$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb556e43-23af-31d5-bc4f-9a05df3f07eb.roa File: eb556e43-23af-31d5-bc4f-9a05df3f07eb.roa (raw, json) Hash identifier: VuRu6wyjgrmhXQvP7pgM7kL2QYr+bgHgX1n8A1+1Loc= Subject key identifier: 90:AC:3F:E4:15:97:1B:D5:01:83:33:0C:D3:69:24:5B:19:E5:AD:D0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C575605FB77D38AD28515B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb556e43-23af-31d5-bc4f-9a05df3f07eb.roa Signing time: Tue 04 Feb 2025 13:37:38 +0000 ROA not before: Tue 04 Feb 2025 13:37:38 +0000 ROA not after: Mon 05 May 2025 12:37:38 +0000 asID: 30036 IP address blocks: 173.19.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:75:60:5f:b7:7d:38:ad:28:51:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:37:38 2025 GMT Not After : May 5 12:37:38 2025 GMT Subject: CN=7b6a1b7f-11af-4e7f-a0ef-27f5b1d06e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ce:36:2e:92:15:58:74:48:6b:4c:7a:77:cc: 74:17:ea:db:a8:55:fe:26:4e:9d:8d:38:f8:3a:ab: ce:1f:1a:a4:22:07:e4:e4:d6:27:4b:c7:4c:4d:7f: 24:83:87:8a:6a:19:24:11:c7:d1:e0:a9:93:42:d0: fe:bc:fa:bb:84:a5:f5:eb:5f:9c:e4:8c:27:7f:03: ca:f0:74:ad:e8:02:53:63:12:d0:ae:51:9d:c6:df: 14:06:64:f4:3f:9d:57:c4:bd:5a:83:2b:68:be:1c: 2c:c1:61:60:06:82:de:b9:6d:03:e7:1d:81:c6:f6: e1:eb:ad:a8:c4:47:e1:2d:60:ef:88:c0:e5:21:1d: c5:0c:6b:96:50:e6:b1:39:ea:86:11:7e:17:5c:48: 41:b2:09:ff:a2:70:9a:71:92:4f:e7:2b:3a:de:37: 61:04:08:8f:d6:43:b9:b0:bd:63:7d:b2:ff:71:72: 46:dc:14:5d:cb:68:b3:a3:8f:77:67:73:61:12:f6: e2:33:5c:00:d4:0a:2a:9a:fc:84:97:d7:be:e1:5a: 38:0d:a6:00:96:ed:0d:a5:a0:d1:78:8a:8e:31:70: d5:0a:a3:1b:47:60:97:b6:4b:60:e6:cf:ab:c9:aa: d3:38:1e:4c:44:a2:c2:fc:35:76:e3:2f:96:57:40: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:3F:E4:15:97:1B:D5:01:83:33:0C:D3:69:24:5B:19:E5:AD:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb556e43-23af-31d5-bc4f-9a05df3f07eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4f:7b:5f:fc:64:01:0f:45:fe:e7:3e:23:63:eb:68:7a:c5: 2e:04:3e:d0:77:01:ff:76:d0:e4:b2:e2:a0:d4:be:74:17:74: b2:7b:48:e9:8c:f7:c4:b9:30:a3:12:df:18:ec:b4:73:9b:4c: a5:9b:51:b8:40:b8:71:02:14:4e:13:64:f2:ca:8e:3a:3c:c8: 0b:0c:90:df:b6:78:72:33:e5:c5:1b:50:b2:f1:09:65:b6:2b: f9:40:99:c6:4e:46:30:fe:d0:9c:96:45:cd:b8:3e:c7:b9:79: 49:c4:b8:ee:c3:39:f7:1d:17:0c:d3:d0:49:9a:84:94:f4:6b: 96:f5:57:68:3d:5a:dd:6f:0a:f9:d7:6b:d5:ec:fe:11:cf:43: 6c:a3:94:19:a8:cf:0d:85:89:6f:86:da:d5:91:fb:b9:bb:9c: 97:49:4e:df:51:d0:a2:f7:ef:bb:f4:01:28:dd:ef:8b:d7:cf: 30:78:8f:e8:a0:5e:73:71:6d:7f:b0:fa:eb:85:06:aa:ce:71: d2:91:77:31:a3:24:5f:ec:22:35:c2:80:5c:38:7a:37:2a:2d: 2a:69:f6:c5:94:c4:80:71:c9:e1:f5:87:8d:17:7a:35:e7:5d: 99:6b:6f:a1:c9:1d:5d:eb:ce:3c:34:e1:8e:76:3d:c9:c7:65: 9f:a1:af:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdWBft304rShRW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzMzczOFoXDTI1MDUwNTEyMzczOFowLzEtMCsGA1UEAxMk N2I2YTFiN2YtMTFhZi00ZTdmLWEwZWYtMjdmNWIxZDA2ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm842LpIVWHRIa0x6d8x0F+rbqFX+Jk6djTj4 OqvOHxqkIgfk5NYnS8dMTX8kg4eKahkkEcfR4KmTQtD+vPq7hKX161+c5IwnfwPK 8HSt6AJTYxLQrlGdxt8UBmT0P51XxL1agytovhwswWFgBoLeuW0D5x2Bxvbh662o xEfhLWDviMDlIR3FDGuWUOaxOeqGEX4XXEhBsgn/onCacZJP5ys63jdhBAiP1kO5 sL1jfbL/cXJG3BRdy2izo493Z3NhEvbiM1wA1AoqmvyEl9e+4Vo4DaYAlu0NpaDR eIqOMXDVCqMbR2CXtktg5s+ryarTOB5MRKLC/DV24y+WV0AX8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCsP+QVlxvVAYMzDNNpJFsZ5a3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWI1NTZlNDMtMjNhZi0z MWQ1LWJjNGYtOWEwNWRmM2YwN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpPe1/8ZAEPRf7nPiNj62h6xS4EPtB3Af920OSy4qDUvnQXdLJ7SOmM 98S5MKMS3xjstHObTKWbUbhAuHECFE4TZPLKjjo8yAsMkN+2eHIz5cUbULLxCWW2 K/lAmcZORjD+0JyWRc24Pse5eUnEuO7DOfcdFwzT0EmahJT0a5b1V2g9Wt1vCvnX a9Xs/hHPQ2yjlBmozw2FiW+G2tWR+7m7nJdJTt9R0KL377v0ASjd74vXzzB4j+ig XnNxbX+w+uuFBqrOcdKRdzGjJF/sIjXCgFw4ejcqLSpp9sWUxIBxyeH1h40XejXn XZlrb6HJHV3rzjw04Y52PcnHZZ+hrxk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:24 2025 by rpki-client