$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa File: 2f20d531-3e0b-388f-9365-e78405e59dfd.roa (raw, json) Hash identifier: +qnLtGMdD24/sH5CjUmOQehNJ4ihlpJiFxJ79xIEHLo= Subject key identifier: D0:CA:D9:EA:A9:78:95:42:69:D7:E8:06:1D:10:6F:61:D7:5E:20:C7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2C5830DF7C59FEBEF480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.24.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2c:58:30:df:7c:59:fe:be:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d40de1e3-6dc4-4aad-a676-755099ee8bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ab:25:e3:7e:4b:ea:4c:12:06:1f:ff:df:9c: 87:87:23:12:fb:71:40:5d:64:bd:60:c9:81:4c:08: cb:36:79:34:8f:ff:25:b7:2b:ca:9c:6d:2c:b3:c9: eb:02:46:07:8f:05:88:55:81:05:25:b5:87:64:a6: da:18:b2:f0:a0:c2:5b:b7:a6:57:e0:ab:56:24:e8: fa:2d:d6:ac:34:83:64:77:eb:84:05:1b:d2:3d:d1: fa:41:21:3f:a1:2e:5b:ec:ab:c8:1c:69:51:69:dc: 63:43:df:2e:09:26:ec:5c:19:ee:89:d9:ee:a2:b2: f1:3b:e8:8a:e6:05:91:79:fe:75:b5:39:d2:0f:00: dd:2b:05:0e:18:59:83:22:e9:83:16:2b:e1:48:40: e6:1f:11:b5:e4:60:cb:13:6d:73:e7:a5:10:09:f3: d3:76:22:0e:00:53:b2:02:f1:e0:89:df:a9:08:0d: 20:5f:ba:7b:f2:20:73:b9:86:f7:a4:55:8f:f7:ac: 1b:d6:b3:21:f5:b8:43:72:99:06:91:b1:9a:40:7b: 93:f0:39:b0:d8:95:ac:ca:5f:ac:5f:4f:31:8a:ae: 2c:fd:d3:87:e6:93:44:b9:e2:c2:8a:36:97:d6:93: 6f:9a:e2:37:81:87:1a:bc:c7:78:42:9f:c1:a7:24: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CA:D9:EA:A9:78:95:42:69:D7:E8:06:1D:10:6F:61:D7:5E:20:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:80:73:68:a7:4b:45:5b:12:3a:7b:74:ec:ba:56:c9:1f:08: e0:da:2c:51:57:ef:19:9f:cf:eb:71:93:10:c5:45:ae:df:f9: 69:a0:25:de:77:d9:39:c5:8c:c3:d8:d4:cf:82:6b:3f:8b:04: cf:13:5b:17:d0:93:54:c6:35:b8:ae:8a:76:b3:ea:a2:0d:87: 86:93:36:e9:f7:32:a2:97:ed:f4:ab:f1:e9:46:2d:40:14:e3: d9:e0:ea:3f:c9:23:0b:bc:fd:77:c6:f4:f9:b6:5d:32:a6:f0: 0d:0b:f2:38:d6:7e:1f:c5:aa:e6:73:7c:63:ab:06:8a:a3:89: b7:9a:b6:f7:5d:2e:ab:19:d0:b0:91:32:75:79:7c:52:42:dc: bd:eb:06:a1:0e:9d:f3:98:ad:3e:c6:d3:7f:af:23:4b:56:38: 1e:98:48:c4:d4:c9:ef:58:d2:83:12:3b:06:eb:8b:db:c9:0f: ab:9b:1e:c8:2d:df:a2:92:8c:1c:29:51:ff:09:a4:62:7f:e7: 9a:db:9e:a6:b9:aa:1f:56:2e:5e:ec:d2:c3:9b:a6:20:2d:02: 38:c3:e7:ac:2d:03:e9:da:df:8c:d6:9f:db:e4:d5:c0:ac:2c: d7:9d:f7:1a:5c:ba:a3:00:44:9d:c3:d6:38:4e:f3:be:8a:ee: 40:8c:18:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuixYMN98Wf6+9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQwZGUxZTMtNmRjNC00YWFkLWE2NzYtNzU1MDk5ZWU4YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26sl435L6kwSBh//35yHhyMS+3FAXWS9YMmB TAjLNnk0j/8ltyvKnG0ss8nrAkYHjwWIVYEFJbWHZKbaGLLwoMJbt6ZX4KtWJOj6 LdasNINkd+uEBRvSPdH6QSE/oS5b7KvIHGlRadxjQ98uCSbsXBnuidnuorLxO+iK 5gWRef51tTnSDwDdKwUOGFmDIumDFivhSEDmHxG15GDLE21z56UQCfPTdiIOAFOy AvHgid+pCA0gX7p78iBzuYb3pFWP96wb1rMh9bhDcpkGkbGaQHuT8Dmw2JWsyl+s X08xiq4s/dOH5pNEueLCijaX1pNvmuI3gYcavMd4Qp/BpyQH4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDK2eqpeJVCadfoBh0Qb2HXXiDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmYyMGQ1MzEtM2UwYi0z ODhmLTkzNjUtZTc4NDA1ZTU5ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCAc2inS0VbEjp7dOy6VskfCODaLFFX7xmfz+txkxDFRa7f+WmgJd53 2TnFjMPY1M+Caz+LBM8TWxfQk1TGNbiuinaz6qINh4aTNun3MqKX7fSr8elGLUAU 49ng6j/JIwu8/XfG9Pm2XTKm8A0L8jjWfh/FquZzfGOrBoqjibeatvddLqsZ0LCR MnV5fFJC3L3rBqEOnfOYrT7G03+vI0tWOB6YSMTUye9Y0oMSOwbri9vJD6ubHsgt 36KSjBwpUf8JpGJ/55rbnqa5qh9WLl7s0sObpiAtAjjD56wtA+na34zWn9vk1cCs LNed9xpcuqMARJ3D1jhO876K7kCMGNM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:06 2025 by rpki-client