$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa File: 4012b844-3a80-373b-baff-3b6f69fb7a28.roa (raw, json) Hash identifier: 4GFfYuOaSZsu31wXGu0CsQV4C9p+Ly9yYLyvgmjcTpI= Subject key identifier: 24:C0:D0:78:9D:54:0D:FF:94:5F:B4:E6:FD:99:44:07:52:BE:3B:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2EA5FD70BBE277D97F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2e:a5:fd:70:bb:e2:77:d9:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6b0d3d22-1ac7-4996-a1e5-5fce456a1086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:12:5b:af:33:72:04:e4:cf:78:02:6d:75: 5c:a5:e2:42:9f:7b:2f:f9:34:01:33:59:d2:db:98: 16:4a:74:78:a3:95:48:a6:ae:ca:49:9b:62:ec:30: ec:69:cf:21:de:a1:28:2d:d5:89:7e:e1:c0:89:80: 4c:79:6e:ba:68:a5:a4:f4:0a:6c:61:53:f0:94:ba: 74:44:b9:4d:4c:3e:b2:75:fb:48:1f:a8:94:33:96: 3a:33:1e:51:8c:81:49:f7:14:eb:4f:44:4b:4a:24: 5a:cc:95:20:c2:53:c8:da:33:ea:dd:c1:10:3e:f5: d6:83:47:b1:ac:d3:3e:ca:c4:04:e7:c5:fb:38:cd: 60:49:a3:f1:4c:ff:8b:7f:5a:a3:e3:38:57:b8:2e: 69:e1:c1:48:be:5c:c8:7d:5b:fb:03:7c:3d:80:f9: 4e:52:50:c2:23:aa:ba:89:55:05:81:e8:e6:d0:7d: 40:0e:7b:37:cf:91:f0:73:28:8d:44:21:77:e9:bf: 58:e1:2f:82:51:0f:c3:11:47:02:98:ac:c5:9c:06: 86:60:c3:81:cf:f0:51:70:a7:6c:e9:80:55:35:23: ea:41:33:f9:92:5e:e6:e1:b5:8f:c3:b8:41:5c:54: ab:c5:70:29:62:69:59:c2:4c:ae:b7:7e:df:71:76: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:D0:78:9D:54:0D:FF:94:5F:B4:E6:FD:99:44:07:52:BE:3B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a2:00:6b:74:78:1e:7a:fa:26:60:22:33:53:14:fb:f1:88: 9c:fb:f2:7c:7c:3c:5f:d9:81:b6:ef:70:c2:ab:ad:db:53:30: 67:78:52:a3:42:61:6e:62:4a:8f:7d:e9:a2:b5:99:d8:b2:1a: 6f:45:67:a1:33:73:33:b0:e4:2b:96:12:b3:49:a2:43:28:1e: 12:87:11:91:7d:11:44:ed:26:1f:60:43:19:4f:6d:7e:89:bc: c8:c1:93:63:55:06:98:89:20:a0:ad:5c:09:08:dd:db:db:12: 98:f2:ec:00:ff:9b:d3:a6:f0:96:f9:d0:cc:17:a3:b6:06:52: ef:3e:ea:19:12:17:aa:80:45:d6:c2:17:d7:1c:93:4b:6e:3a: dc:e5:51:67:73:38:7e:6c:07:94:16:c4:d4:d4:4b:8c:86:a6: 5e:f4:be:21:dd:c5:c6:8e:7a:b9:f9:55:fe:05:a7:92:4d:0f: 09:c3:39:5b:3b:e2:64:37:c1:1b:be:10:7a:4a:db:70:69:6f: be:9d:82:87:7d:7f:33:fc:65:e6:b2:49:c9:27:66:40:73:03: 09:63:f5:0d:b2:4e:e9:d3:cd:b6:a7:57:b2:00:3a:3b:f6:f0: 4b:6e:d6:9f:3f:83:06:d6:4c:42:6f:07:68:0e:ab:ee:4f:b2: 98:e2:2a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui6l/XC74nfZf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmIwZDNkMjItMWFjNy00OTk2LWExZTUtNWZjZTQ1NmExMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiQSW68zcgTkz3gCbXVcpeJCn3sv+TQBM1nS 25gWSnR4o5VIpq7KSZti7DDsac8h3qEoLdWJfuHAiYBMeW66aKWk9ApsYVPwlLp0 RLlNTD6ydftIH6iUM5Y6Mx5RjIFJ9xTrT0RLSiRazJUgwlPI2jPq3cEQPvXWg0ex rNM+ysQE58X7OM1gSaPxTP+Lf1qj4zhXuC5p4cFIvlzIfVv7A3w9gPlOUlDCI6q6 iVUFgejm0H1ADns3z5HwcyiNRCF36b9Y4S+CUQ/DEUcCmKzFnAaGYMOBz/BRcKds 6YBVNSPqQTP5kl7m4bWPw7hBXFSrxXApYmlZwkyut37fcXbmrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTA0HidVA3/lF+05v2ZRAdSvjtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDAxMmI4NDQtM2E4MC0z NzNiLWJhZmYtM2I2ZjY5ZmI3YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6iAGt0eB56+iZgIjNTFPvxiJz78nx8PF/ZgbbvcMKrrdtTMGd4UqNC YW5iSo996aK1mdiyGm9FZ6EzczOw5CuWErNJokMoHhKHEZF9EUTtJh9gQxlPbX6J vMjBk2NVBpiJIKCtXAkI3dvbEpjy7AD/m9Om8Jb50MwXo7YGUu8+6hkSF6qARdbC F9cck0tuOtzlUWdzOH5sB5QWxNTUS4yGpl70viHdxcaOern5Vf4Fp5JNDwnDOVs7 4mQ3wRu+EHpK23Bpb76dgod9fzP8ZeayScknZkBzAwlj9Q2yTunTzbanV7IAOjv2 8Etu1p8/gwbWTEJvB2gOq+5PspjiKtQ= -----END CERTIFICATE-----Generated at Sun Apr 27 18:30:30 2025 by rpki-client