$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5b8193f-bfe9-3c2d-9587-41a6f8059330.roa File: b5b8193f-bfe9-3c2d-9587-41a6f8059330.roa (raw, json) Hash identifier: lTbKa19lwGs4kiAwg1FYKIr/QnSYQq0tC+FuLH8DoRA= Subject key identifier: 41:91:16:E1:74:B5:B3:66:6D:C7:0E:71:5D:15:3F:4D:10:FD:6D:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C4881026535453AC4DDE20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5b8193f-bfe9-3c2d-9587-41a6f8059330.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.18.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:88:10:26:53:54:53:ac:4d:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=a467ea96-bf48-422c-8789-04b4f090817b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:61:9e:2b:8c:b6:ba:9e:9f:8e:54:1d:2d: 17:c9:f0:9c:d1:0f:03:fa:06:4f:0f:40:de:72:63: 94:25:e7:69:5d:47:be:76:9a:72:c7:5a:74:bf:a4: b8:b5:a4:55:13:5b:b0:77:26:20:9a:bb:41:2d:53: b8:bd:ab:15:fb:fd:f9:7d:39:ed:52:66:44:66:27: 42:03:a2:65:96:70:b9:86:5a:89:e7:e0:5b:17:50: a3:0f:05:9d:46:cc:17:85:af:a0:b7:88:e1:23:c7: 84:7a:7b:1e:73:2f:44:73:ce:f6:64:0f:a5:e7:07: bd:c0:58:b3:09:21:95:25:d1:a9:9b:52:ac:9e:a3: 70:01:89:0a:a0:56:8d:bd:44:a4:97:d5:fa:5d:44: 9f:6e:ae:33:fa:8e:e2:70:de:ec:62:8f:ca:b5:b4: 55:86:14:9f:77:a4:f3:91:4f:b4:d8:d2:54:15:90: 14:c5:59:6b:b3:d3:e2:d4:c5:a5:c7:5b:09:63:02: 6f:73:11:fe:c6:7f:bf:86:16:b3:74:65:39:70:bf: 29:8d:03:99:5f:c1:d8:e6:36:2b:91:a3:1f:ac:96: 52:95:7a:4d:f3:0a:20:88:28:0c:69:c6:d8:bc:82: b9:f9:2d:c8:6b:c2:ba:e2:94:3b:d4:b3:c8:36:c8: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:91:16:E1:74:B5:B3:66:6D:C7:0E:71:5D:15:3F:4D:10:FD:6D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5b8193f-bfe9-3c2d-9587-41a6f8059330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7a:8c:af:95:8c:f6:bd:03:cc:a0:fd:9d:4c:26:84:bb:fc: 22:cc:58:9e:94:ad:ca:2f:3a:80:50:37:50:d9:64:4b:d9:ac: 3c:55:a7:b6:c0:cd:1c:ba:f7:9f:f2:1e:b9:ce:63:6c:51:cd: c1:b5:d5:19:32:19:37:8d:aa:4b:84:a4:71:f6:19:f3:27:18: 20:5f:d8:a0:e4:ac:29:79:47:64:ed:c2:f7:e3:7f:70:10:b8: 9f:64:c5:cd:e5:e6:78:91:f6:de:1e:2f:2f:5f:c4:2f:8e:98: 23:9d:ae:7b:cf:ab:01:4f:4b:17:b7:60:e0:ac:38:4a:71:73: 9f:64:c5:7a:8d:9f:45:41:74:81:84:e4:c6:a5:ef:b8:dd:04: 55:85:5e:6b:29:6e:f8:f4:f9:39:66:4c:52:b8:d3:11:04:58: 25:50:05:11:36:3b:71:bb:58:e6:70:e2:1b:f5:3b:48:27:58: f9:6c:c0:22:f5:1e:ac:55:79:02:a8:35:9a:49:a3:ec:bb:3c: 9b:64:0b:7d:04:e9:1d:b1:2a:b3:7c:00:c6:c0:6a:ca:f9:c9: 92:1e:0f:9a:98:50:a9:cf:0f:2f:0c:a0:b7:02:ed:13:b6:88: ad:fc:4a:86:1c:6a:ed:8e:54:0c:6e:21:6f:81:34:d0:24:1f: 9e:ae:9f:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIgQJlNUU6xN3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YTQ2N2VhOTYtYmY0OC00MjJjLTg3ODktMDRiNGYwOTA4MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN5hniuMtrqen45UHS0XyfCc0Q8D+gZPD0De cmOUJedpXUe+dppyx1p0v6S4taRVE1uwdyYgmrtBLVO4vasV+/35fTntUmZEZidC A6JllnC5hlqJ5+BbF1CjDwWdRswXha+gt4jhI8eEensecy9Ec872ZA+l5we9wFiz CSGVJdGpm1KsnqNwAYkKoFaNvUSkl9X6XUSfbq4z+o7icN7sYo/KtbRVhhSfd6Tz kU+02NJUFZAUxVlrs9Pi1MWlx1sJYwJvcxH+xn+/hhazdGU5cL8pjQOZX8HY5jYr kaMfrJZSlXpN8wogiCgMacbYvIK5+S3Ia8K64pQ71LPINsjTRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGRFuF0tbNmbccOcV0VP00Q/W0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjViODE5M2YtYmZlOS0z YzJkLTk1ODctNDFhNmY4MDU5MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ6jK+VjPa9A8yg/Z1MJoS7/CLMWJ6UrcovOoBQN1DZZEvZrDxVp7bA zRy695/yHrnOY2xRzcG11RkyGTeNqkuEpHH2GfMnGCBf2KDkrCl5R2Ttwvfjf3AQ uJ9kxc3l5niR9t4eLy9fxC+OmCOdrnvPqwFPSxe3YOCsOEpxc59kxXqNn0VBdIGE 5Mal77jdBFWFXmspbvj0+TlmTFK40xEEWCVQBRE2O3G7WOZw4hv1O0gnWPlswCL1 HqxVeQKoNZpJo+y7PJtkC30E6R2xKrN8AMbAasr5yZIeD5qYUKnPDy8MoLcC7RO2 iK38SoYcau2OVAxuIW+BNNAkH56un0o= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:04 2025 by rpki-client