$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa File: 8a8a1aef-d3c9-3407-be99-5421100118d0.roa (raw, json) Hash identifier: q1d4Mdad3QDod0s2ogp+2YTrxHAyzHhcwvE3/MFu3Aw= Subject key identifier: 6B:95:93:FC:D8:DD:49:D9:47:B3:69:21:E5:38:27:F9:6F:0C:F6:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849D9C4F84F6AF5F16A0D131F40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa Signing time: Wed 14 May 2025 13:01:03 +0000 ROA not before: Wed 14 May 2025 13:01:03 +0000 ROA not after: Tue 12 Aug 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.20.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:c4:f8:4f:6a:f5:f1:6a:0d:13:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 14 13:01:03 2025 GMT Not After : Aug 12 13:01:03 2025 GMT Subject: CN=18f5865a-d8fe-4f16-949b-d05eaac16b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:64:00:7c:d5:c7:1c:f1:2e:cf:f3:52:b9: ee:cb:3a:5e:c2:bc:23:fa:8f:cd:2f:e7:38:32:13: e2:14:1d:af:26:03:15:3f:c7:8d:9d:a2:7b:64:ed: f7:4a:cf:74:26:a2:0f:68:3b:97:c3:2e:0a:e0:5c: 29:e6:16:ed:e0:62:4a:2c:ae:82:2f:ff:00:31:08: 9b:c9:91:07:c1:b1:5a:62:b3:39:f2:74:bf:e4:74: 8a:6c:77:96:fb:6e:96:48:8d:e5:4e:f7:a4:17:df: 81:35:e6:af:ea:94:71:90:34:4d:77:3b:b1:c8:24: a6:6a:b8:32:62:fe:89:11:ee:51:a8:ed:b9:ed:16: 08:35:33:ae:9b:40:ec:68:33:2b:8c:cf:32:6d:b1: 6b:74:73:d1:71:fd:a3:17:03:bd:e5:23:a3:12:eb: 99:42:92:b8:70:f6:be:8a:b1:3b:57:f8:12:22:54: 11:d9:1b:ea:33:d4:72:30:06:c9:7e:e6:ec:9b:47: b0:95:f9:d8:80:20:58:23:f1:38:14:58:6d:e7:1e: e9:53:79:9c:46:a8:9d:08:f1:e6:a5:33:de:6f:38: 2d:25:0f:aa:f4:38:3c:5e:f0:70:24:ad:c5:32:6e: 58:c7:d6:53:85:06:ca:98:2b:f2:fe:7f:7a:c4:0f: e4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:95:93:FC:D8:DD:49:D9:47:B3:69:21:E5:38:27:F9:6F:0C:F6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:37:92:c3:5f:2d:01:5a:02:f5:ee:01:66:4e:b9:2f:4b:e8: 8c:0b:21:21:cb:ab:01:10:40:15:c5:87:52:c9:5a:37:77:c9: e5:6a:4d:ad:cb:87:3a:5b:30:2d:f4:79:52:bb:4a:b4:54:02: e1:36:2f:2a:34:c5:aa:51:da:15:64:ec:0c:30:c2:62:83:7d: 33:59:d3:dd:62:f5:0a:df:f7:bf:1f:d5:6a:46:14:2e:e3:34: fd:b6:3a:f4:bf:5d:76:a0:70:ba:26:ad:bd:8b:ee:ba:a1:c1: 38:3a:6f:d2:fa:64:40:d7:a2:d6:ac:bc:fd:c1:d8:be:17:03: 79:57:1b:e9:9b:50:68:48:b6:a2:59:c5:11:ee:9e:60:b0:bd: 4c:5b:06:40:cc:ce:bc:c6:19:b9:f7:a1:3e:fe:14:bc:f6:bb: fa:5f:02:1c:7a:35:21:24:98:f7:a7:65:14:56:c2:95:ef:15: 17:e8:92:4e:99:24:88:55:83:fc:df:62:11:2d:ca:31:71:f0: 1b:b2:47:1c:1b:5c:bd:b2:09:42:d3:0e:c4:c0:62:96:5c:1d: 04:a5:a0:f8:d7:4a:94:27:02:55:48:76:4a:8b:60:68:4b:d5: 86:a7:69:39:bc:da:97:63:65:38:58:19:ba:14:b8:13:9d:cd: 2e:78:79:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZxPhPavXxag0TH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk MThmNTg2NWEtZDhmZS00ZjE2LTk0OWItZDA1ZWFhYzE2YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu1kAHzVxxzxLs/zUrnuyzpewrwj+o/NL+c4 MhPiFB2vJgMVP8eNnaJ7ZO33Ss90JqIPaDuXwy4K4Fwp5hbt4GJKLK6CL/8AMQib yZEHwbFaYrM58nS/5HSKbHeW+26WSI3lTvekF9+BNeav6pRxkDRNdzuxyCSmargy Yv6JEe5RqO257RYINTOum0DsaDMrjM8ybbFrdHPRcf2jFwO95SOjEuuZQpK4cPa+ irE7V/gSIlQR2RvqM9RyMAbJfubsm0ewlfnYgCBYI/E4FFht5x7pU3mcRqidCPHm pTPebzgtJQ+q9Dg8XvBwJK3FMm5Yx9ZThQbKmCvy/n96xA/kAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuVk/zY3UnZR7NpIeU4J/lvDPYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGE4YTFhZWYtZDNjOS0z NDA3LWJlOTktNTQyMTEwMDExOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo3ksNfLQFaAvXuAWZOuS9L6IwLISHLqwEQQBXFh1LJWjd3yeVqTa3L hzpbMC30eVK7SrRUAuE2Lyo0xapR2hVk7AwwwmKDfTNZ091i9Qrf978f1WpGFC7j NP22OvS/XXagcLomrb2L7rqhwTg6b9L6ZEDXotasvP3B2L4XA3lXG+mbUGhItqJZ xRHunmCwvUxbBkDMzrzGGbn3oT7+FLz2u/pfAhx6NSEkmPenZRRWwpXvFRfokk6Z JIhVg/zfYhEtyjFx8BuyRxwbXL2yCULTDsTAYpZcHQSloPjXSpQnAlVIdkqLYGhL 1YanaTm82pdjZThYGboUuBOdzS54eVs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:53:40 2025 by rpki-client