$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa File: bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa (raw, json) Hash identifier: 7rzdWNYssxlkNPI1yhSW6BLq6XJoubewY9DRmzAjQFQ= Subject key identifier: 78:5C:D4:A0:9F:2E:5E:F6:07:F6:C4:A5:42:25:96:CB:94:36:01:BF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2DD42B62B84F234922C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.30.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2d:d4:2b:62:b8:4f:23:49:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e2f5b3d7-4002-4e74-b5af-2a505364d420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:8d:63:1c:dd:f5:5f:3d:ee:27:21:7b:42: 4a:a7:bf:2b:be:39:7d:c6:16:4a:9c:80:f3:aa:5c: ee:a1:ac:c0:7e:9e:35:cf:8f:84:a6:21:0c:94:4e: ce:63:92:f8:a4:0b:06:4c:3f:c0:e1:b7:f7:5e:f6: a4:f2:af:3f:6c:7d:1a:e7:69:d6:ae:90:66:f8:cc: ae:7f:95:bf:e3:86:94:d5:37:f0:78:93:0c:8a:e7: ad:df:25:ee:69:93:e9:40:cd:5e:06:71:ba:d7:33: 28:85:c3:c2:de:91:04:a6:6f:71:3f:45:31:9d:41: b2:4a:68:55:29:42:73:6f:2d:cb:a7:43:7b:b6:91: 47:bb:7e:37:1b:57:76:94:b6:08:d3:a5:c0:ab:34: d8:8f:e5:58:9b:18:46:c8:54:ed:22:a9:74:d3:95: a0:93:44:20:70:b5:69:de:1f:56:30:d5:f4:cb:0f: 76:e3:52:7e:c7:ad:24:d5:7b:c6:b7:fb:99:ce:a9: 38:94:51:1f:bc:ce:28:95:72:46:a8:0b:f7:24:5e: 66:3b:b6:17:19:b7:a4:d2:2c:9e:06:f0:e4:d5:8b: 3c:4d:82:bf:74:01:cc:ed:cf:0f:2f:5c:90:9b:56: 93:5a:37:1c:25:b6:fc:c1:56:42:de:fc:c1:a3:37: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5C:D4:A0:9F:2E:5E:F6:07:F6:C4:A5:42:25:96:CB:94:36:01:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c5:44:88:8b:2b:fb:9a:1a:16:bb:dd:1f:54:87:a5:ce:6b: cf:95:f3:91:3b:1a:fa:32:dd:95:27:72:fb:56:d5:e0:44:82: 6c:02:b4:7d:95:8d:d7:6b:ab:32:4e:f5:ee:cc:ef:74:b1:2a: f8:c0:15:61:74:c7:f4:b7:1c:80:a5:66:bf:d8:55:b5:a8:71: 56:b3:d0:fd:39:cc:43:08:6b:6b:3c:93:4f:25:2c:05:f2:ef: d3:72:55:cd:37:7b:72:87:62:fe:53:76:6f:78:5e:c9:8b:34: f0:d2:a1:55:d8:a9:d1:c7:08:66:dd:83:e9:8d:db:01:a1:5a: 30:8a:2d:10:fb:78:4d:53:05:3d:f1:43:7d:cf:ae:2e:f3:3b: 3e:2c:f3:a3:af:b5:3d:e2:51:e9:e6:d6:6b:78:15:4c:53:f9: c7:84:8a:d4:6e:bc:5c:57:04:98:cc:60:dd:ab:8e:ec:ab:b9: 87:62:ee:9c:52:da:b2:fb:83:17:1c:d4:37:28:2f:76:9a:a9: 6e:19:b7:a0:20:f5:7f:01:09:4b:67:98:dc:bb:d9:e9:e4:6e: 70:b9:f9:d8:d3:1d:8e:5c:31:61:1d:57:41:39:73:2a:2f:0b: d8:c6:c6:e3:a7:ac:9b:dd:99:fc:d9:c2:60:a3:3f:fb:3c:d4: 42:bd:2e:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui3UK2K4TyNJIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTJmNWIzZDctNDAwMi00ZTc0LWI1YWYtMmE1MDUzNjRkNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8GNYxzd9V897iche0JKp78rvjl9xhZKnIDz qlzuoazAfp41z4+EpiEMlE7OY5L4pAsGTD/A4bf3Xvak8q8/bH0a52nWrpBm+Myu f5W/44aU1TfweJMMiuet3yXuaZPpQM1eBnG61zMohcPC3pEEpm9xP0UxnUGySmhV KUJzby3Lp0N7tpFHu343G1d2lLYI06XAqzTYj+VYmxhGyFTtIql005Wgk0QgcLVp 3h9WMNX0yw9241J+x60k1XvGt/uZzqk4lFEfvM4olXJGqAv3JF5mO7YXGbek0iye BvDk1Ys8TYK/dAHM7c8PL1yQm1aTWjccJbb8wVZC3vzBozfpjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhc1KCfLl72B/bEpUIllsuUNgG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRhNzIwZjYtZjFmZS0z YTdjLWJhMjctODIzZWZhNDU2Y2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDFRIiLK/uaGha73R9Uh6XOa8+V85E7Gvoy3ZUncvtW1eBEgmwCtH2V jddrqzJO9e7M73SxKvjAFWF0x/S3HIClZr/YVbWocVaz0P05zEMIa2s8k08lLAXy 79NyVc03e3KHYv5Tdm94XsmLNPDSoVXYqdHHCGbdg+mN2wGhWjCKLRD7eE1TBT3x Q33Pri7zOz4s86OvtT3iUenm1mt4FUxT+ceEitRuvFxXBJjMYN2rjuyruYdi7pxS 2rL7gxcc1DcoL3aaqW4Zt6Ag9X8BCUtnmNy72enkbnC5+djTHY5cMWEdV0E5cyov C9jGxuOnrJvdmfzZwmCjP/s81EK9Lkw= -----END CERTIFICATE-----Generated at Sat Apr 26 21:46:42 2025 by rpki-client