$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1469f723-1023-309d-b58e-53c0a536331a.roa File: 1469f723-1023-309d-b58e-53c0a536331a.roa (raw, json) Hash identifier: KTSGg7Xn3EO1eSan+HFe1PqZlfkOGEj1KwzT6iQdIik= Subject key identifier: 0C:C1:63:73:53:D8:28:02:72:97:09:80:F1:69:E8:B8:1A:C4:6C:D4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784AE2734A31943758373B4 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1469f723-1023-309d-b58e-53c0a536331a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ae:27:34:a3:19:43:75:83:73:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0f8a194f-66c3-4cfe-99fe-4259264d7acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:44:98:1d:0d:72:83:f4:ef:f9:1f:06:63: 1c:50:95:17:c1:d7:8a:0e:a4:1a:aa:dd:d0:b5:fd: 89:ac:be:60:13:34:91:0e:18:d8:46:86:3d:7a:8a: cf:48:34:8b:13:76:e7:27:72:96:bf:fc:cd:ec:02: 10:02:90:81:72:bb:e0:a0:99:36:b6:a2:63:66:dc: bd:c8:4c:31:19:7c:4c:3c:38:cb:ae:13:63:3e:8c: ab:52:dd:67:9a:41:ad:37:e0:dc:1e:34:73:74:1e: ef:c4:b8:05:2e:16:01:98:12:11:4d:bf:f2:c9:32: 65:97:4b:b9:76:d1:d8:17:5c:f2:de:8a:19:a1:ba: 58:da:b9:bb:2b:78:b3:ba:34:f8:2f:8f:7d:c1:cc: d0:2a:df:ba:65:73:b9:d6:13:00:fd:f2:28:76:ff: 9c:d5:19:01:ad:9d:80:0a:97:ea:8e:6b:67:b3:63: 07:61:2d:d1:7f:96:1c:ea:1b:6f:f4:c4:f9:0d:d3: 7f:5a:6a:d9:64:a5:34:34:64:d1:15:7e:50:7b:0d: 6b:c4:61:66:af:e8:cd:e9:ff:48:43:f7:82:a1:3a: 7a:0d:84:0f:9a:30:82:b2:b5:10:11:24:6e:d8:f2: 4b:3f:6c:22:35:36:b8:30:f6:10:fe:d6:a7:4e:c0: a1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C1:63:73:53:D8:28:02:72:97:09:80:F1:69:E8:B8:1A:C4:6C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1469f723-1023-309d-b58e-53c0a536331a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e7:fb:78:c6:5f:92:f8:f7:47:2b:88:00:5e:56:e5:f7:8b: d8:ca:e1:ce:2d:ba:6a:1f:82:b9:ab:79:e3:14:62:c7:3b:07: 96:da:1d:45:a6:9f:56:db:f6:e8:e2:aa:6e:9c:0e:30:27:66: b9:4c:28:90:30:e7:84:13:d6:a1:6d:98:f5:f1:34:f7:06:a3: 54:a5:d2:44:12:8c:33:f3:60:c4:bf:85:e0:da:61:7f:bd:8d: e8:61:cd:60:57:e7:f2:2b:ba:d9:a9:fa:01:7c:d2:9a:33:93: e7:bd:a1:bd:f5:5a:2c:1f:3d:21:08:6e:08:68:7d:9f:e5:17: 83:9e:7d:ad:28:68:a3:d3:ab:cb:e8:12:55:1a:e5:41:5c:b3: 5b:30:47:5d:6b:34:57:e5:42:ce:60:68:6c:09:a1:b5:53:d1: af:b3:0c:c6:96:ed:b7:31:76:74:91:34:48:cb:47:b2:40:6a: 60:50:ea:e0:8c:a1:1f:67:f7:58:3d:e8:45:0f:ea:01:33:1f: e8:75:51:1b:4e:3d:48:dc:09:52:42:23:e6:31:2f:d3:7e:e5: 40:d2:8a:93:1d:24:f6:a2:47:9e:78:55:cd:62:a0:d0:4c:3f: c4:8a:95:33:ab:5e:e6:b8:3e:f9:15:50:c7:72:ad:a6:ca:f9: ba:e2:79:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhK4nNKMZQ3WDc7QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGY4YTE5NGYtNjZjMy00Y2ZlLTk5ZmUtNDI1OTI2NGQ3YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMxEmB0NcoP07/kfBmMcUJUXwdeKDqQaqt3Q tf2JrL5gEzSRDhjYRoY9eorPSDSLE3bnJ3KWv/zN7AIQApCBcrvgoJk2tqJjZty9 yEwxGXxMPDjLrhNjPoyrUt1nmkGtN+DcHjRzdB7vxLgFLhYBmBIRTb/yyTJll0u5 dtHYF1zy3ooZobpY2rm7K3izujT4L499wczQKt+6ZXO51hMA/fIodv+c1RkBrZ2A Cpfqjmtns2MHYS3Rf5Yc6htv9MT5DdN/WmrZZKU0NGTRFX5Qew1rxGFmr+jN6f9I Q/eCoTp6DYQPmjCCsrUQESRu2PJLP2wiNTa4MPYQ/tanTsChgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzBY3NT2CgCcpcJgPFp6LgaxGzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTQ2OWY3MjMtMTAyMy0z MDlkLWI1OGUtNTNjMGE1MzYzMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATn+3jGX5L490criABeVuX3i9jK4c4tumofgrmreeMUYsc7B5baHUWm n1bb9ujiqm6cDjAnZrlMKJAw54QT1qFtmPXxNPcGo1Sl0kQSjDPzYMS/heDaYX+9 jehhzWBX5/Irutmp+gF80pozk+e9ob31WiwfPSEIbghofZ/lF4Oefa0oaKPTq8vo ElUa5UFcs1swR11rNFflQs5gaGwJobVT0a+zDMaW7bcxdnSRNEjLR7JAamBQ6uCM oR9n91g96EUP6gEzH+h1URtOPUjcCVJCI+YxL9N+5UDSipMdJPaiR554Vc1ioNBM P8SKlTOrXua4PvkVUMdyrabK+brieSk= -----END CERTIFICATE-----Generated at Mon Apr 28 10:03:18 2025 by rpki-client