$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1633046-3939-361b-a9ae-f1e9aa6fd1bf.roa File: d1633046-3939-361b-a9ae-f1e9aa6fd1bf.roa (raw, json) Hash identifier: s6Ft5Sr0o+HZXtK877r+u+5/RZAhpkVmeNQ7ZG7xolo= Subject key identifier: 23:41:11:6E:8A:D8:1A:A7:6E:84:F4:20:38:24:65:8C:AC:40:35:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2EB1E6FD87D7655A0980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1633046-3939-361b-a9ae-f1e9aa6fd1bf.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2e:b1:e6:fd:87:d7:65:5a:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fe5bb72d-edbc-4b33-a57b-fd5197aae6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:b4:24:ba:61:84:06:2b:37:bd:71:ea:2d: f4:2d:62:fc:81:ca:e5:ed:ee:f1:ad:5f:94:b9:c3: b8:4c:5a:19:0e:82:76:6a:ec:0f:9b:44:60:94:18: 29:c1:d9:03:4a:d0:b2:4d:fe:ad:fe:dc:20:2f:65: 36:55:7d:ae:d5:14:ba:eb:b9:b2:8f:71:a0:ec:44: 2b:d8:0f:cd:fa:30:3b:81:6b:72:26:74:8e:8d:91: e6:0f:3b:5a:a6:92:15:10:27:f5:10:ea:05:b3:9f: bd:fc:63:be:89:28:66:cb:b0:39:62:31:55:6e:66: 29:9c:1f:ee:bf:5d:d7:97:f4:63:fa:e8:d6:cf:4d: dc:ad:68:74:9c:9d:9b:f3:98:51:ce:8f:37:8c:80: 34:84:39:3e:ab:be:50:5c:5a:c7:02:b8:00:d3:8b: e8:92:42:02:29:81:52:2d:af:77:c9:b2:e0:cc:ef: 14:0e:cb:80:2b:f9:83:62:c9:6c:3e:41:7a:c5:4b: a4:cb:63:82:0c:b4:55:90:5b:9c:b7:da:7d:e2:3f: 6b:68:72:8a:38:77:40:b5:74:cb:c1:12:62:3f:3e: 0c:14:3b:1f:cd:bc:31:06:67:c3:7c:a2:70:b5:8f: 6c:ba:a8:3d:ae:f7:c8:0d:ce:67:dc:93:49:d4:b8: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:41:11:6E:8A:D8:1A:A7:6E:84:F4:20:38:24:65:8C:AC:40:35:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1633046-3939-361b-a9ae-f1e9aa6fd1bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:dc:65:61:a3:09:b6:82:58:e9:fb:7d:c2:a5:d4:5b:f2:a7: 13:6f:74:81:ad:70:c1:4a:65:1f:1f:f9:b3:ab:ec:d8:ff:d8: 59:49:7f:26:3e:7b:cb:20:03:fe:d7:e6:27:c3:1e:00:36:ae: 81:62:45:60:09:77:56:6b:ff:d6:70:e2:cc:3e:d2:79:b1:37: f8:c9:58:ff:9b:fe:6b:74:dc:1e:e6:7e:44:95:72:9e:b2:26: 65:35:20:1c:62:57:41:86:4c:d9:e2:92:49:ec:fd:4e:59:3e: 48:37:55:96:45:d1:a9:12:e5:7f:61:ca:fd:b5:2a:28:c7:41: 09:38:95:3c:b3:ed:c6:a0:43:00:20:fa:7f:f6:8a:12:d7:f1: 91:c3:b6:c9:87:09:b7:96:30:4a:8d:bf:a0:7c:b6:0b:41:c0: e7:f8:9a:41:4b:5d:3c:3b:bf:6e:c0:cb:fb:ab:7b:65:4c:b2: 61:17:38:08:f9:19:0a:e9:7c:63:1d:c1:c7:2e:68:9a:46:8e: e5:8d:6f:6c:78:2e:32:19:ea:eb:7a:82:3e:20:3b:6f:ea:37: 5e:28:ad:6d:7e:bc:ef:f2:9a:ef:c7:16:83:9b:d6:a9:1f:cc: 02:a5:84:0c:d9:da:88:de:9b:ed:d9:19:ea:53:55:94:ff:93: e2:37:9f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui6x5v2H12VaCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmU1YmI3MmQtZWRiYy00YjMzLWE1N2ItZmQ1MTk3YWFlNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKC0JLphhAYrN71x6i30LWL8gcrl7e7xrV+U ucO4TFoZDoJ2auwPm0RglBgpwdkDStCyTf6t/twgL2U2VX2u1RS667myj3Gg7EQr 2A/N+jA7gWtyJnSOjZHmDztappIVECf1EOoFs5+9/GO+iShmy7A5YjFVbmYpnB/u v13Xl/Rj+ujWz03crWh0nJ2b85hRzo83jIA0hDk+q75QXFrHArgA04vokkICKYFS La93ybLgzO8UDsuAK/mDYslsPkF6xUuky2OCDLRVkFuct9p94j9raHKKOHdAtXTL wRJiPz4MFDsfzbwxBmfDfKJwtY9suqg9rvfIDc5n3JNJ1Lg4RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNBEW6K2BqnboT0IDgkZYysQDVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDE2MzMwNDYtMzkzOS0z NjFiLWE5YWUtZjFlOWFhNmZkMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHcZWGjCbaCWOn7fcKl1FvypxNvdIGtcMFKZR8f+bOr7Nj/2FlJfyY+ e8sgA/7X5ifDHgA2roFiRWAJd1Zr/9Zw4sw+0nmxN/jJWP+b/mt03B7mfkSVcp6y JmU1IBxiV0GGTNnikkns/U5ZPkg3VZZF0akS5X9hyv21KijHQQk4lTyz7cagQwAg +n/2ihLX8ZHDtsmHCbeWMEqNv6B8tgtBwOf4mkFLXTw7v27Ay/ure2VMsmEXOAj5 GQrpfGMdwccuaJpGjuWNb2x4LjIZ6ut6gj4gO2/qN14orW1+vO/ymu/HFoOb1qkf zAKlhAzZ2ojem+3ZGepTVZT/k+I3n5c= -----END CERTIFICATE-----Generated at Sat Apr 26 20:54:34 2025 by rpki-client