$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa File: c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa (raw, json) Hash identifier: 5nfbiFDruvXVICP8u4VlPiym5mNdn48RFyktiBl70IU= Subject key identifier: 8C:A0:99:66:42:9C:D2:8B:58:9F:84:F8:26:14:FC:E2:FB:72:77:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3D13DD48E8F2D5C35280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3d:13:dd:48:e8:f2:d5:c3:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8db907f0-0455-47c7-89e6-db84ff72440d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:93:d8:6e:7e:9b:3e:6b:3d:10:be:2e:75: e3:43:96:bd:6b:ba:3e:61:76:56:1d:70:8b:61:f4: b3:79:b8:90:f5:7e:97:31:cd:1d:b3:3c:da:a2:60: 65:f3:e6:c1:df:fe:b8:82:d0:f3:99:5f:ba:b4:b5: e8:33:e1:59:15:78:d2:45:6f:f7:46:7d:6e:e2:56: fa:9a:ce:2c:1e:24:ad:1d:e5:c4:40:05:c7:08:24: 21:22:1b:e1:dd:7f:a2:ae:15:32:33:90:e5:6e:2d: 82:fa:83:79:ac:31:e7:61:9f:96:72:89:da:0f:6c: e6:0b:bf:9d:a9:cb:af:e1:6f:d6:e5:4e:03:0d:41: 7a:0d:cf:b4:2f:dd:44:4d:3f:f6:27:4f:e5:ca:59: 4e:26:d2:ee:a7:3f:97:ac:ab:0e:0a:6d:e9:1d:c8: 2e:0a:e3:dd:f3:3f:c3:6c:22:f4:a1:1a:72:d7:22: 15:d7:0d:3f:66:dc:b1:65:4c:b0:2d:e1:df:c0:4d: d5:7f:b3:08:d8:e1:96:f8:d2:e6:cb:6f:89:99:f8: b2:cb:ae:0f:d0:cb:33:dd:a0:82:e8:d1:07:df:28: de:50:3e:49:df:8e:24:6b:47:e0:80:ee:83:86:31: 79:28:cf:14:3b:aa:a6:dc:81:c0:0c:13:6a:57:72: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:99:66:42:9C:D2:8B:58:9F:84:F8:26:14:FC:E2:FB:72:77:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:04:8c:b5:31:82:72:db:62:d1:8e:a1:75:49:45:13:db:54: af:45:0f:6d:cd:43:65:f3:8b:f9:f8:ae:bd:cf:ba:07:a7:0a: c2:4e:61:61:34:78:37:04:89:ac:7d:ee:02:7f:23:12:22:b7: cb:0e:b4:63:ec:6d:44:6b:01:6b:71:a9:58:42:75:b1:6c:8e: 88:22:b0:a3:66:fa:b8:c9:4a:14:20:cd:23:f2:40:fb:e5:d7: 5d:f5:8d:1b:94:da:22:dc:f8:6a:0b:65:f5:fc:3f:f9:a4:53: 24:78:b8:0c:e5:71:36:c9:9d:f1:83:ba:f5:2c:dc:b4:38:48: 10:e9:ad:d1:e3:d3:b9:0d:75:08:5e:69:10:29:79:20:c2:03: 8c:1c:b3:2d:da:aa:d0:fe:6c:0c:88:c6:f9:3c:3f:f5:07:6d: d5:89:6e:35:fa:c2:1a:f0:60:9e:1b:1c:d4:05:29:4f:d9:70: 3f:2a:06:03:06:dd:5e:2f:3b:34:9d:06:64:a6:50:59:be:e8: ca:7e:1f:24:83:ad:cc:45:6c:20:8f:9d:89:2c:63:8c:5d:d4: 5a:7b:d3:47:d9:d7:dc:ac:32:59:92:d2:c1:57:75:0a:df:dd: f1:44:48:98:5c:f9:35:97:21:83:94:e2:a0:7f:b0:d7:1d:9a: 56:80:9a:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj0T3Ujo8tXDUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGRiOTA3ZjAtMDQ1NS00N2M3LTg5ZTYtZGI4NGZmNzI0NDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCGT2G5+mz5rPRC+LnXjQ5a9a7o+YXZWHXCL YfSzebiQ9X6XMc0dszzaomBl8+bB3/64gtDzmV+6tLXoM+FZFXjSRW/3Rn1u4lb6 ms4sHiStHeXEQAXHCCQhIhvh3X+irhUyM5Dlbi2C+oN5rDHnYZ+WconaD2zmC7+d qcuv4W/W5U4DDUF6Dc+0L91ETT/2J0/lyllOJtLupz+XrKsOCm3pHcguCuPd8z/D bCL0oRpy1yIV1w0/ZtyxZUywLeHfwE3Vf7MI2OGW+NLmy2+Jmfiyy64P0Msz3aCC 6NEH3yjeUD5J344ka0fggO6DhjF5KM8UO6qm3IHADBNqV3IDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIygmWZCnNKLWJ+E+CYU/OL7cnfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzFmYTZmODYtNWM1Zi0z NWU4LWIwNTAtNGQwZDA4NjM1NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcEjLUxgnLbYtGOoXVJRRPbVK9FD23NQ2Xzi/n4rr3PugenCsJOYWE0 eDcEiax97gJ/IxIit8sOtGPsbURrAWtxqVhCdbFsjogisKNm+rjJShQgzSPyQPvl 1131jRuU2iLc+GoLZfX8P/mkUyR4uAzlcTbJnfGDuvUs3LQ4SBDprdHj07kNdQhe aRApeSDCA4wcsy3aqtD+bAyIxvk8P/UHbdWJbjX6whrwYJ4bHNQFKU/ZcD8qBgMG 3V4vOzSdBmSmUFm+6Mp+HySDrcxFbCCPnYksY4xd1Fp700fZ19ysMlmS0sFXdQrf 3fFESJhc+TWXIYOU4qB/sNcdmlaAmuM= -----END CERTIFICATE-----Generated at Sun Apr 27 18:23:17 2025 by rpki-client