$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa File: d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa (raw, json) Hash identifier: bMdgv7aEjxaPwKL1YvRJed1XeUfRrDp2ohQp2xcKl40= Subject key identifier: 7A:35:1C:AB:6A:C0:90:6E:FC:0B:A2:89:45:02:ED:3E:09:01:95:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BBABFFE088522863A280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:ab:ff:e0:88:52:28:63:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=76defe6a-dc3f-438c-8e7e-acd2e07e152a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:2b:1f:e4:5d:df:9a:7a:95:64:be:31:b5: f8:c7:9c:32:e5:10:90:bd:d3:bc:a0:a2:81:b3:03: b7:19:0b:39:cf:fa:b4:91:2d:a3:2e:4b:aa:23:23: 32:dd:a5:5d:6d:45:42:b4:4c:3e:9c:b8:b9:70:ad: 1e:a0:31:65:38:1b:42:01:74:8b:25:68:d5:58:aa: df:8b:29:9f:af:92:fb:76:86:e6:fd:c0:45:3e:ea: 12:75:50:e4:c5:a6:af:9e:20:47:97:23:86:70:fd: 31:5c:96:57:2b:e9:65:a3:58:63:df:5a:ae:ae:cf: 27:5b:3a:bf:b0:ae:16:09:28:03:b1:b5:6f:bb:7c: 07:20:ee:ce:19:f5:d2:da:5a:b0:9c:60:ff:bb:bc: 31:43:66:8a:fd:ed:cc:37:49:c7:71:9f:9f:ee:a7: bd:47:09:e6:20:3a:65:56:fd:53:38:ca:64:a5:58: c9:3f:62:2d:07:1f:03:02:ef:2b:6d:11:63:2c:30: 44:95:a9:4a:8c:08:81:86:6c:b2:46:3b:50:bf:43: cd:28:85:af:62:f8:59:55:d5:b8:a4:89:93:ae:5a: 9d:e3:99:44:5f:42:c5:1b:8e:51:99:b7:9f:66:eb: 32:5b:bf:c0:85:3a:09:68:92:16:fa:ab:c7:2b:10: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:35:1C:AB:6A:C0:90:6E:FC:0B:A2:89:45:02:ED:3E:09:01:95:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:52:e4:71:6b:08:99:46:f9:59:68:de:eb:7c:d0:be:5a:55: a2:fc:1d:dc:53:67:e1:8d:75:bc:7d:db:3d:ac:17:79:61:8c: 96:59:b2:1f:85:e3:1c:7e:1a:dd:d9:ba:07:db:79:ec:5f:fb: 0e:3f:47:48:93:55:92:9b:94:1d:55:f0:d9:c7:b1:7f:68:35: 0f:c4:c0:47:d7:22:4f:30:1e:75:bc:32:68:70:17:50:01:fb: 7c:99:55:6f:25:3e:dd:21:d1:c1:43:43:46:21:6c:e9:11:ef: b5:cb:fc:d6:bc:90:32:0e:eb:b7:65:2f:ce:c4:da:80:53:32: 55:05:3c:bc:f8:e4:fc:2f:3c:5c:b1:3f:96:a5:3a:22:90:27: c4:6d:40:59:09:70:54:36:3a:b2:70:a0:6c:89:1b:0a:42:c3: 22:73:7c:0f:81:52:6e:47:dd:d6:87:20:80:29:16:61:89:b0: 4f:1f:0c:4f:88:17:48:2d:92:14:92:e6:1c:b0:81:91:25:02: 7f:a4:d0:a6:29:c8:3d:2c:8e:c2:95:da:dd:3b:ae:24:75:1a: e3:1e:36:f9:fa:b2:ab:2d:7d:97:a6:2f:93:3f:c5:88:01:7d: 74:78:6d:b8:53:22:d5:0d:19:61:77:3b:19:a2:bf:05:b0:21: 63:ad:c5:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLur/+CIUihjooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzZkZWZlNmEtZGMzZi00MzhjLThlN2UtYWNkMmUwN2UxNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi0rH+Rd35p6lWS+MbX4x5wy5RCQvdO8oKKB swO3GQs5z/q0kS2jLkuqIyMy3aVdbUVCtEw+nLi5cK0eoDFlOBtCAXSLJWjVWKrf iymfr5L7dobm/cBFPuoSdVDkxaavniBHlyOGcP0xXJZXK+llo1hj31qurs8nWzq/ sK4WCSgDsbVvu3wHIO7OGfXS2lqwnGD/u7wxQ2aK/e3MN0nHcZ+f7qe9RwnmIDpl Vv1TOMpkpVjJP2ItBx8DAu8rbRFjLDBElalKjAiBhmyyRjtQv0PNKIWvYvhZVdW4 pImTrlqd45lEX0LFG45RmbefZusyW7/AhToJaJIW+qvHKxC99wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo1HKtqwJBu/AuiiUUC7T4JAZXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ0MTdjMGYtYmE2ZS0z ZmYyLTkwYTUtMjkxNzk2ODU0YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9S5HFrCJlG+Vlo3ut80L5aVaL8HdxTZ+GNdbx92z2sF3lhjJZZsh+F 4xx+Gt3Zugfbeexf+w4/R0iTVZKblB1V8NnHsX9oNQ/EwEfXIk8wHnW8MmhwF1AB +3yZVW8lPt0h0cFDQ0YhbOkR77XL/Na8kDIO67dlL87E2oBTMlUFPLz45PwvPFyx P5alOiKQJ8RtQFkJcFQ2OrJwoGyJGwpCwyJzfA+BUm5H3daHIIApFmGJsE8fDE+I F0gtkhSS5hywgZElAn+k0KYpyD0sjsKV2t07riR1GuMeNvn6sqstfZemL5M/xYgB fXR4bbhTItUNGWF3OxmivwWwIWOtxaE= -----END CERTIFICATE-----Generated at Sat Apr 26 22:02:08 2025 by rpki-client