$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa File: bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa (raw, json) Hash identifier: bVinbuM6FnexEzl40jO8nF2No3C7krHRmdsUFaHaCL8= Subject key identifier: A8:F9:39:12:85:C9:59:80:EA:84:50:16:E5:90:24:29:FF:E4:77:71 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1FB4EBD7B3B40CF40A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1f:b4:eb:d7:b3:b4:0c:f4:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bb7a74fc-21a3-4085-96ff-6d673402cc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:c1:a6:8c:b9:4a:52:a9:5c:67:53:30:eb: 41:d0:9c:f5:d4:a2:1c:f7:39:af:69:68:f2:f5:52: 9a:cc:13:35:79:47:67:30:bb:60:ae:0d:eb:ee:cd: eb:49:51:87:75:7e:5e:16:e0:da:dd:61:d6:0e:b6: 84:9d:4c:3f:f5:11:10:ce:64:1c:a1:86:1a:82:1c: 56:cb:65:6f:7a:d3:85:61:54:7a:4a:39:41:bb:53: 30:89:b2:19:22:17:b4:d1:41:99:b8:fc:d6:b9:a0: ee:92:65:ee:39:51:a0:fc:39:32:f5:53:40:e9:16: 20:78:b0:e8:d5:a5:b9:0d:de:5e:86:eb:99:f0:51: c2:ac:02:b4:82:64:28:d5:0b:b6:54:45:78:6a:41: f0:3b:72:8f:62:75:5d:f3:54:1b:ab:2a:81:79:07: c8:07:4a:8b:27:35:4c:7b:0f:05:9f:c6:72:ae:ca: 15:d1:dc:8b:74:57:88:4f:1c:1a:3c:0a:f9:62:e7: 49:8c:fb:8d:96:87:6f:9f:a6:9e:ac:ca:e7:55:a9: 4c:d2:1d:77:d4:b3:f7:f5:6f:df:0c:81:fc:ec:c7: 6d:0b:3a:24:6b:66:10:5b:cf:89:94:6e:7e:84:72: 09:48:2a:a5:f2:cd:42:e7:72:db:7f:a0:bd:79:e5: b7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F9:39:12:85:C9:59:80:EA:84:50:16:E5:90:24:29:FF:E4:77:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:09:4d:5f:ce:57:89:4a:e2:58:d8:06:46:48:93:0c:a1:08: 98:5e:07:f7:4e:1b:28:7c:67:1b:61:fd:44:93:38:ea:0c:4b: 47:9b:0d:54:48:85:bc:1e:88:7b:9b:d8:6a:17:37:5b:8b:88: 84:c9:37:4e:67:31:ff:b4:aa:a5:2c:67:64:06:a3:1a:3c:7e: d0:7b:a8:e1:f6:0e:75:48:6a:08:b3:43:95:41:80:cb:c4:e1: 48:6f:49:f0:71:35:b1:75:de:ee:90:62:cf:4f:9c:2f:38:e6: 79:d9:10:ae:f5:71:1b:b2:62:10:32:7f:f8:4b:46:3c:0d:5a: e3:26:c1:e4:0c:32:80:be:df:02:47:4f:db:66:c2:32:37:e1: 3d:13:0d:bd:df:ec:92:c6:1c:5b:05:8d:0d:00:24:51:09:ed: f0:5a:2e:d6:0e:e8:88:3b:d0:55:30:e7:53:de:97:9f:f5:7d: c2:54:5b:c9:a9:46:0a:76:d8:46:ea:f3:ab:fa:99:68:89:6c: 41:1b:e0:ae:ee:27:23:ac:5c:72:3a:ae:24:80:3f:42:0b:65: 4a:e7:83:91:3c:f7:a3:dc:0a:c1:d2:b8:3b:aa:f9:92:7e:8f: a5:e8:45:e1:12:1f:57:a9:c5:64:56:ad:86:40:88:af:23:66: 2e:cc:bb:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuh+069eztAz0CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmI3YTc0ZmMtMjFhMy00MDg1LTk2ZmYtNmQ2NzM0MDJjYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mrBpoy5SlKpXGdTMOtB0Jz11KIc9zmvaWjy 9VKazBM1eUdnMLtgrg3r7s3rSVGHdX5eFuDa3WHWDraEnUw/9REQzmQcoYYaghxW y2VvetOFYVR6SjlBu1MwibIZIhe00UGZuPzWuaDukmXuOVGg/Dky9VNA6RYgeLDo 1aW5Dd5ehuuZ8FHCrAK0gmQo1Qu2VEV4akHwO3KPYnVd81QbqyqBeQfIB0qLJzVM ew8Fn8ZyrsoV0dyLdFeITxwaPAr5YudJjPuNlodvn6aerMrnValM0h131LP39W/f DIH87MdtCzoka2YQW8+JlG5+hHIJSCql8s1C53Lbf6C9eeW38QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj5ORKFyVmA6oRQFuWQJCn/5HdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFlODJmMzctNjA4Yi0z ZjJlLWIwZTQtYzAwYWQ3MTA2YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkJTV/OV4lK4ljYBkZIkwyhCJheB/dOGyh8Zxth/USTOOoMS0ebDVRI hbweiHub2GoXN1uLiITJN05nMf+0qqUsZ2QGoxo8ftB7qOH2DnVIagizQ5VBgMvE 4UhvSfBxNbF13u6QYs9PnC845nnZEK71cRuyYhAyf/hLRjwNWuMmweQMMoC+3wJH T9tmwjI34T0TDb3f7JLGHFsFjQ0AJFEJ7fBaLtYO6Ig70FUw51Pel5/1fcJUW8mp Rgp22Ebq86v6mWiJbEEb4K7uJyOsXHI6riSAP0ILZUrng5E896PcCsHSuDuq+ZJ+ j6XoReESH1epxWRWrYZAiK8jZi7Mu+U= -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:46 2025 by rpki-client