$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa File: 619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa (raw, json) Hash identifier: Lh4SFAcvbATu0rJNALZcViqxqp//O0Cbx+HcSOVVIn4= Subject key identifier: 3A:04:92:7E:36:72:AB:39:20:AD:E0:AA:CD:00:87:8A:22:FD:CC:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2D4373C0133FF1829A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2d:43:73:c0:13:3f:f1:82:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9eaa3abb-03a2-4f03-86a2-ae42c96b53de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:ce:e4:0f:68:2e:26:a9:fc:e0:07:b5:59: 24:5a:58:b1:43:99:97:b8:80:bd:6d:01:72:dd:e7: 54:91:a3:0d:3f:f3:f2:ba:0f:d2:74:5a:23:71:fd: 13:1f:6d:be:20:72:ca:a0:64:f3:26:8a:71:e9:b2: 6d:a5:93:e0:ea:a0:f9:32:df:42:27:34:33:1d:c5: 28:6d:54:61:7b:b7:00:af:09:32:a7:64:31:83:c3: c9:c1:1b:c0:c0:49:79:a9:1e:58:66:2d:85:e4:0e: 80:e1:cc:f7:b5:bd:a1:50:21:72:76:3e:18:62:2c: a2:cd:28:86:87:e7:cf:b8:4b:d7:67:a8:c1:3f:5d: 2f:5c:48:d3:e4:e2:1b:d3:e2:b3:ca:94:da:39:5d: 11:be:8e:11:30:0c:8a:3d:c3:fc:d8:6f:18:63:ea: a8:90:25:d2:08:28:4f:a3:7d:6b:fd:75:9f:b9:b2: 09:1d:db:0a:f5:23:c8:b1:30:ba:88:45:b1:3d:89: 97:a3:01:35:65:7b:8e:48:1a:75:42:0a:65:f6:d4: db:8a:98:03:f7:78:f8:a5:36:8a:20:63:49:a4:17: f6:ea:1d:46:3f:51:12:35:93:5a:41:3a:e0:a9:da: 52:6b:6b:e9:d8:d4:5f:ea:f0:bb:fe:ca:36:f3:98: 39:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:04:92:7E:36:72:AB:39:20:AD:E0:AA:CD:00:87:8A:22:FD:CC:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c5:d6:a3:71:c1:cb:77:b4:b1:22:f6:df:d4:82:1d:47:05: 6b:84:4f:00:7a:7b:a6:4b:d6:cf:5c:52:ee:98:da:ed:c6:c4: 81:d2:53:53:0f:15:ba:ab:bd:8e:16:24:17:1e:f2:42:b2:ac: e5:9f:0a:e8:bb:b3:a3:4a:52:e1:1e:7e:63:11:ec:a0:56:49: ae:9a:dd:0f:25:5c:5c:2d:c7:e2:df:91:cc:e4:ea:8e:ca:a4: 37:98:4a:ee:ea:4d:f8:79:26:32:33:6a:71:42:5d:3d:13:2b: 44:fe:1e:47:ea:6c:a5:57:9c:5b:78:05:8a:29:a9:66:15:5c: 3f:3c:40:11:72:fa:fd:a0:6d:64:73:29:0c:c5:0f:54:a1:ed: d6:d3:cd:aa:f9:a1:7a:4c:d9:28:a9:92:1d:95:ba:df:48:5f: 95:7b:5c:af:cf:a4:97:45:e0:1a:3e:4b:44:18:90:b8:0f:4b: 87:64:af:aa:c7:a7:f0:08:62:3e:91:ed:27:46:78:74:95:fc: 5a:04:00:de:db:05:bf:8e:c7:37:16:d9:cc:17:21:9a:cf:8b: d7:1d:af:5c:d5:d9:03:f8:ce:48:93:49:24:60:93:b7:06:e1: 17:c8:82:a0:94:94:98:05:2a:8a:44:13:2a:4b:d0:dc:e5:a4: 9d:d9:7b:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui1Dc8ATP/GCmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWVhYTNhYmItMDNhMi00ZjAzLTg2YTItYWU0MmM5NmI1M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzXO5A9oLiap/OAHtVkkWlixQ5mXuIC9bQFy 3edUkaMNP/Pyug/SdFojcf0TH22+IHLKoGTzJopx6bJtpZPg6qD5Mt9CJzQzHcUo bVRhe7cArwkyp2Qxg8PJwRvAwEl5qR5YZi2F5A6A4cz3tb2hUCFydj4YYiyizSiG h+fPuEvXZ6jBP10vXEjT5OIb0+KzypTaOV0Rvo4RMAyKPcP82G8YY+qokCXSCChP o31r/XWfubIJHdsK9SPIsTC6iEWxPYmXowE1ZXuOSBp1Qgpl9tTbipgD93j4pTaK IGNJpBf26h1GP1ESNZNaQTrgqdpSa2vp2NRf6vC7/so285g5AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoEkn42cqs5IK3gqs0Ah4oi/cyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjE5ZGJlMTUtM2M0ZS0z NDgzLTlkZDctZTVkYzA5ZjNlMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLF1qNxwct3tLEi9t/Ugh1HBWuETwB6e6ZL1s9cUu6Y2u3GxIHSU1MP FbqrvY4WJBce8kKyrOWfCui7s6NKUuEefmMR7KBWSa6a3Q8lXFwtx+Lfkczk6o7K pDeYSu7qTfh5JjIzanFCXT0TK0T+HkfqbKVXnFt4BYopqWYVXD88QBFy+v2gbWRz KQzFD1Sh7dbTzar5oXpM2Sipkh2Vut9IX5V7XK/PpJdF4Bo+S0QYkLgPS4dkr6rH p/AIYj6R7SdGeHSV/FoEAN7bBb+OxzcW2cwXIZrPi9cdr1zV2QP4zkiTSSRgk7cG 4RfIgqCUlJgFKopEEypL0NzlpJ3Ze3Y= -----END CERTIFICATE-----Generated at Sun Apr 27 09:17:46 2025 by rpki-client