$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa File: c043170f-a250-3170-a4aa-5ad85a821236.roa (raw, json) Hash identifier: zZDyujVFeKhy7i2BeDh3H/6t+rreNzql3bqi6Zv+lHM= Subject key identifier: 49:FC:17:67:A7:F9:A4:87:1D:D0:4F:86:46:02:F9:92:16:03:B6:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA434DA2546730F8AF4580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:43:4d:a2:54:67:30:f8:af:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=92839eed-10e4-43b4-9b54-a1ad443bf53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:db:7f:05:48:96:25:de:1d:1a:58:9f:38: 18:40:1d:bc:a0:b7:af:42:37:70:f5:65:06:da:6c: 81:34:eb:bb:ef:42:7e:97:63:c4:60:ee:d4:44:b9: 78:0d:56:d4:f8:06:64:ac:ba:fe:87:f9:d1:8b:6d: 84:0a:6a:12:33:0d:66:a7:54:b0:ae:91:3a:cc:57: 45:69:09:0c:1b:87:15:f1:0b:77:b3:0f:63:da:2c: 03:09:72:e0:f8:7d:58:74:02:2d:e3:9f:69:27:ca: ca:ba:47:96:7a:d2:ee:e3:04:35:c1:a2:00:35:fd: f7:7d:8c:ed:a5:d0:b2:39:84:f0:b8:ee:d5:fd:d6: 65:52:70:7f:b2:17:32:9c:55:88:e8:04:e6:55:5b: 1e:fe:36:29:b5:ec:d1:fa:d3:ee:b7:0a:3c:5d:13: 4f:14:db:74:2d:2c:b7:b2:ac:ed:5b:80:1b:59:97: 4d:76:c7:7c:91:6a:22:e4:a6:d4:5e:d1:c8:d3:d5: 33:3c:c6:9e:e9:29:ec:8d:85:d5:d5:c7:67:a8:be: 3a:e5:c4:6c:0b:5d:b9:86:7f:ad:36:03:6b:e3:09: 63:59:4e:0f:86:c6:50:66:d1:5c:b9:3e:56:4e:1b: 32:7b:9c:c7:f0:de:c2:83:61:5f:03:48:4c:4f:a4: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FC:17:67:A7:F9:A4:87:1D:D0:4F:86:46:02:F9:92:16:03:B6:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e8:ca:3c:b0:99:72:29:d0:21:46:d6:4e:a5:7a:55:b0:00: fc:27:8c:d3:d1:fe:5f:07:f8:f9:54:ae:16:91:d2:99:08:f9: f3:97:8b:48:6b:bf:b0:3c:e5:3e:48:f1:50:67:73:ef:a6:53: bd:1d:0d:74:11:bd:b3:05:3d:bf:7e:4b:45:8e:26:f4:a7:9d: c8:e3:e3:1e:07:ad:16:4d:cc:7a:7c:01:48:2b:f4:e6:91:d0: 17:e7:56:7d:98:e4:da:9c:3b:cf:d5:cd:98:d1:a2:c1:cb:cd: 63:d7:ba:19:8d:b7:41:73:a8:d9:f0:4e:0e:07:26:2b:02:21: 1f:3c:1e:18:cf:79:9a:1d:8e:0d:30:97:99:4c:dd:34:16:15: 9c:2f:cb:4c:c5:f3:09:91:e1:ce:81:e2:1f:30:32:7c:a3:3d: ac:8a:9b:ec:af:1d:c6:65:d4:94:40:b9:5c:69:db:a4:d8:c1: 8e:cb:39:64:01:b4:0e:02:11:fe:85:71:f0:7b:a5:78:d7:87: b8:c0:1f:15:c1:78:26:d3:0f:8b:e2:0d:e5:18:5d:da:8d:55: e0:20:8d:c8:99:c2:d9:16:e5:6b:1d:ef:f0:94:c4:a2:d7:72: 3e:e0:9e:e7:cb:4d:5d:3d:c8:d9:ff:79:24:0d:44:9d:cf:b7: d0:6b:71:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukNNolRnMPivRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTI4MzllZWQtMTBlNC00M2I0LTliNTQtYTFhZDQ0M2JmNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllzbfwVIliXeHRpYnzgYQB28oLevQjdw9WUG 2myBNOu770J+l2PEYO7URLl4DVbU+AZkrLr+h/nRi22ECmoSMw1mp1SwrpE6zFdF aQkMG4cV8Qt3sw9j2iwDCXLg+H1YdAIt459pJ8rKukeWetLu4wQ1waIANf33fYzt pdCyOYTwuO7V/dZlUnB/shcynFWI6ATmVVse/jYptezR+tPutwo8XRNPFNt0LSy3 sqztW4AbWZdNdsd8kWoi5KbUXtHI09UzPMae6SnsjYXV1cdnqL465cRsC125hn+t NgNr4wljWU4PhsZQZtFcuT5WThsye5zH8N7Cg2FfA0hMT6RMHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn8F2en+aSHHdBPhkYC+ZIWA7Y+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzA0MzE3MGYtYTI1MC0z MTcwLWE0YWEtNWFkODVhODIxMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfoyjywmXIp0CFG1k6lelWwAPwnjNPR/l8H+PlUrhaR0pkI+fOXi0hr v7A85T5I8VBnc++mU70dDXQRvbMFPb9+S0WOJvSnncjj4x4HrRZNzHp8AUgr9OaR 0BfnVn2Y5NqcO8/VzZjRosHLzWPXuhmNt0FzqNnwTg4HJisCIR88HhjPeZodjg0w l5lM3TQWFZwvy0zF8wmR4c6B4h8wMnyjPayKm+yvHcZl1JRAuVxp26TYwY7LOWQB tA4CEf6FcfB7pXjXh7jAHxXBeCbTD4viDeUYXdqNVeAgjciZwtkW5Wsd7/CUxKLX cj7gnufLTV09yNn/eSQNRJ3Pt9BrcQ8= -----END CERTIFICATE-----Generated at Sun Apr 27 02:25:20 2025 by rpki-client