$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21659562-042a-30e6-94d6-1043ea4d61e5.roa File: 21659562-042a-30e6-94d6-1043ea4d61e5.roa (raw, json) Hash identifier: 5vyR4T+PVjuqkWyhQ8eQvh2tt31qBUepUPfN+3HUboc= Subject key identifier: D7:6A:68:F1:5E:C3:BE:CF:5C:DC:A7:0F:A0:38:88:33:DF:2F:23:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF57D33658494320FCF280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21659562-042a-30e6-94d6-1043ea4d61e5.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:57:d3:36:58:49:43:20:fc:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=eb86e85e-7caf-4d99-b73a-b9bf52aff77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:f1:97:09:a9:bf:8b:e1:7c:1a:13:87:d3: 1e:52:44:7b:81:88:a3:98:d2:92:a7:8e:ed:90:9c: 0e:2e:79:1b:30:fd:71:9e:41:71:60:8c:2f:0d:9d: 57:50:7d:ea:46:c7:4d:f8:c8:14:87:40:cf:f6:5e: 54:ab:2b:62:99:f4:c6:d4:80:70:09:6a:44:23:fc: 6a:63:e5:b2:37:f9:47:52:cd:98:18:45:21:54:88: 3b:5c:98:b1:fe:1b:8d:49:61:4c:a2:b5:de:29:7f: 5d:ff:d3:4f:ab:d5:6d:82:c5:de:ab:db:66:06:3a: 04:a7:ef:6d:26:61:13:2f:39:e5:74:d1:36:d8:92: a6:5a:29:99:97:b1:dd:f6:03:68:46:8a:c2:de:88: c0:35:6f:db:81:f5:cb:7d:5a:d1:87:0d:a5:e1:37: 94:1e:ab:89:76:8f:cd:68:d5:0c:5b:e1:9d:85:cd: 66:0d:15:1e:66:af:e4:68:fc:6f:22:30:5e:86:4d: 02:79:00:e0:eb:5b:39:58:e9:08:d2:ea:04:db:2e: 51:2b:1f:15:7b:13:92:76:f9:33:2e:73:8d:fc:f1: 00:fc:35:5e:88:9c:60:da:7d:4a:46:3c:de:3b:cd: 18:3b:3b:ab:5f:77:f0:42:db:b2:27:f8:a2:77:2f: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6A:68:F1:5E:C3:BE:CF:5C:DC:A7:0F:A0:38:88:33:DF:2F:23:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21659562-042a-30e6-94d6-1043ea4d61e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b7:67:4c:e4:f8:89:e7:05:72:67:89:e0:d7:e8:3c:45:49: 58:f9:04:c3:9e:35:e6:61:3b:87:c0:f8:99:2e:59:35:d6:e7: db:c1:3f:9c:2b:49:7c:da:2d:02:8e:1d:04:b5:ac:71:d9:7f: 9d:cd:ab:1a:55:70:40:23:f7:16:86:14:54:9e:2b:0d:63:32: 97:10:95:94:68:7c:de:46:c9:db:30:14:12:46:9f:91:af:df: 73:19:9b:9c:38:8f:39:84:58:30:0d:49:53:58:24:ef:ce:11: 9b:ff:e9:36:59:39:44:77:28:c4:15:8a:da:e4:1c:17:f2:03: 28:ba:55:8f:3e:c7:ec:59:d5:6d:bf:d7:08:48:8e:db:81:42: 22:6e:7f:02:ba:ad:0b:fa:b1:81:a9:5c:d3:10:78:67:e9:e3: 8e:fb:00:1f:78:36:b4:60:e5:03:c0:0a:a8:59:42:3a:11:02: 60:b3:67:59:e9:d0:9b:14:05:04:7c:70:4b:01:65:ee:1e:c9: 44:71:1f:f9:d6:0c:56:55:7e:8a:82:cd:fd:08:a3:81:e2:6c: df:73:bb:6b:17:ca:a9:1d:a9:80:e4:8b:e1:db:7e:f1:57:09: 1a:25:15:4a:ce:86:b9:b0:22:b8:52:36:78:13:c7:7a:e5:2a: 0b:37:b8:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71fTNlhJQyD88oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZWI4NmU4NWUtN2NhZi00ZDk5LWI3M2EtYjliZjUyYWZmNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7rxlwmpv4vhfBoTh9MeUkR7gYijmNKSp47t kJwOLnkbMP1xnkFxYIwvDZ1XUH3qRsdN+MgUh0DP9l5UqytimfTG1IBwCWpEI/xq Y+WyN/lHUs2YGEUhVIg7XJix/huNSWFMorXeKX9d/9NPq9VtgsXeq9tmBjoEp+9t JmETLznldNE22JKmWimZl7Hd9gNoRorC3ojANW/bgfXLfVrRhw2l4TeUHquJdo/N aNUMW+Gdhc1mDRUeZq/kaPxvIjBehk0CeQDg61s5WOkI0uoE2y5RKx8VexOSdvkz LnON/PEA/DVeiJxg2n1KRjzeO80YOzurX3fwQtuyJ/iidy/z0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdqaPFew77PXNynD6A4iDPfLyMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjE2NTk1NjItMDQyYS0z MGU2LTk0ZDYtMTA0M2VhNGQ2MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi3Z0zk+InnBXJnieDX6DxFSVj5BMOeNeZhO4fA+JkuWTXW59vBP5wr SXzaLQKOHQS1rHHZf53NqxpVcEAj9xaGFFSeKw1jMpcQlZRofN5GydswFBJGn5Gv 33MZm5w4jzmEWDANSVNYJO/OEZv/6TZZOUR3KMQVitrkHBfyAyi6VY8+x+xZ1W2/ 1whIjtuBQiJufwK6rQv6sYGpXNMQeGfp4477AB94NrRg5QPACqhZQjoRAmCzZ1np 0JsUBQR8cEsBZe4eyURxH/nWDFZVfoqCzf0Io4HibN9zu2sXyqkdqYDki+HbfvFX CRolFUrOhrmwIrhSNngTx3rlKgs3uAE= -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:20 2025 by rpki-client