$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa File: d459b9b8-1adb-320f-9bf2-ba30866194c7.roa (raw, json) Hash identifier: vKrvMhBK0WA2GmDp3WBElQsTzzJbcdXGd/R7lF6agVo= Subject key identifier: D9:C9:BF:35:49:D0:1F:31:4B:F4:C8:C8:5E:2E:13:AD:F3:9D:8B:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5335B00977B88F5D97169C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa Signing time: Tue 04 Feb 2025 11:24:36 +0000 ROA not before: Tue 04 Feb 2025 11:24:36 +0000 ROA not after: Mon 05 May 2025 10:24:36 +0000 asID: 30036 IP address blocks: 173.16.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:33:5b:00:97:7b:88:f5:d9:71:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:24:36 2025 GMT Not After : May 5 10:24:36 2025 GMT Subject: CN=34f97c1a-693d-4a8c-a10c-d2fbfdf482d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:9f:50:63:af:36:53:9c:03:2c:96:9b:90: 02:64:c0:0d:80:4b:24:cb:03:84:0f:c6:79:f3:33: 2b:a8:b0:33:01:66:83:46:e7:ba:37:a3:03:61:14: 88:5c:bb:97:42:8b:70:cd:f8:e4:32:af:d8:80:ce: 09:07:8c:fc:3e:98:f2:4a:c4:7a:b7:32:90:6e:12: 1d:70:cd:b0:e6:b8:1a:65:4f:da:d9:e3:11:e4:31: 02:20:40:7a:ab:4c:0d:3b:2f:d3:c9:d3:e6:3f:75: 1c:89:7a:53:3b:a7:9d:9c:72:3d:b6:d3:05:38:05: 56:29:58:41:53:40:6a:91:e4:15:4a:e9:89:ed:47: a2:0d:aa:ae:99:74:c4:9f:e1:68:6a:f7:fd:75:00: f6:12:6b:19:1e:0b:fa:c8:81:92:28:b5:db:3d:cc: 96:b0:7d:0a:3f:34:c2:ef:95:fd:8e:74:c6:e4:95: 51:da:9c:89:24:87:a0:b1:66:da:90:9f:f9:48:b6: 20:11:3a:b0:5b:32:27:2c:fe:dd:f0:07:f1:ff:6f: e4:3c:5b:3b:b6:7d:cf:e9:51:dc:9e:d4:3f:ba:f4: a3:4f:65:ab:78:5e:93:84:f9:6c:d5:17:55:4d:90: 9f:82:fb:eb:b9:b0:5e:b1:f6:79:87:d9:36:98:a6: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C9:BF:35:49:D0:1F:31:4B:F4:C8:C8:5E:2E:13:AD:F3:9D:8B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a6:55:71:66:1e:28:57:84:e9:64:30:23:32:93:dc:ed:7b: 5a:df:1c:49:c1:29:8b:1b:59:aa:ce:e1:30:e7:bf:e8:3e:03: b5:b5:e5:22:65:5d:42:88:63:c8:e2:93:68:c2:85:65:8b:27: 89:3e:2b:42:d0:02:7d:fc:b8:ba:5d:a9:46:c2:88:34:4b:6d: d3:4e:f0:a5:87:ac:3b:29:dd:03:a6:59:3d:38:13:bb:e3:9b: e3:ab:b6:56:88:c4:34:ee:36:cd:bb:65:56:04:da:21:25:67: 4b:48:7a:a6:2c:10:ea:13:14:03:7a:65:6c:c9:1f:b5:33:07: ff:d1:71:5b:58:02:d5:18:29:cd:fc:97:c2:4d:d7:31:22:a6: 25:d2:61:91:70:d1:3c:ce:6f:6b:f6:0c:a6:9f:9b:16:99:0c: b8:2d:41:0c:b6:2d:7d:09:be:8a:29:a5:b8:f9:e5:c1:10:5d: 90:b9:f9:87:dc:34:99:ac:ae:e1:1d:37:74:ec:31:ba:fa:06: 71:48:a9:48:0c:a8:cd:de:19:96:5f:8f:4c:37:9f:fa:65:60: e5:38:b8:8b:1b:92:89:6b:ff:b4:c2:c8:48:1f:f4:d5:e8:b0: 5d:0d:0f:45:4b:c1:7b:23:ef:a0:81:34:17:22:0a:be:47:c0: 6f:c0:9f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM1sAl3uI9dlxacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjQzNloXDTI1MDUwNTEwMjQzNlowLzEtMCsGA1UEAxMk MzRmOTdjMWEtNjkzZC00YThjLWExMGMtZDJmYmZkZjQ4MmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTSfUGOvNlOcAyyWm5ACZMANgEskywOED8Z5 8zMrqLAzAWaDRue6N6MDYRSIXLuXQotwzfjkMq/YgM4JB4z8PpjySsR6tzKQbhId cM2w5rgaZU/a2eMR5DECIEB6q0wNOy/TydPmP3UciXpTO6ednHI9ttMFOAVWKVhB U0BqkeQVSumJ7UeiDaqumXTEn+Foavf9dQD2EmsZHgv6yIGSKLXbPcyWsH0KPzTC 75X9jnTG5JVR2pyJJIegsWbakJ/5SLYgETqwWzInLP7d8Afx/2/kPFs7tn3P6VHc ntQ/uvSjT2WreF6ThPls1RdVTZCfgvvrubBesfZ5h9k2mKZ5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnJvzVJ0B8xS/TIyF4uE63znYvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ1OWI5YjgtMWFkYi0z MjBmLTliZjItYmEzMDg2NjE5NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCmVXFmHihXhOlkMCMyk9zte1rfHEnBKYsbWarO4TDnv+g+A7W15SJl XUKIY8jik2jChWWLJ4k+K0LQAn38uLpdqUbCiDRLbdNO8KWHrDsp3QOmWT04E7vj m+OrtlaIxDTuNs27ZVYE2iElZ0tIeqYsEOoTFAN6ZWzJH7UzB//RcVtYAtUYKc38 l8JN1zEipiXSYZFw0TzOb2v2DKafmxaZDLgtQQy2LX0Jvooppbj55cEQXZC5+Yfc NJmsruEdN3TsMbr6BnFIqUgMqM3eGZZfj0w3n/plYOU4uIsbkolr/7TCyEgf9NXo sF0ND0VLwXsj76CBNBciCr5HwG/An74= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:49 2025 by rpki-client