$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa File: a71b911c-6645-3ed7-91de-4999d41633e7.roa (raw, json) Hash identifier: /7c6bRzNiFHwtFAeIAeMqTJjmZLCoMFOnIWYwwjZCus= Subject key identifier: 78:DE:12:BC:D9:E1:14:33:06:DB:BE:BA:A2:58:7E:3E:17:08:BB:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA175D9755182E2E571C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:17:5d:97:55:18:2e:2e:57:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4b475bcf-48a1-4b01-8057-cca3651fb94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:d8:8b:65:5f:cc:ec:ca:33:87:dc:ab:9a: ec:e0:54:e2:9a:42:fc:93:3c:cc:ce:bc:c6:1b:7c: 60:c1:d7:e1:b5:f5:68:e5:eb:9e:12:68:a1:e3:6f: 7e:7e:41:e5:d6:9d:51:ef:bd:48:f6:73:29:33:d8: 74:14:52:ae:3a:06:e4:0d:4b:11:d2:9f:8d:2a:3d: 6a:92:18:a7:c2:c4:ea:4f:5e:6c:f3:2a:d4:37:d2: 95:4f:0c:b3:79:27:6d:0c:e5:39:e7:33:7b:2d:2f: eb:06:5e:1e:1d:3f:01:dc:7f:93:66:9c:64:d5:83: aa:a0:5c:d3:34:a0:5f:82:8a:e6:48:cf:8c:16:15: ba:0e:17:e6:db:7d:3a:a3:7e:9f:86:a6:d8:2a:90: 82:b4:72:c6:f3:12:01:f3:14:fe:3e:47:79:d2:17: 45:b0:74:de:9b:aa:8f:e4:81:08:d1:d2:76:cf:7a: 51:29:f4:6d:56:ad:92:b5:37:c4:d1:85:e0:bd:77: fe:c8:bf:ec:39:ef:33:4b:f8:d2:01:e6:ae:84:81: be:78:f6:26:07:87:40:00:e4:76:e1:c4:50:37:82: f2:ec:cb:ef:37:14:d7:87:5e:07:19:a0:2e:0c:b6: 3e:dd:c4:53:4c:c8:02:3a:78:d5:65:2a:82:0e:3c: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DE:12:BC:D9:E1:14:33:06:DB:BE:BA:A2:58:7E:3E:17:08:BB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:65:a2:ac:f2:55:53:63:15:2c:23:e7:98:1f:53:cd:b3:bc: 3d:af:b0:b4:36:fe:4e:56:5e:d1:ec:62:a2:b1:5a:2a:e7:55: 06:cf:27:63:ab:4e:87:e9:14:64:3b:cb:40:82:e1:36:f0:c7: 49:e5:d0:2b:47:4a:3d:54:98:d3:7b:7c:19:be:78:dd:a0:1e: cc:ea:a0:d5:92:f0:62:44:05:d7:5f:0c:de:e8:c7:f1:ae:24: 49:a1:ba:70:55:49:f7:55:ac:fd:8e:b7:80:a0:6e:2f:ca:fe: d4:6a:41:9b:21:14:5d:db:7a:dc:0d:68:54:4d:88:36:35:b8: 91:a6:37:32:58:05:36:4a:ae:c1:b9:32:bd:b6:a7:96:1a:26: 0a:e7:44:eb:71:cf:52:7e:f7:65:0c:d6:e3:a5:b9:79:fc:14: 16:1c:fb:95:c4:c9:4d:32:63:a5:12:0d:9c:68:9d:4e:09:f8: e6:4e:0a:6e:29:7d:32:c3:81:a5:9e:4a:14:39:65:df:5b:81: 39:9c:52:14:69:0f:5d:ac:cc:fe:9d:17:66:03:a9:f2:3d:5f: da:86:57:15:eb:ca:b7:81:4e:8a:5d:41:ce:a6:16:ab:99:32: 39:e4:7e:20:12:4e:50:5d:bc:d8:6d:40:c7:c7:90:3c:a7:7e: f1:5e:d6:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhddl1UYLi5XHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGI0NzViY2YtNDhhMS00YjAxLTgwNTctY2NhMzY1MWZiOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJLYi2VfzOzKM4fcq5rs4FTimkL8kzzMzrzG G3xgwdfhtfVo5eueEmih429+fkHl1p1R771I9nMpM9h0FFKuOgbkDUsR0p+NKj1q khinwsTqT15s8yrUN9KVTwyzeSdtDOU55zN7LS/rBl4eHT8B3H+TZpxk1YOqoFzT NKBfgormSM+MFhW6Dhfm2306o36fhqbYKpCCtHLG8xIB8xT+Pkd50hdFsHTem6qP 5IEI0dJ2z3pRKfRtVq2StTfE0YXgvXf+yL/sOe8zS/jSAeauhIG+ePYmB4dAAOR2 4cRQN4Ly7MvvNxTXh14HGaAuDLY+3cRTTMgCOnjVZSqCDjzGawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjeErzZ4RQzBtu+uqJYfj4XCLt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTcxYjkxMWMtNjY0NS0z ZWQ3LTkxZGUtNDk5OWQ0MTYzM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlloqzyVVNjFSwj55gfU82zvD2vsLQ2/k5WXtHsYqKxWirnVQbPJ2Or TofpFGQ7y0CC4Tbwx0nl0CtHSj1UmNN7fBm+eN2gHszqoNWS8GJEBddfDN7ox/Gu JEmhunBVSfdVrP2Ot4Cgbi/K/tRqQZshFF3betwNaFRNiDY1uJGmNzJYBTZKrsG5 Mr22p5YaJgrnROtxz1J+92UM1uOluXn8FBYc+5XEyU0yY6USDZxonU4J+OZOCm4p fTLDgaWeShQ5Zd9bgTmcUhRpD12szP6dF2YDqfI9X9qGVxXryreBTopdQc6mFquZ MjnkfiASTlBdvNhtQMfHkDynfvFe1uA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:08:07 2025 by rpki-client