$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11e062fa-d255-35c8-8513-c900b97b1577.roa File: 11e062fa-d255-35c8-8513-c900b97b1577.roa (raw, json) Hash identifier: 416LSSwIbqDh7Hp5E2hELjiv218g24rlpyIokHKWnz0= Subject key identifier: 1D:55:40:C7:19:2A:BB:86:C2:F3:EE:C8:7C:C9:22:B5:A5:3F:9A:DB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF57E14E01FBBB35839E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11e062fa-d255-35c8-8513-c900b97b1577.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:57:e1:4e:01:fb:bb:35:83:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=dccc22d2-3d95-4137-bc6f-853c3ef9ef3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:d4:22:73:b9:38:91:3d:32:a9:cc:cc:5a: 81:0a:b8:95:8e:cc:30:4f:a0:a0:c6:81:da:74:88: 3d:0c:9f:74:0d:83:8f:8e:cd:eb:a4:cb:45:3c:18: 67:d4:57:47:0c:a2:14:88:34:13:25:06:58:3c:64: 96:3a:bd:7e:77:fa:d6:31:1b:af:f1:f9:9f:54:35: 19:4a:6f:5d:3e:c4:d7:da:07:3b:db:b9:97:2a:c1: b4:78:ea:27:36:32:cb:a9:ad:47:49:13:5c:38:36: 6b:45:c0:cb:3d:cb:38:4f:f8:c7:5a:44:da:70:8b: e4:52:b1:79:60:2e:40:90:9f:cc:2a:f0:ce:6e:22: c0:bb:cd:94:07:54:06:91:f9:0f:86:ec:7c:95:42: 51:08:64:9f:e4:ec:7d:4a:54:db:cd:6d:e2:8e:b6: 7d:a8:45:92:dc:ed:52:a9:01:d9:98:8d:dd:ec:ec: aa:0c:b8:74:e4:29:47:26:ac:6e:34:50:71:f6:9a: b5:ff:34:ac:3d:a7:24:d3:ab:c7:e4:3d:6a:ad:7b: 5e:c2:df:a1:df:1e:f7:e1:ba:da:44:d8:07:20:5b: aa:20:59:ee:f1:91:d3:36:cc:bb:51:e5:02:7e:0b: db:71:7f:cf:5d:0d:9c:66:7d:77:1f:43:f5:2b:a3: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:55:40:C7:19:2A:BB:86:C2:F3:EE:C8:7C:C9:22:B5:A5:3F:9A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11e062fa-d255-35c8-8513-c900b97b1577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ea:bc:cf:07:b1:3f:f2:bf:e2:21:78:23:b8:e0:52:04:3a: 65:20:c6:bf:80:26:16:ba:c1:2c:4f:dd:88:ca:3c:e1:2a:49: 77:d8:28:21:da:dd:96:c6:75:7a:87:1e:c1:3c:4a:a2:23:42: 06:44:f3:a4:af:68:6c:b3:0a:1a:c0:96:86:92:6f:82:f6:c7: 21:2a:fd:19:16:52:bc:8a:62:f3:ce:0e:41:ba:5a:74:21:97: 4d:69:56:5e:e7:42:7e:13:2f:48:5d:8a:1f:79:f0:2b:de:d9: 9a:91:64:98:dc:c5:06:83:15:a8:c7:97:e7:36:a4:b4:83:12: 81:7c:6f:e8:02:aa:5e:5c:53:78:d0:97:97:ca:d5:ec:c6:2d: 48:3e:ae:41:d7:e1:67:86:39:9f:36:b2:31:6a:3c:c5:f6:c3: d8:a4:6a:97:1d:0e:5c:0f:cc:15:8a:5b:05:db:93:d6:b7:5d: 25:31:0b:9c:80:32:16:e2:eb:9d:ee:d3:30:86:70:f5:1f:02: e0:c2:a8:35:d3:fd:5a:44:2a:a2:93:c4:0b:31:43:01:5c:13: 5f:73:60:b0:ad:6e:86:4c:7d:c9:00:91:5c:ac:f5:58:4c:c6: 77:18:a7:bf:90:25:fa:c3:0a:57:97:fb:7e:2a:04:9f:c4:e7: 2d:ea:91:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71fhTgH7uzWDngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGNjYzIyZDItM2Q5NS00MTM3LWJjNmYtODUzYzNlZjllZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHzUInO5OJE9MqnMzFqBCriVjswwT6CgxoHa dIg9DJ90DYOPjs3rpMtFPBhn1FdHDKIUiDQTJQZYPGSWOr1+d/rWMRuv8fmfVDUZ Sm9dPsTX2gc727mXKsG0eOonNjLLqa1HSRNcODZrRcDLPcs4T/jHWkTacIvkUrF5 YC5AkJ/MKvDObiLAu82UB1QGkfkPhux8lUJRCGSf5Ox9SlTbzW3ijrZ9qEWS3O1S qQHZmI3d7OyqDLh05ClHJqxuNFBx9pq1/zSsPack06vH5D1qrXtewt+h3x734bra RNgHIFuqIFnu8ZHTNsy7UeUCfgvbcX/PXQ2cZn13H0P1K6O/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1VQMcZKruGwvPuyHzJIrWlP5rbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFlMDYyZmEtZDI1NS0z NWM4LTg1MTMtYzkwMGI5N2IxNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPqvM8HsT/yv+IheCO44FIEOmUgxr+AJha6wSxP3YjKPOEqSXfYKCHa 3ZbGdXqHHsE8SqIjQgZE86SvaGyzChrAloaSb4L2xyEq/RkWUryKYvPODkG6WnQh l01pVl7nQn4TL0hdih958Cve2ZqRZJjcxQaDFajHl+c2pLSDEoF8b+gCql5cU3jQ l5fK1ezGLUg+rkHX4WeGOZ82sjFqPMX2w9ikapcdDlwPzBWKWwXbk9a3XSUxC5yA Mhbi653u0zCGcPUfAuDCqDXT/VpEKqKTxAsxQwFcE19zYLCtboZMfckAkVys9VhM xncYp7+QJfrDCleX+34qBJ/E5y3qkSk= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:51 2025 by rpki-client