$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa File: d8921189-8a05-30ea-b129-092968bc220d.roa (raw, json) Hash identifier: e9+u/cA3AiA7ydo7AiprWAuSGaoQeSvJUVNNCFpNsw0= Subject key identifier: A0:FA:CF:DA:E8:46:3E:16:B6:E1:AB:88:33:F7:FB:CE:29:44:9D:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C532664AD9BDAED93AEF1B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa Signing time: Tue 04 Feb 2025 11:22:41 +0000 ROA not before: Tue 04 Feb 2025 11:22:41 +0000 ROA not after: Mon 05 May 2025 10:22:41 +0000 asID: 30036 IP address blocks: 173.20.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:32:66:4a:d9:bd:ae:d9:3a:ef:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:22:41 2025 GMT Not After : May 5 10:22:41 2025 GMT Subject: CN=6e748690-bee5-4237-96da-4bc0d6472a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:01:b3:51:aa:8c:06:fa:a5:f9:2e:13:53:50: 53:ae:57:4c:21:f6:45:21:77:9e:e5:4b:ed:a7:45: 58:06:c7:9a:30:1b:9c:0b:cb:cc:30:f5:f1:ac:9c: 47:d3:bf:23:78:d5:81:a1:07:4d:58:67:54:54:ec: a3:5a:c8:ad:da:b3:96:88:07:a0:ea:91:3a:64:c1: 28:28:e0:7d:72:5e:d6:ee:5d:09:4c:c4:b6:66:6e: ce:38:c9:77:c8:95:6b:76:f4:2a:79:00:fb:e4:49: 09:38:51:63:78:11:bd:5c:65:49:4e:b6:e5:fd:a8: 08:07:f0:98:af:9d:18:a5:53:21:98:e7:b3:4e:8b: 37:ad:3e:c9:53:47:c3:2a:4d:e4:0d:d0:37:90:3c: 15:f5:e5:a8:d8:00:78:7d:03:21:17:47:f8:08:fa: 79:e0:32:b8:f9:c4:ce:6a:50:f0:49:2f:e4:1c:3d: 53:d7:3f:0c:11:79:f9:27:c0:ec:af:f1:b5:20:8a: 3b:e5:59:5a:31:46:e9:15:c9:d1:12:68:6b:bb:84: b1:b1:c2:b5:2d:d5:0a:92:e8:c8:91:c0:e3:8e:b8: 5e:61:f9:a3:92:bf:77:bd:bf:42:c1:c2:8a:f3:10: 51:d7:b1:02:06:24:dd:aa:05:56:39:df:96:c8:06: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FA:CF:DA:E8:46:3E:16:B6:E1:AB:88:33:F7:FB:CE:29:44:9D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e1:1d:e7:8f:43:96:e9:67:f4:32:27:05:8b:18:e3:94:2e: 26:dd:bd:ff:41:5a:43:03:fe:df:d6:49:5d:0c:9f:7c:e6:ae: e2:c4:77:e9:97:ed:5d:54:72:84:b5:db:6e:ec:23:c9:6c:80: 3d:07:94:29:a9:eb:31:78:fd:65:28:69:b2:0b:f2:c6:0a:34: bd:f3:ed:3f:90:39:41:0b:5f:39:e9:7f:ba:e5:f8:c5:b1:3c: 69:4a:a2:a1:2f:15:cb:47:83:8a:6f:a5:59:b8:f5:96:37:1a: 19:13:d3:c5:e6:fc:d0:cb:64:27:0d:6a:c4:1a:47:17:2a:ba: 0f:77:04:63:35:ff:8d:28:d8:a9:d9:ba:7d:59:04:75:95:72: 42:db:fb:c3:3f:31:88:89:f1:ec:89:a4:e6:5e:70:24:11:28: 11:34:70:d4:6c:5c:1f:ad:d4:1b:ae:2d:fd:d1:ca:52:fb:bd: ac:e9:33:32:35:5a:12:87:68:fd:a5:e0:93:bc:8d:ab:34:73: 95:5f:06:d2:c0:0b:7c:e3:dd:1e:54:a8:58:c5:12:6e:1e:2b: 8a:2f:4e:2c:6f:c9:2b:63:24:90:6a:66:e8:bf:6d:b9:50:90: 4a:35:0c:b8:f1:2c:fe:f1:49:21:70:cf:24:2c:9b:64:8d:dc: 3b:2e:0f:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFMmZK2b2u2TrvGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjI0MVoXDTI1MDUwNTEwMjI0MVowLzEtMCsGA1UEAxMk NmU3NDg2OTAtYmVlNS00MjM3LTk2ZGEtNGJjMGQ2NDcyYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wGzUaqMBvql+S4TU1BTrldMIfZFIXee5Uvt p0VYBseaMBucC8vMMPXxrJxH078jeNWBoQdNWGdUVOyjWsit2rOWiAeg6pE6ZMEo KOB9cl7W7l0JTMS2Zm7OOMl3yJVrdvQqeQD75EkJOFFjeBG9XGVJTrbl/agIB/CY r50YpVMhmOezTos3rT7JU0fDKk3kDdA3kDwV9eWo2AB4fQMhF0f4CPp54DK4+cTO alDwSS/kHD1T1z8MEXn5J8Dsr/G1IIo75VlaMUbpFcnREmhru4SxscK1LdUKkujI kcDjjrheYfmjkr93vb9CwcKK8xBR17ECBiTdqgVWOd+WyAYeawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD6z9roRj4WtuGriDP3+84pRJ1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDg5MjExODktOGEwNS0z MGVhLWIxMjktMDkyOTY4YmMyMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzhHeePQ5bpZ/QyJwWLGOOULibdvf9BWkMD/t/WSV0Mn3zmruLEd+mX 7V1UcoS1227sI8lsgD0HlCmp6zF4/WUoabIL8sYKNL3z7T+QOUELXznpf7rl+MWx PGlKoqEvFctHg4pvpVm49ZY3GhkT08Xm/NDLZCcNasQaRxcqug93BGM1/40o2KnZ un1ZBHWVckLb+8M/MYiJ8eyJpOZecCQRKBE0cNRsXB+t1BuuLf3RylL7vazpMzI1 WhKHaP2l4JO8jas0c5VfBtLAC3zj3R5UqFjFEm4eK4ovTixvyStjJJBqZui/bblQ kEo1DLjxLP7xSSFwzyQsm2SN3DsuDyI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:22 2025 by rpki-client