$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0abd5f1-a9e6-3ba5-acf8-3a8445a4b7b0.roa File: b0abd5f1-a9e6-3ba5-acf8-3a8445a4b7b0.roa (raw, json) Hash identifier: 1gLP1XITDunc5dCQkHeKji54I3Z3X55lLLfZ93pCr3Q= Subject key identifier: CB:53:EE:A0:28:68:9E:C7:07:4E:E1:3A:48:47:5A:9A:6E:1D:B1:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B857D672D0E291374680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0abd5f1-a9e6-3ba5-acf8-3a8445a4b7b0.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b8:57:d6:72:d0:e2:91:37:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=88c97330-6432-41e9-a765-a3d7cc8a3307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:87:61:32:27:84:69:d7:ef:0c:af:ce:bd:24: ca:01:85:ea:16:d1:5f:e0:1c:11:bf:b0:5e:8e:98: 6c:93:80:a6:e6:e1:28:e1:6d:45:45:f6:64:38:56: 41:a1:40:b3:f9:24:4c:bc:8e:e8:8b:a2:96:d5:17: 2a:ae:6d:2c:6e:29:11:8d:df:03:9d:79:6a:11:8a: 58:9b:d2:b6:e3:8e:90:b8:aa:00:8f:28:21:54:d7: a1:42:96:ee:6e:3f:ae:f5:31:98:88:5a:63:4b:1f: 6e:32:7c:71:42:47:f9:c8:c3:ef:e0:b4:19:3f:aa: 31:cb:5f:dc:1d:74:dc:5d:43:82:56:a7:91:cd:59: c3:55:45:d0:e5:6e:e0:d1:bd:e4:02:81:4b:be:3a: 4a:57:2c:71:20:d5:57:66:9a:4a:12:b1:e4:92:16: 4c:5a:13:0d:fd:c6:e3:92:a0:56:4a:3d:b4:12:e5: 66:90:7d:84:26:0c:09:06:01:2f:0d:0c:34:3b:ac: 78:aa:65:62:f4:10:81:38:cb:9e:23:ab:6b:04:43: 0e:a9:18:db:b7:20:d5:f6:07:75:04:7c:ef:1c:8f: 0d:56:cc:4a:f6:64:f9:6e:bc:78:29:74:2d:90:ba: 81:5e:e1:a9:7c:6b:00:61:13:02:5b:c0:49:25:f9: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:53:EE:A0:28:68:9E:C7:07:4E:E1:3A:48:47:5A:9A:6E:1D:B1:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0abd5f1-a9e6-3ba5-acf8-3a8445a4b7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2b:e2:c2:0f:3b:e5:71:c6:f1:9d:ad:91:99:ec:1f:2e:63: 64:22:dc:7e:94:d5:63:8d:b6:56:ac:fa:4e:2c:e0:5d:9a:b7: 06:7c:8f:a6:7a:51:3d:2c:bd:55:27:17:52:ee:a2:ac:51:f2: 85:20:54:9e:4e:1d:6b:a9:c3:a7:7d:93:02:08:69:21:c1:bf: 0d:ee:60:ee:f6:af:35:12:ae:65:95:22:d1:9a:83:5c:b0:a8: c2:da:ad:39:df:3b:3b:c4:ff:16:ec:34:5a:38:1e:c6:58:67: 63:77:ad:eb:e1:bb:35:8b:db:e4:df:0e:9c:79:7d:c3:42:1a: 60:00:de:3e:30:09:e6:a7:20:e8:12:77:14:62:8d:2f:94:05: e5:88:36:b6:39:77:88:46:98:1f:f4:8d:72:c6:d6:9c:a3:97: 7c:cf:9f:5a:9d:93:04:8f:6b:ca:01:35:bc:2d:13:85:27:dd: 93:0b:20:e5:0f:6f:00:d1:ae:80:eb:e6:d4:1f:a5:e9:b9:63: d0:7c:da:9d:69:a3:24:ad:ca:0d:5f:31:21:f1:63:d6:b5:a7: 20:d9:0a:e8:ad:38:be:15:4d:25:d7:73:b9:ca:5e:a6:bd:8f: 24:06:f2:e6:3c:69:c9:fa:ac:a9:ca:f7:b6:a7:01:bc:69:26: 9f:46:fb:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLhX1nLQ4pE3RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODhjOTczMzAtNjQzMi00MWU5LWE3NjUtYTNkN2NjOGEzMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4dhMieEadfvDK/OvSTKAYXqFtFf4BwRv7Be jphsk4Cm5uEo4W1FRfZkOFZBoUCz+SRMvI7oi6KW1Rcqrm0sbikRjd8DnXlqEYpY m9K2446QuKoAjyghVNehQpbubj+u9TGYiFpjSx9uMnxxQkf5yMPv4LQZP6oxy1/c HXTcXUOCVqeRzVnDVUXQ5W7g0b3kAoFLvjpKVyxxINVXZppKErHkkhZMWhMN/cbj kqBWSj20EuVmkH2EJgwJBgEvDQw0O6x4qmVi9BCBOMueI6trBEMOqRjbtyDV9gd1 BHzvHI8NVsxK9mT5brx4KXQtkLqBXuGpfGsAYRMCW8BJJfmj0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtT7qAoaJ7HB07hOkhHWppuHbGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjBhYmQ1ZjEtYTllNi0z YmE1LWFjZjgtM2E4NDQ1YTRiN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsr4sIPO+VxxvGdrZGZ7B8uY2Qi3H6U1WONtlas+k4s4F2atwZ8j6Z6 UT0svVUnF1LuoqxR8oUgVJ5OHWupw6d9kwIIaSHBvw3uYO72rzUSrmWVItGag1yw qMLarTnfOzvE/xbsNFo4HsZYZ2N3revhuzWL2+TfDpx5fcNCGmAA3j4wCeanIOgS dxRijS+UBeWINrY5d4hGmB/0jXLG1pyjl3zPn1qdkwSPa8oBNbwtE4Un3ZMLIOUP bwDRroDr5tQfpem5Y9B82p1poyStyg1fMSHxY9a1pyDZCuitOL4VTSXXc7nKXqa9 jyQG8uY8acn6rKnK97anAbxpJp9G+/w= -----END CERTIFICATE-----Generated at Sat Apr 26 20:47:29 2025 by rpki-client