1a:7a: 49:04:3c:d8:c4:32:0b:15:de:22:e4:5f:d4:98:e9: af:10:d3:42:95:22:ab:c9:7b:24:52:24:f7:5e:c4: b6:96:09:24:44:5a:9e:65:40:d5:a0:d0:6c:d0:ef: 99:92:41:43:b0:b9:e8:7e:ac:9f:2b:e6:c7:b1:78: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0D:AF:9F:AA:E5:54:0B:8C:64:7D:38:98:ED:2F:80:F5:A7:B0:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cedfe69d-e048-3aae-9c81-46b373aee30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7c:a8:39:31:5c:b5:8a:7f:34:c2:62:bf:69:dc:30:07:db: 47:89:f9:19:9f:b1:a1:e5:ae:32:de:1e:a7:04:a6:65:dd:c8: ad:4e:73:67:9e:f8:28:be:c4:23:2b:ff:98:91:e6:15:fd:86: ae:09:43:a8:a3:cf:1e:ad:3b:30:f7:a7:be:71:89:b6:41:2c: 07:e9:a7:6f:14:14:44:1f:8e:1b:5f:f4:3e:79:b7:c8:ee:55: 5c:f6:67:14:15:57:a7:cb:6f:26:36:ec:a6:20:1e:81:0a:11: 0a:61:bd:1e:ec:9e:63:ed:dc:4f:ed:03:97:c5:f0:49:a4:c8: 18:df:4f:e0:c3:fa:71:86:8d:91:b4:7b:2a:8b:54:1c:a5:be: 34:86:41:53:4b:4c:c9:fa:17:13:a8:30:42:d7:dd:db:18:37: c3:26:49:34:65:67:46:8a:07:0d:17:6d:06:ba:c1:34:9d:90: 0c:7e:87:bc:93:72:cf:d4:a7:cc:0f:18:e9:7e:fb:b3:ba:32: 2a:4f:7f:6d:43:46:94:73:9b:5b:81:0b:bf:c2:94:25:5e:9e: 33:cd:95:d3:10:d7:ad:d3:d5:1b:de:52:c0:4d:16:64:58:c3: d0:e4:30:88:a7:cd:94:4e:1a:e5:63:54:f4:0b:86:5e:ca:e8: e7:39:ab:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/RNqlfyNlVuiMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjI0MFoXDTI1MDUwNjEwMjI0MFowLzEtMCsGA1UEAxMk ZGVmOWZjMDAtNDY0Yi00NmJlLWIxMjYtNWMyYTRjNDA4ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtFWjUo3RQcn1x3yxvGzhbpZnEkNuggJpvPN v74BMgdNiJfjWAcZFveaLq79w8Kr6bjpXHtnU/r5EDGVI5T+1HHG8VFdCplDWQNj zlD90VG82mXVunFzeBYY31w8hhWKrPPAjcUA8KPA24l+LXaJJPM27IBMCM9qp3mK Yr9WhB36Kt1ITy7BcvE+6iVC//AxSvnzhCPnrs/fozWSw6h0tVvK84HLFhfgmyX/ +aO4/P23JtccZNZ2dumzBd8DRhbGGnpJBDzYxDILFd4i5F/UmOmvENNClSKryXsk UiT3XsS2lgkkRFqeZUDVoNBs0O+ZkkFDsLnofqyfK+bHsXhgKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBANr5+q5VQLjGR9OJjtL4D1p7AqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2VkZmU2OWQtZTA0OC0z YWFlLTljODEtNDZiMzczYWVlMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV8qDkxXLWKfzTCYr9p3DAH20eJ+RmfsaHlrjLeHqcEpmXdyK1Oc2ee +Ci+xCMr/5iR5hX9hq4JQ6ijzx6tOzD3p75xibZBLAfpp28UFEQfjhtf9D55t8ju VVz2ZxQVV6fLbyY27KYgHoEKEQphvR7snmPt3E/tA5fF8EmkyBjfT+DD+nGGjZG0 eyqLVBylvjSGQVNLTMn6FxOoMELX3dsYN8MmSTRlZ0aKBw0XbQa6wTSdkAx+h7yT cs/Up8wPGOl++7O6MipPf21DRpRzm1uBC7/ClCVenjPNldMQ163T1RveUsBNFmRY w9DkMIinzZROGuVjVPQLhl7K6Oc5q6I= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:00 2025 by rpki-client