$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa File: 45a4927d-04ce-3f81-aa78-438234fc318e.roa (raw, json) Hash identifier: VXpHYOhqGy2LPcDAuhCQVJmTV7okc0i5arCj3Tfk48w= Subject key identifier: FF:FE:5C:06:A7:A5:1C:F1:63:04:3E:F3:EC:F1:72:21:35:F1:97:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4AFBE627F0EC6A017800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4a:fb:e6:27:f0:ec:6a:01:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=e36bd4be-1fc1-47f7-b6c4-72291acc12a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:dd:2d:c4:67:bf:d8:75:11:27:cf:a2:58: 0e:3a:e4:b8:d7:b3:d4:3d:cd:48:39:dc:e1:c8:28: 2d:97:96:38:76:81:01:f8:aa:3b:a7:ad:5e:bc:42: 7e:b9:58:8c:4d:0d:2f:f0:3f:d2:45:fe:ed:b7:78: 45:36:e3:3e:3e:07:65:92:8a:b4:06:b8:6a:f8:51: c4:58:ed:b8:d0:66:38:64:ee:9d:46:f2:a9:20:a5: a7:59:7c:de:41:b2:3d:5c:fe:b4:eb:24:c6:d8:cc: 8e:0c:36:0c:a2:2a:88:38:cb:35:36:9b:54:24:90: 98:77:f8:39:f9:de:99:d6:c1:2a:97:77:57:c8:99: 96:74:83:ab:10:fa:5f:e9:4c:f8:a4:7b:aa:bd:d5: 44:a1:26:0a:da:ae:e3:3b:4f:c9:a8:09:da:3b:d0: d0:56:28:2a:9f:eb:04:89:d4:a1:d8:77:fd:42:51: 15:e5:70:4e:be:b3:42:12:85:42:1d:63:f4:83:54: 0e:74:6b:4d:f2:3f:c2:48:5d:82:64:78:3c:21:c7: 36:5c:8d:c4:cc:87:3c:fe:c1:50:b6:e7:50:1a:d3: e9:6b:10:d0:cd:25:66:66:10:d7:33:81:11:15:e1: a2:9a:4c:06:4e:4b:49:5d:16:c6:0f:6d:7d:2a:e9: 6c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FE:5C:06:A7:A5:1C:F1:63:04:3E:F3:EC:F1:72:21:35:F1:97:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fc:4e:fe:56:33:8a:f3:12:0e:ff:f0:10:80:00:99:21:71: 27:d6:e3:c2:72:75:31:fe:09:5e:01:b7:67:9f:1c:e8:59:9b: 55:df:a6:35:ae:9b:c4:c4:7b:57:7a:c6:86:d3:68:9f:b2:fd: 1c:da:48:4d:0e:27:0c:51:bd:50:0f:11:c7:ba:f8:89:f4:a0: cc:10:9a:a0:c3:11:89:56:85:c6:44:18:80:69:af:db:96:5d: 16:a6:81:57:23:51:28:3b:d5:38:7c:15:19:c8:31:37:7e:26: 97:d5:a4:5e:ce:f6:4f:0a:8c:73:4e:97:c8:53:00:9c:26:f3: d1:54:b0:6d:82:9f:17:08:82:90:56:4d:5a:c2:7d:65:7e:6a: 3f:36:f9:ce:19:3f:e8:21:6f:02:fd:7f:3f:e0:7e:f4:5a:4c: 53:19:a0:ae:87:2b:63:59:54:75:53:e7:eb:1a:68:f3:7c:34: 67:ba:5f:9d:cb:ba:46:36:68:89:24:01:12:a3:ef:e0:13:dc: fe:ed:bc:72:4a:85:9e:8d:2e:c6:a8:21:d5:4b:36:e0:6e:b6: fb:64:51:21:40:14:45:03:73:2e:23:bc:4b:04:fc:dc:86:a7: 26:4c:a1:bb:b5:89:7e:92:88:7a:6b:76:aa:d6:fd:75:8e:d8: 2e:ea:ef:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70r75ifw7GoBeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTM2YmQ0YmUtMWZjMS00N2Y3LWI2YzQtNzIyOTFhY2MxMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhjdLcRnv9h1ESfPolgOOuS417PUPc1IOdzh yCgtl5Y4doEB+Ko7p61evEJ+uViMTQ0v8D/SRf7tt3hFNuM+Pgdlkoq0Brhq+FHE WO240GY4ZO6dRvKpIKWnWXzeQbI9XP606yTG2MyODDYMoiqIOMs1NptUJJCYd/g5 +d6Z1sEql3dXyJmWdIOrEPpf6Uz4pHuqvdVEoSYK2q7jO0/JqAnaO9DQVigqn+sE idSh2Hf9QlEV5XBOvrNCEoVCHWP0g1QOdGtN8j/CSF2CZHg8Icc2XI3EzIc8/sFQ tudQGtPpaxDQzSVmZhDXM4ERFeGimkwGTktJXRbGD219KulsfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/+XAanpRzxYwQ+8+zxciE18ZcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDVhNDkyN2QtMDRjZS0z ZjgxLWFhNzgtNDM4MjM0ZmMzMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP8Tv5WM4rzEg7/8BCAAJkhcSfW48JydTH+CV4Bt2efHOhZm1XfpjWu m8TEe1d6xobTaJ+y/RzaSE0OJwxRvVAPEce6+In0oMwQmqDDEYlWhcZEGIBpr9uW XRamgVcjUSg71Th8FRnIMTd+JpfVpF7O9k8KjHNOl8hTAJwm89FUsG2CnxcIgpBW TVrCfWV+aj82+c4ZP+ghbwL9fz/gfvRaTFMZoK6HK2NZVHVT5+saaPN8NGe6X53L ukY2aIkkARKj7+AT3P7tvHJKhZ6NLsaoIdVLNuButvtkUSFAFEUDcy4jvEsE/NyG pyZMobu1iX6SiHprdqrW/XWO2C7q7xE= -----END CERTIFICATE-----Generated at Sun Apr 27 00:51:46 2025 by rpki-client