$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa File: 18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa (raw, json) Hash identifier: sQhERfCtRphk1MiOY4Rlf6NscbQTsoogIBnMlXpBAc8= Subject key identifier: 68:7F:A2:99:B4:1E:D7:1F:A4:E7:45:99:F4:D6:87:9B:42:1C:31:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A5D8920E45AC58B1F0C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a5:d8:92:0e:45:ac:58:b1:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=cec04350-5667-4533-9d6b-72bb09670f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:13:80:dd:cf:e2:a1:3e:34:ee:01:b5:f1: 96:ad:7f:9d:fe:19:aa:65:d2:d1:66:4b:d2:36:86: 97:94:e7:d9:53:d8:07:ac:77:3e:01:3d:67:88:4f: 27:de:18:b5:ce:64:83:89:b7:0b:51:da:ad:13:ea: 49:56:16:c7:72:68:fa:dc:14:c2:74:06:bd:35:5f: 1c:b5:3a:b7:96:b6:2d:ac:fd:7e:6a:0f:97:59:1f: e6:5e:54:52:f0:42:4b:67:8e:a4:4c:1c:a3:5f:5c: bf:06:87:b6:0e:9b:92:96:10:04:13:e2:d7:05:01: d9:2d:e3:15:10:05:88:f8:5c:59:1e:10:a2:31:3d: 0a:66:48:35:fb:86:ae:b2:95:54:57:84:aa:eb:46: c5:19:b9:3e:d4:7b:5b:33:f2:bb:b1:52:3d:40:df: 02:66:6f:21:ba:30:e4:60:31:ba:a1:2d:21:06:a9: 31:b8:2f:8b:f9:e0:73:60:ac:95:1e:da:32:bd:94: 18:24:71:10:4b:e3:58:17:73:bd:70:ed:7d:2a:14: 11:fc:19:66:f0:d0:81:5a:e4:1c:56:ee:59:a7:06: be:97:3d:c4:71:94:5b:08:ce:ac:1b:db:3d:a7:33: 98:3c:b1:99:64:f2:a3:ae:2d:25:b8:21:59:33:51: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7F:A2:99:B4:1E:D7:1F:A4:E7:45:99:F4:D6:87:9B:42:1C:31:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:04:3d:d7:f5:9f:48:e3:dc:9c:bf:fd:62:32:01:2c:df:d3: c2:03:7f:0c:4f:f4:87:c5:58:c8:c8:f0:30:c1:e2:a8:e2:3a: ed:34:77:78:68:38:57:e6:1b:4c:2a:f5:93:85:10:a4:aa:cc: ac:7d:45:97:b4:d5:86:22:8e:9a:60:29:e6:7f:5b:d8:25:8d: 11:b5:35:a8:b8:bc:9d:8d:d7:28:5d:7a:fc:de:df:83:d4:20: fa:d3:9e:ac:4b:05:57:38:6b:96:c3:8c:ec:1d:65:d7:e2:f4: 0c:d6:ec:af:51:bf:51:17:93:ce:6a:39:37:1b:21:a2:da:c9: 48:5b:9a:85:5c:67:57:e7:33:47:b0:4b:30:2d:6a:8a:5f:f6: 72:31:c0:33:4d:db:8b:c2:d9:69:53:b6:5f:e2:a0:07:07:5c: 3d:fb:2d:81:25:8a:83:c1:41:79:a0:13:f8:d2:9d:af:bb:de: 4e:a4:57:89:35:32:d1:20:81:4d:77:66:30:95:b5:e0:8b:66: e2:f9:fc:e6:cc:ad:99:a3:f3:24:05:37:9d:cc:e0:f0:74:2f: a6:88:e8:12:df:f2:0a:8c:5c:7d:1c:31:9a:0d:a7:0b:63:b1: 19:18:5a:44:f6:a3:6c:f2:f1:e2:28:7e:cd:aa:75:d7:21:25: 35:1b:b0:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKXYkg5FrFix8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2VjMDQzNTAtNTY2Ny00NTMzLTlkNmItNzJiYjA5NjcwZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAATgN3P4qE+NO4BtfGWrX+d/hmqZdLRZkvS NoaXlOfZU9gHrHc+AT1niE8n3hi1zmSDibcLUdqtE+pJVhbHcmj63BTCdAa9NV8c tTq3lrYtrP1+ag+XWR/mXlRS8EJLZ46kTByjX1y/Boe2DpuSlhAEE+LXBQHZLeMV EAWI+FxZHhCiMT0KZkg1+4auspVUV4Sq60bFGbk+1HtbM/K7sVI9QN8CZm8hujDk YDG6oS0hBqkxuC+L+eBzYKyVHtoyvZQYJHEQS+NYF3O9cO19KhQR/Blm8NCBWuQc Vu5Zpwa+lz3EcZRbCM6sG9s9pzOYPLGZZPKjri0luCFZM1FcgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh/opm0HtcfpOdFmfTWh5tCHDHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMThhOTE2YjctYTU2ZS0z ZWE1LWE3ODgtMWYwZDA1MDBkNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMEPdf1n0jj3Jy//WIyASzf08IDfwxP9IfFWMjI8DDB4qjiOu00d3ho OFfmG0wq9ZOFEKSqzKx9RZe01YYijppgKeZ/W9gljRG1Nai4vJ2N1yhdevze34PU IPrTnqxLBVc4a5bDjOwdZdfi9AzW7K9Rv1EXk85qOTcbIaLayUhbmoVcZ1fnM0ew SzAtaopf9nIxwDNN24vC2WlTtl/ioAcHXD37LYElioPBQXmgE/jSna+73k6kV4k1 MtEggU13ZjCVteCLZuL5/ObMrZmj8yQFN53M4PB0L6aI6BLf8gqMXH0cMZoNpwtj sRkYWkT2o2zy8eIofs2qddchJTUbsMo= -----END CERTIFICATE-----Generated at Sat Apr 26 20:48:21 2025 by rpki-client