$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb7eb31-f5a9-34c2-a365-947e56fbf10d.roa File: dcb7eb31-f5a9-34c2-a365-947e56fbf10d.roa (raw, json) Hash identifier: wcPh48qBlz0hHtfbIw3rgoxsZsyeOnFY4/mR02AXu3g= Subject key identifier: 4E:44:B9:63:41:F4:20:2D:DB:EE:D0:D8:9E:62:93:ED:13:55:72:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5588342312BDDD0C8E1A6C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb7eb31-f5a9-34c2-a365-947e56fbf10d.roa Signing time: Tue 04 Feb 2025 12:39:28 +0000 ROA not before: Tue 04 Feb 2025 12:39:28 +0000 ROA not after: Mon 05 May 2025 11:39:28 +0000 asID: 30036 IP address blocks: 173.20.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:58:83:42:31:2b:dd:d0:c8:e1:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:39:28 2025 GMT Not After : May 5 11:39:28 2025 GMT Subject: CN=564dd8f5-cf62-45f0-b784-541405f60835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:ec:90:66:03:92:2e:c9:f9:86:50:8f:70: 48:a0:79:58:a2:8a:df:b3:be:fd:8c:af:e3:49:14: 45:77:c1:57:00:0f:f7:91:68:17:c4:8b:be:e9:1d: f3:1f:e9:2f:29:3b:a8:98:7e:c9:ba:9d:b5:a6:d3: 19:f0:35:24:eb:bf:84:d5:98:a9:70:94:b2:19:b5: b6:2a:96:91:f7:41:e1:d6:2d:4e:54:c6:22:35:2c: c3:95:e2:b1:e1:31:4b:d7:5b:ac:e0:b0:77:ba:f2: 44:48:ce:40:cc:9e:67:9b:b3:27:58:2f:6e:43:fe: 09:61:5c:9e:f6:ab:22:cd:bd:90:83:c8:29:ec:d5: ef:7f:2d:d8:9f:6d:e7:81:69:b1:99:21:00:6a:c5: ca:3b:5c:31:b4:11:19:1c:78:d9:6e:f8:49:9d:38: 50:95:9b:1a:3d:91:6e:fc:8a:71:9c:2e:6f:c6:ea: d7:95:82:f3:fa:74:14:03:c4:97:76:c0:dc:ea:13: 62:8d:5d:19:fc:0d:32:98:21:3c:47:fc:6b:17:a4: 4c:65:f7:ce:15:b0:74:18:d9:fa:98:64:55:45:45: bc:8a:31:76:41:4b:69:d8:3c:7e:9f:91:be:07:92: 0a:ff:4a:f6:a8:ce:5f:a3:58:14:f2:e6:f9:49:23: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:44:B9:63:41:F4:20:2D:DB:EE:D0:D8:9E:62:93:ED:13:55:72:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb7eb31-f5a9-34c2-a365-947e56fbf10d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:dd:b8:c9:80:62:95:51:50:6a:30:05:3e:59:9b:be:e8:05: 19:db:4c:7d:f4:43:c0:2e:91:a5:bc:95:c5:8b:9f:5d:30:60: 68:0f:e5:f1:c0:06:54:4c:dc:0c:f4:4b:30:2f:b6:4e:eb:62: f3:c7:e5:93:89:a2:af:94:eb:17:36:8d:a8:64:f0:aa:77:da: b8:49:ee:f7:f2:7e:03:3b:12:e3:61:7b:e5:35:08:f7:f5:31: 57:dc:b1:56:e2:7a:06:9b:31:45:3f:2b:ce:17:96:e9:99:5c: ab:ef:16:06:23:3c:b9:18:4b:fd:55:89:eb:37:7d:6f:22:d8: 0b:57:cb:06:e0:f0:69:e1:81:ee:26:c9:5b:b8:81:2c:af:cc: d9:ae:e3:c2:50:7e:d3:87:30:87:8d:fb:4d:e7:f8:3e:12:93: f2:b3:81:e3:70:8e:c1:41:8f:cb:29:d3:54:ae:ff:ea:a4:72: 28:02:28:43:6f:28:c3:e8:d8:eb:5b:46:78:97:1c:31:37:df: 2e:a6:8b:a2:4d:04:34:ad:14:8f:08:98:04:80:1f:48:76:93: 44:15:32:9f:25:0d:dc:2b:bf:fc:0b:23:82:10:95:19:5f:54: a6:10:18:9f:27:81:65:5e:b6:78:79:d4:16:8b:ce:76:f4:c2: 50:b0:6a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWINCMSvd0MjhpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzkyOFoXDTI1MDUwNTExMzkyOFowLzEtMCsGA1UEAxMk NTY0ZGQ4ZjUtY2Y2Mi00NWYwLWI3ODQtNTQxNDA1ZjYwODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkHskGYDki7J+YZQj3BIoHlYoorfs779jK/j SRRFd8FXAA/3kWgXxIu+6R3zH+kvKTuomH7Jup21ptMZ8DUk67+E1ZipcJSyGbW2 KpaR90Hh1i1OVMYiNSzDleKx4TFL11us4LB3uvJESM5AzJ5nm7MnWC9uQ/4JYVye 9qsizb2Qg8gp7NXvfy3Yn23ngWmxmSEAasXKO1wxtBEZHHjZbvhJnThQlZsaPZFu /IpxnC5vxurXlYLz+nQUA8SXdsDc6hNijV0Z/A0ymCE8R/xrF6RMZffOFbB0GNn6 mGRVRUW8ijF2QUtp2Dx+n5G+B5IK/0r2qM5fo1gU8ub5SSPv0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5EuWNB9CAt2+7Q2J5ik+0TVXJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGNiN2ViMzEtZjVhOS0z NGMyLWEzNjUtOTQ3ZTU2ZmJmMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbduMmAYpVRUGowBT5Zm77oBRnbTH30Q8AukaW8lcWLn10wYGgP5fHA BlRM3Az0SzAvtk7rYvPH5ZOJoq+U6xc2jahk8Kp32rhJ7vfyfgM7EuNhe+U1CPf1 MVfcsVbiegabMUU/K84XlumZXKvvFgYjPLkYS/1Vies3fW8i2AtXywbg8Gnhge4m yVu4gSyvzNmu48JQftOHMIeN+03n+D4Sk/KzgeNwjsFBj8sp01Su/+qkcigCKENv KMPo2OtbRniXHDE33y6mi6JNBDStFI8ImASAH0h2k0QVMp8lDdwrv/wLI4IQlRlf VKYQGJ8ngWVetnh51BaLznb0wlCwavA= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:42 2025 by rpki-client