$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bb006df-a700-36ad-a9ca-fcb4257aecb4.roa File: 4bb006df-a700-36ad-a9ca-fcb4257aecb4.roa (raw, json) Hash identifier: u17ShHmq533diN0y5byvhGRaSbbzc8Fv3Ryjf9vaoho= Subject key identifier: D0:4A:0F:45:7D:9D:93:10:0B:E3:E2:B2:FD:D0:A6:BD:FE:AA:7A:F3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784AE39AF96B254E21AF880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bb006df-a700-36ad-a9ca-fcb4257aecb4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ae:39:af:96:b2:54:e2:1a:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1a510047-3e85-4766-94f0-11eb29944b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5c:59:50:24:fd:1d:32:1b:09:c7:37:da:b6: c3:94:cf:39:58:84:96:5b:4c:72:38:25:b3:66:f4: 20:6c:d8:aa:af:ae:47:1e:50:3d:96:13:17:ab:22: 49:42:cb:97:30:35:1f:c7:34:39:f3:73:9d:57:16: a9:d0:96:ad:95:70:1a:46:de:1e:3a:e5:f4:60:9e: 05:44:d8:33:2a:e4:46:3c:07:f0:9e:cf:11:85:41: be:b2:90:0f:14:f8:91:ba:b0:66:f2:d6:46:2a:7c: d5:86:c9:8b:36:02:25:e8:1f:68:47:6a:6f:84:9f: cd:bc:32:d0:6a:72:79:6e:db:5a:25:25:ca:f3:a9: 3d:6f:ce:9e:c5:94:90:b4:40:0a:06:d1:15:6b:e5: ce:42:19:55:0a:73:29:bf:a0:bc:08:39:19:1c:a0: e5:31:2e:d1:f2:a0:e4:97:b1:37:cd:93:bc:ed:00: 1b:6c:6c:f1:25:2e:49:ca:7b:e6:b5:6f:6f:b5:dc: d5:ac:be:2b:a1:e2:4d:d2:8a:88:25:73:1c:a7:d5: b8:21:51:14:80:f9:d7:0d:c9:7e:d9:b5:88:eb:8f: 4b:d3:f4:0a:f2:e2:12:ed:1c:34:39:ee:03:f6:3e: e9:6c:b3:67:14:9b:1e:ab:3a:87:8c:67:6b:95:a8: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4A:0F:45:7D:9D:93:10:0B:E3:E2:B2:FD:D0:A6:BD:FE:AA:7A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bb006df-a700-36ad-a9ca-fcb4257aecb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ae:af:87:78:94:3c:b9:21:96:11:5e:42:f7:1e:e6:a8:76: 09:1c:2d:8f:22:78:26:c9:c2:e5:77:60:f0:f9:01:93:50:0c: 98:1d:74:e1:81:cb:ea:4f:59:9e:b0:97:fc:b5:d0:06:e3:79: 41:9e:4b:89:69:4f:f3:b2:75:20:2b:51:0e:76:b3:4f:cb:c6: e1:70:a9:3b:5d:ca:2a:85:ee:34:ff:a1:41:27:c5:8a:a1:9e: be:39:ad:ce:e3:11:90:0e:2d:a1:8a:fe:67:22:31:a4:7b:ae: 4b:ea:a6:23:8b:77:70:f1:8d:a0:66:47:0a:29:db:9e:b0:2c: 42:5f:40:78:48:59:1f:ac:f6:e1:a9:7a:65:ae:3b:af:50:83: d1:a3:56:71:73:99:15:00:c0:db:b8:ec:2c:42:02:a7:c0:52: b9:a6:c8:33:9e:78:2d:9a:ce:8c:b0:a9:3d:93:b3:c1:f4:25: 0e:0c:9a:79:23:e1:60:96:83:f0:09:ac:09:7d:73:b3:a8:b9: 4f:47:32:21:90:51:a7:f0:67:3d:b9:af:8e:79:d8:ab:73:e6: 28:ba:b5:ef:75:0b:4b:b8:1b:2b:30:9a:55:75:ab:5c:1d:52: 65:07:f4:6e:97:f6:d1:c4:e9:d7:f8:8c:15:9d:84:7a:90:8d: 64:b1:c9:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhK45r5ayVOIa+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWE1MTAwNDctM2U4NS00NzY2LTk0ZjAtMTFlYjI5OTQ0YjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VxZUCT9HTIbCcc32rbDlM85WISWW0xyOCWz ZvQgbNiqr65HHlA9lhMXqyJJQsuXMDUfxzQ583OdVxap0JatlXAaRt4eOuX0YJ4F RNgzKuRGPAfwns8RhUG+spAPFPiRurBm8tZGKnzVhsmLNgIl6B9oR2pvhJ/NvDLQ anJ5bttaJSXK86k9b86exZSQtEAKBtEVa+XOQhlVCnMpv6C8CDkZHKDlMS7R8qDk l7E3zZO87QAbbGzxJS5JynvmtW9vtdzVrL4roeJN0oqIJXMcp9W4IVEUgPnXDcl+ 2bWI649L0/QK8uIS7Rw0Oe4D9j7pbLNnFJseqzqHjGdrlajlDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBKD0V9nZMQC+Pisv3Qpr3+qnrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGJiMDA2ZGYtYTcwMC0z NmFkLWE5Y2EtZmNiNDI1N2FlY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuur4d4lDy5IZYRXkL3HuaodgkcLY8ieCbJwuV3YPD5AZNQDJgddOGB y+pPWZ6wl/y10AbjeUGeS4lpT/OydSArUQ52s0/LxuFwqTtdyiqF7jT/oUEnxYqh nr45rc7jEZAOLaGK/mciMaR7rkvqpiOLd3DxjaBmRwop256wLEJfQHhIWR+s9uGp emWuO69Qg9GjVnFzmRUAwNu47CxCAqfAUrmmyDOeeC2azoywqT2Ts8H0JQ4Mmnkj 4WCWg/AJrAl9c7OouU9HMiGQUafwZz25r4552Ktz5ii6te91C0u4GyswmlV1q1wd UmUH9G6X9tHE6df4jBWdhHqQjWSxyT4= -----END CERTIFICATE-----Generated at Sun Apr 27 02:03:15 2025 by rpki-client