$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa File: cfe0f1f3-45a3-365b-948d-b553e267569c.roa (raw, json) Hash identifier: j/O2B9izNOq+e/5DIwpBuoiMTuQ2paTciR9YCTFG/Ls= Subject key identifier: 24:AF:49:40:4A:0C:EC:3E:74:DD:AD:BE:E5:0D:E0:D7:D8:15:42:05 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3F538D37FB78FB47BB20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3f:53:8d:37:fb:78:fb:47:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=287eccd0-6698-4124-96a9-c2dd79f50c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fb:b5:dc:d3:59:2a:a2:ea:2e:e9:68:a2:dd: 0f:a1:02:00:9d:57:57:87:81:ca:22:c8:51:67:e6: 81:92:1c:44:09:32:bd:e8:0b:f0:66:52:4f:69:ae: ba:2a:22:d6:10:71:86:90:98:8e:51:cb:f9:23:f1: e2:05:1e:bb:92:a0:00:16:48:a0:a5:1b:db:71:9c: 42:e9:4a:9a:50:74:2a:54:44:f0:f3:74:68:e9:34: b6:47:8d:52:96:52:5a:3e:fe:c2:f9:b4:5f:cf:2b: ff:11:41:5d:e4:da:0f:9a:b3:63:33:a5:b1:8b:74: 2e:62:f3:08:53:fb:0a:65:4b:bd:c0:18:08:29:bb: aa:80:f5:d5:d5:03:03:80:6c:f9:af:8c:57:84:f9: 3c:09:ba:2f:e0:3b:8f:51:f3:95:0c:25:76:35:7e: a5:ba:31:77:1c:32:a6:b3:c3:24:d8:5a:67:ee:9a: db:eb:92:6c:b7:31:b0:98:7e:a7:35:b6:20:c4:99: 19:51:44:d6:78:21:f7:d9:91:c3:7c:ef:e4:02:c8: f8:12:b3:18:96:8c:35:ff:99:56:f2:db:79:94:33: 35:65:7e:42:4d:9e:b3:df:ad:c3:c5:a1:39:ad:bf: 51:af:74:3a:40:29:1c:8e:69:44:8f:c8:56:73:80: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AF:49:40:4A:0C:EC:3E:74:DD:AD:BE:E5:0D:E0:D7:D8:15:42:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c9:30:22:10:4b:4c:e4:10:77:28:41:f4:d6:35:1e:1a:fd: 16:07:89:79:94:cc:78:b4:84:23:05:14:83:48:5e:69:39:ac: da:ff:19:a4:5b:cf:3c:df:79:67:30:b0:a5:8f:58:78:08:15: ab:36:44:83:02:9e:b5:65:33:ac:2f:5c:be:3c:42:b7:69:04: 0b:84:70:3f:dc:73:18:16:b8:82:03:6b:b6:7e:da:05:dd:fe: fc:0f:1e:64:02:0d:5a:c6:98:d2:45:cd:7e:cc:c4:92:89:0b: 8f:d9:e0:27:18:4c:e4:40:6f:02:a0:8a:33:4a:5c:b0:62:47: 7c:c0:56:41:74:11:22:18:5e:9f:2d:70:7a:58:d1:6f:f4:6c: d9:ee:b8:49:43:77:b8:7b:2c:f1:0a:5c:b3:31:a5:72:07:8b: 93:ea:86:3d:e9:6b:4c:d4:c0:4b:a2:e0:04:f4:ca:09:e8:e8: b7:e8:07:d4:93:2a:af:f7:9d:91:44:d1:c6:9b:d6:3f:70:03: 71:83:4a:e9:75:b8:d2:24:38:29:0f:34:07:09:b2:9d:5f:3e: c5:6f:1a:0f:e6:d7:c8:18:1c:e4:c1:59:0e:2b:70:e4:b8:cc: 37:49:6c:e2:5b:44:1c:4d:d2:1b:f9:39:f6:4c:a7:54:2e:6d: 7c:3d:65:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj9TjTf7ePtHuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Mjg3ZWNjZDAtNjY5OC00MTI0LTk2YTktYzJkZDc5ZjUwYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fu13NNZKqLqLuloot0PoQIAnVdXh4HKIshR Z+aBkhxECTK96AvwZlJPaa66KiLWEHGGkJiOUcv5I/HiBR67kqAAFkigpRvbcZxC 6UqaUHQqVETw83Ro6TS2R41SllJaPv7C+bRfzyv/EUFd5NoPmrNjM6Wxi3QuYvMI U/sKZUu9wBgIKbuqgPXV1QMDgGz5r4xXhPk8Cbov4DuPUfOVDCV2NX6lujF3HDKm s8Mk2Fpn7prb65JstzGwmH6nNbYgxJkZUUTWeCH32ZHDfO/kAsj4ErMYlow1/5lW 8tt5lDM1ZX5CTZ6z363DxaE5rb9Rr3Q6QCkcjmlEj8hWc4BEJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSvSUBKDOw+dN2tvuUN4NfYFUIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZlMGYxZjMtNDVhMy0z NjViLTk0OGQtYjU1M2UyNjc1NjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3JMCIQS0zkEHcoQfTWNR4a/RYHiXmUzHi0hCMFFINIXmk5rNr/GaRb zzzfeWcwsKWPWHgIFas2RIMCnrVlM6wvXL48QrdpBAuEcD/ccxgWuIIDa7Z+2gXd /vwPHmQCDVrGmNJFzX7MxJKJC4/Z4CcYTORAbwKgijNKXLBiR3zAVkF0ESIYXp8t cHpY0W/0bNnuuElDd7h7LPEKXLMxpXIHi5Pqhj3pa0zUwEui4AT0ygno6LfoB9ST Kq/3nZFE0cab1j9wA3GDSul1uNIkOCkPNAcJsp1fPsVvGg/m18gYHOTBWQ4rcOS4 zDdJbOJbRBxN0hv5OfZMp1QubXw9ZUg= -----END CERTIFICATE-----Generated at Sun Apr 27 18:18:00 2025 by rpki-client