$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa File: b4c2f46a-5c84-325b-befe-becef2227b02.roa (raw, json) Hash identifier: hLkymYFY0zNhnaWeh+eOBLkjJL+0vWScJmJ9xkSSKDs= Subject key identifier: 4C:72:F4:57:2B:B4:50:51:1A:5C:8B:10:BD:CF:DF:B1:00:74:34:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4F1FB2DFB94900D2E4C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4f:1f:b2:df:b9:49:00:d2:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=5601c73f-39ca-413b-af2d-4175a07242f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:3a:e8:a6:80:f7:1f:bd:87:5f:76:db:c6: af:85:85:8e:de:45:03:ca:55:8c:c1:8a:af:9e:a4: cb:63:c6:98:86:c8:9b:5e:2f:2d:8b:51:23:18:89: 7f:0a:ae:18:89:78:ca:41:42:49:5f:fb:bb:0c:f0: a4:be:9b:b8:a2:b2:b3:1a:2c:14:f0:78:24:4b:2b: 9b:67:de:b5:81:11:70:68:e2:9c:af:b0:bd:8f:3e: cf:f0:a1:bb:d2:8f:0e:d5:e9:cf:5e:c2:9b:d9:95: fc:a1:81:a1:de:f1:2d:e6:7c:25:8c:40:8c:1a:fa: f1:bf:9c:3e:b6:a4:bc:a3:4a:e8:2f:5a:06:f0:e0: 71:d1:05:19:c3:2b:d9:9f:fc:18:d0:06:75:34:52: 0d:4d:4c:79:c9:d8:4a:fe:45:9c:2f:cf:fe:4a:9d: d4:25:aa:25:7e:fb:41:71:55:fa:77:6e:da:57:19: f6:f5:26:28:42:70:65:53:c0:d1:e3:0b:ca:a9:58: b6:1e:5d:a6:36:5d:a3:9a:48:9b:98:59:db:ae:61: c0:11:4e:0d:09:47:77:af:8b:c8:a4:08:40:e5:7e: 8a:b3:04:6c:4a:d8:a1:ba:f3:79:75:5a:38:4f:a4: 85:9f:ef:92:c0:4d:8d:89:0c:de:b0:98:c6:d4:63: c2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:72:F4:57:2B:B4:50:51:1A:5C:8B:10:BD:CF:DF:B1:00:74:34:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:52:f0:a7:be:f7:52:3d:c4:a4:73:bf:b6:49:ea:73:26:d4: 9e:ec:86:87:e4:55:e8:9a:bf:a2:12:a2:fb:f1:3f:ea:b4:c9: 68:09:8f:b8:79:c1:91:d4:a6:3f:bd:bb:5e:c1:3d:0f:06:40: 22:f1:95:6c:6a:f7:a9:06:27:13:00:ba:64:c0:f9:c8:19:1b: 30:11:80:24:2c:1d:ba:41:bb:2f:dd:90:0b:92:67:4b:b1:69: 85:16:f8:25:95:38:2f:1b:a9:58:38:37:f1:37:a5:2d:5f:7f: dd:c4:b2:5d:b7:55:50:d9:7f:02:9e:12:5e:c8:fe:57:8c:c1: de:bf:0b:0b:19:e1:b9:d8:62:10:0f:c8:87:90:f8:c3:5f:0b: 8a:f6:55:52:b4:63:76:e1:b4:a1:70:88:03:b1:c4:4f:a8:73: 4d:32:aa:d7:f9:83:9b:48:29:62:59:58:aa:a0:69:31:70:29: 0d:37:5f:3f:b4:57:39:59:77:78:ba:39:b4:b0:7a:dc:c2:c4: e4:f9:79:4a:69:61:24:c0:bf:81:4e:88:10:11:46:c5:90:75: 58:41:19:d7:fc:53:d8:87:10:0a:6d:f7:8c:11:b7:37:33:52: 45:0f:eb:b8:3c:dd:bd:c8:da:62:5f:00:16:bd:59:30:69:24: 94:c6:1c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh708fst+5SQDS5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NTYwMWM3M2YtMzljYS00MTNiLWFmMmQtNDE3NWEwNzI0MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/466KaA9x+9h19228avhYWO3kUDylWMwYqv nqTLY8aYhsibXi8ti1EjGIl/Cq4YiXjKQUJJX/u7DPCkvpu4orKzGiwU8HgkSyub Z961gRFwaOKcr7C9jz7P8KG70o8O1enPXsKb2ZX8oYGh3vEt5nwljECMGvrxv5w+ tqS8o0roL1oG8OBx0QUZwyvZn/wY0AZ1NFINTUx5ydhK/kWcL8/+Sp3UJaolfvtB cVX6d27aVxn29SYoQnBlU8DR4wvKqVi2Hl2mNl2jmkibmFnbrmHAEU4NCUd3r4vI pAhA5X6KswRsStihuvN5dVo4T6SFn++SwE2NiQzesJjG1GPC5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExy9FcrtFBRGlyLEL3P37EAdDTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjRjMmY0NmEtNWM4NC0z MjViLWJlZmUtYmVjZWYyMjI3YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFS8Ke+91I9xKRzv7ZJ6nMm1J7shofkVeiav6ISovvxP+q0yWgJj7h5 wZHUpj+9u17BPQ8GQCLxlWxq96kGJxMAumTA+cgZGzARgCQsHbpBuy/dkAuSZ0ux aYUW+CWVOC8bqVg4N/E3pS1ff93Esl23VVDZfwKeEl7I/leMwd6/CwsZ4bnYYhAP yIeQ+MNfC4r2VVK0Y3bhtKFwiAOxxE+oc00yqtf5g5tIKWJZWKqgaTFwKQ03Xz+0 VzlZd3i6ObSwetzCxOT5eUppYSTAv4FOiBARRsWQdVhBGdf8U9iHEApt94wRtzcz UkUP67g83b3I2mJfABa9WTBpJJTGHFM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:55:15 2025 by rpki-client