$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa File: 79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa (raw, json) Hash identifier: Ug9WxgZTlWDfm6jem4qttuqT5BtQdnmL1DQTDVqv2q4= Subject key identifier: FF:92:C7:A5:0D:F6:0E:75:02:25:11:19:26:D5:79:42:E4:AD:9D:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BBC8BE3490EF57375C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:c8:be:34:90:ef:57:37:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=aeb54f99-8e0f-43cc-99f9-763d5b8d2763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:43:66:61:f6:2b:fe:c5:1c:07:ae:58:6c: 9f:46:30:a9:9e:3b:37:58:cd:18:1e:b4:cf:9a:76: 2c:2c:3b:6d:e0:79:d9:b5:0b:b3:7f:ea:c3:c1:3b: 36:85:fe:f8:91:22:65:2f:43:81:7d:02:3b:67:f9: 05:5f:ad:1f:cb:67:95:f9:76:a3:75:0f:4d:3c:6e: d0:1c:2a:75:85:5e:19:aa:9f:f6:69:77:10:b0:e9: 88:6c:50:12:5f:ad:1b:64:10:d0:40:c4:6b:9b:a1: 79:72:71:32:56:57:a7:35:91:8f:75:a8:52:55:32: d4:b9:b4:b3:c3:03:ab:78:05:82:1e:4e:46:ac:a2: 5b:37:d4:89:19:bc:d8:73:15:50:c7:63:f6:10:7a: 55:0b:16:61:10:59:92:43:51:16:21:3c:17:f0:9d: 3c:ab:d1:fc:d7:47:88:65:db:9f:70:b4:06:cc:62: 01:55:cc:75:27:65:b1:16:28:0c:d0:9b:f3:91:bb: 10:e0:64:fc:56:2c:60:f8:d7:bc:eb:24:27:90:cf: c8:1c:0e:58:49:0c:c6:9b:28:c1:2d:0c:92:ba:fb: dd:43:ec:50:37:a3:2e:89:11:81:7f:62:66:d2:3e: 6b:d5:40:f7:a2:82:45:a2:b7:75:07:5d:be:b0:e4: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:C7:A5:0D:F6:0E:75:02:25:11:19:26:D5:79:42:E4:AD:9D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:29:af:67:41:79:cb:09:3b:ab:a8:5b:4d:7d:b7:42:32:5f: f5:06:be:87:95:64:05:fd:b9:d2:ca:d9:34:64:80:d2:9f:86: b3:54:b0:86:fd:62:68:29:0f:06:75:3a:c6:e9:67:29:d0:b7: 1b:a7:10:61:8c:46:f6:d9:0b:04:50:bb:7a:72:58:08:b6:b2: 97:b6:de:ed:87:da:76:49:0e:2e:b7:b4:30:b2:12:2f:49:01: 05:cb:88:49:87:92:07:c9:1e:3f:60:00:95:e3:71:0f:69:3e: c2:73:d7:b6:31:0a:c9:c7:95:cb:71:54:d5:5e:f0:70:2a:34: f2:dc:20:aa:73:38:e0:f9:09:fd:b3:ea:f7:01:ac:51:81:4d: 1b:c3:19:e2:67:33:50:2a:5d:81:70:89:87:66:b7:09:d1:00: 7c:b3:d8:1c:b7:b7:f9:df:1a:f7:51:2e:5d:40:c9:a4:2b:25: 48:81:2a:bd:7e:95:5e:01:d8:89:d6:cc:a4:5e:f6:d2:98:b3: 5e:8f:0b:a5:90:07:eb:b8:dc:24:f3:c7:c9:a7:18:42:b2:ed: a1:f2:97:f7:89:ca:10:b6:29:fb:25:dc:3a:40:4e:1e:fa:5b: f4:21:43:37:2e:87:7d:8f:e7:f9:09:04:83:56:e2:72:3d:97: ad:f8:06:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLvIvjSQ71c3XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWViNTRmOTktOGUwZi00M2NjLTk5ZjktNzYzZDViOGQyNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjlDZmH2K/7FHAeuWGyfRjCpnjs3WM0YHrTP mnYsLDtt4HnZtQuzf+rDwTs2hf74kSJlL0OBfQI7Z/kFX60fy2eV+XajdQ9NPG7Q HCp1hV4Zqp/2aXcQsOmIbFASX60bZBDQQMRrm6F5cnEyVlenNZGPdahSVTLUubSz wwOreAWCHk5GrKJbN9SJGbzYcxVQx2P2EHpVCxZhEFmSQ1EWITwX8J08q9H810eI ZdufcLQGzGIBVcx1J2WxFigM0JvzkbsQ4GT8Vixg+Ne86yQnkM/IHA5YSQzGmyjB LQySuvvdQ+xQN6MuiRGBf2Jm0j5r1UD3ooJFord1B12+sOTwywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+Sx6UN9g51AiURGSbVeULkrZ0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzlkN2UwZWEtNThhNS0z YTA5LWE1MjktYTczZjFlZTFlNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYpr2dBecsJO6uoW019t0IyX/UGvoeVZAX9udLK2TRkgNKfhrNUsIb9 YmgpDwZ1OsbpZynQtxunEGGMRvbZCwRQu3pyWAi2spe23u2H2nZJDi63tDCyEi9J AQXLiEmHkgfJHj9gAJXjcQ9pPsJz17YxCsnHlctxVNVe8HAqNPLcIKpzOOD5Cf2z 6vcBrFGBTRvDGeJnM1AqXYFwiYdmtwnRAHyz2By3t/nfGvdRLl1AyaQrJUiBKr1+ lV4B2InWzKRe9tKYs16PC6WQB+u43CTzx8mnGEKy7aHyl/eJyhC2Kfsl3DpATh76 W/QhQzcuh32P5/kJBINW4nI9l634BuM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:40 2025 by rpki-client