$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c6e671f-5a50-329a-8395-aa7a440f3342.roa File: 6c6e671f-5a50-329a-8395-aa7a440f3342.roa (raw, json) Hash identifier: luc4Fv7zeN8LoOLMmUi50t1p+JvovLxFCtpj7WmWVFU= Subject key identifier: 86:60:9B:C3:DE:CD:86:6E:AA:BB:EB:87:87:EA:BA:34:7C:0E:85:C3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1DF0D418B24F73581980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c6e671f-5a50-329a-8395-aa7a440f3342.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1d:f0:d4:18:b2:4f:73:58:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cea5ef9b-f78f-4e5d-a64a-9ff4637aeb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:d6:15:23:ed:29:69:d3:d6:eb:61:14:fd: 1e:db:0e:6f:bc:01:87:7a:f2:a4:8d:4f:53:e5:11: 17:8f:20:62:0c:73:b5:2b:05:97:90:2c:40:2c:01: 2a:2f:af:f7:31:88:e2:23:7d:55:32:85:f6:65:e1: df:ee:88:14:b7:b0:58:7a:61:56:7b:76:3a:65:6c: dd:eb:3b:91:1f:c6:4c:5a:85:c0:cb:a7:54:dd:e2: 61:06:af:e0:ea:4f:c6:83:72:5d:eb:7e:40:d7:54: 1d:55:a8:5c:64:8a:fd:c1:4f:10:db:c4:0c:9c:f0: 68:b5:52:3d:b9:cb:c9:89:24:ee:2c:0f:23:0f:b4: 2a:0d:a4:86:4a:13:79:29:a5:68:9c:cb:a6:cc:a9: 67:6b:d7:ad:34:e6:bb:43:61:0b:53:d8:f1:f1:27: 04:55:42:03:76:8e:6a:f0:e0:dd:45:2f:ac:f5:19: c6:63:92:c0:8a:cd:55:df:6e:12:20:bf:39:55:e9: 41:3d:92:6c:fa:2a:99:0b:aa:3f:da:64:d7:06:bb: 96:29:aa:b0:09:ca:15:c4:8d:ae:df:11:77:80:eb: c4:96:4d:a4:0c:5f:b2:28:af:f1:70:4c:8d:f5:a1: 78:19:12:c0:50:b6:8a:74:29:d4:ed:aa:ee:8f:07: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:60:9B:C3:DE:CD:86:6E:AA:BB:EB:87:87:EA:BA:34:7C:0E:85:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c6e671f-5a50-329a-8395-aa7a440f3342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:21:72:54:fe:ef:e9:3a:af:89:29:93:8f:8f:f9:23:40:de: f8:06:2a:3f:59:de:3a:25:d7:dc:b7:a6:be:78:50:93:19:05: 62:5e:40:d1:13:1b:a4:d8:da:1b:32:85:ff:ca:d6:7e:07:3b: 80:0d:ee:f3:49:b7:15:50:dd:a5:ca:26:a3:74:c8:13:84:e8: e1:43:e5:71:1a:93:ce:85:5e:25:de:12:71:58:3e:ce:39:c1: 16:25:fc:89:09:f8:be:fb:04:68:19:2b:de:2c:eb:81:b5:24: 75:c4:4a:59:a0:df:7d:4e:2c:9f:13:93:3d:2c:f2:cc:a8:93: 53:7c:ea:ca:10:29:50:fc:b0:e5:79:ca:8f:2b:3e:75:36:b1: d5:f7:c4:88:62:74:55:b4:21:39:82:fd:16:f7:06:4c:31:d8: 72:a5:f7:51:9e:4e:ff:f9:a8:e0:69:11:8d:03:60:1b:6d:42: ce:5e:0a:6d:1a:5b:79:e3:13:ed:c7:ba:ed:66:b0:c4:f2:fb: 46:84:db:f3:2c:d4:47:05:76:51:88:29:6b:3b:9b:87:33:38: b8:a6:16:90:b7:e7:a7:ef:43:bc:3f:c1:af:58:94:45:5c:6b: 29:84:76:f0:4c:57:28:9b:7f:4d:0f:b7:13:a9:0f:7b:b0:1e: 78:5c:97:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuh3w1BiyT3NYGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2VhNWVmOWItZjc4Zi00ZTVkLWE2NGEtOWZmNDYzN2FlYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliLWFSPtKWnT1uthFP0e2w5vvAGHevKkjU9T 5REXjyBiDHO1KwWXkCxALAEqL6/3MYjiI31VMoX2ZeHf7ogUt7BYemFWe3Y6ZWzd 6zuRH8ZMWoXAy6dU3eJhBq/g6k/Gg3Jd635A11QdVahcZIr9wU8Q28QMnPBotVI9 ucvJiSTuLA8jD7QqDaSGShN5KaVonMumzKlna9etNOa7Q2ELU9jx8ScEVUIDdo5q 8ODdRS+s9RnGY5LAis1V324SIL85VelBPZJs+iqZC6o/2mTXBruWKaqwCcoVxI2u 3xF3gOvElk2kDF+yKK/xcEyN9aF4GRLAULaKdCnU7arujwe5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZgm8PezYZuqrvrh4fqujR8DoXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmM2ZTY3MWYtNWE1MC0z MjlhLTgzOTUtYWE3YTQ0MGYzMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHohclT+7+k6r4kpk4+P+SNA3vgGKj9Z3jol19y3pr54UJMZBWJeQNET G6TY2hsyhf/K1n4HO4AN7vNJtxVQ3aXKJqN0yBOE6OFD5XEak86FXiXeEnFYPs45 wRYl/IkJ+L77BGgZK94s64G1JHXESlmg331OLJ8Tkz0s8syok1N86soQKVD8sOV5 yo8rPnU2sdX3xIhidFW0ITmC/Rb3Bkwx2HKl91GeTv/5qOBpEY0DYBttQs5eCm0a W3njE+3Huu1msMTy+0aE2/Ms1EcFdlGIKWs7m4czOLimFpC356fvQ7w/wa9YlEVc aymEdvBMVyibf00PtxOpD3uwHnhcl0E= -----END CERTIFICATE-----Generated at Sun Apr 27 21:33:43 2025 by rpki-client