$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa File: d459b9b8-1adb-320f-9bf2-ba30866194c7.roa (raw, json) Hash identifier: 0q/OLpUKYulMIlvj1mpqw3+c2Y4M+5TuKx4x3GYp19M= Subject key identifier: 96:25:35:28:B7:66:73:81:9E:11:33:54:8E:34:65:C7:21:81:C7:57 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA059476C3AA930E4D8A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:05:94:76:c3:aa:93:0e:4d:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5390304b-9526-4b06-9536-4a5f872a35eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:7b:6a:02:05:a1:f2:8e:32:59:f4:38:e7: 19:50:5b:05:d9:03:be:f6:7f:84:af:43:a4:67:91: 4a:6c:5d:d3:ad:ca:33:8c:45:33:ae:bd:ac:f3:bf: a9:6a:57:48:a0:3c:71:21:15:68:df:4e:8a:16:2f: 9a:e9:dc:68:55:20:71:45:60:35:22:29:19:a6:d9: 33:3a:4f:34:ed:df:24:05:80:ec:bb:3a:14:e1:ce: 20:5d:1d:de:4c:0b:21:33:40:09:0c:3d:16:a3:9b: 52:67:73:99:2e:19:ca:05:c8:51:e2:c6:aa:30:e2: 2b:21:f5:c8:7a:1d:30:78:d2:e0:30:7e:6b:90:1a: 25:75:28:7a:0c:2c:c6:21:71:18:db:e6:ad:91:dd: 4c:89:59:18:50:76:9d:46:09:73:ac:9c:21:19:f2: 49:6b:25:99:1c:cc:da:d6:6c:66:8f:cc:67:0f:2c: e2:08:7f:48:c1:5f:79:75:36:c0:28:ec:86:33:26: b2:60:d4:5f:22:ee:23:ba:bd:bc:6f:64:59:50:2c: da:97:47:a7:34:31:3d:59:41:d3:0d:b7:38:03:d9: 96:eb:e3:b3:18:bf:88:84:3a:09:ad:36:1e:c7:ea: 18:51:03:d0:4d:6f:70:2a:f2:09:0d:0c:ae:52:66: 2c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:25:35:28:B7:66:73:81:9E:11:33:54:8E:34:65:C7:21:81:C7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:42:6d:21:63:f0:bf:34:c2:c0:01:80:dd:4f:05:76:a0:22: 48:1e:6e:70:04:1d:a4:a6:4e:e0:6b:e5:d9:eb:f2:8d:68:08: 85:16:46:2e:39:1a:35:c8:85:cf:9e:c7:71:2c:b2:86:21:e0: 96:95:a2:1b:09:a1:91:dc:86:f0:e2:e6:3f:be:8e:9a:a7:89: 3b:98:a1:08:83:ea:c9:3b:b5:3e:6b:7e:cd:d7:9e:3f:50:73: 6a:9b:6f:de:38:3b:78:c0:69:04:17:b1:d0:65:12:1c:18:52: 84:23:4d:28:af:21:62:70:7f:4b:4a:85:f9:63:3c:f4:23:bf: 1a:6a:fd:77:61:a6:ae:04:6b:03:a5:b3:39:7e:41:e8:9f:b8: aa:46:b7:8f:4e:8d:a2:b3:b0:9f:04:ec:34:03:4c:bb:ee:6c: 1a:cc:08:25:bc:7f:03:dc:eb:ee:f2:33:39:0e:d5:61:c6:00: 16:fd:d4:4a:97:c9:8c:21:61:b0:18:7f:ba:69:49:2c:74:86: 2c:66:74:98:a1:b2:d5:b1:33:72:c8:86:23:8e:94:93:b5:05: 7b:ea:03:da:ec:3c:6b:34:68:1e:2f:cd:b4:cc:40:a6:7e:ba: f6:57:ae:7e:d9:21:ec:98:02:fa:42:f8:db:09:1f:44:65:f6: 9b:be:8a:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugWUdsOqkw5NioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTM5MDMwNGItOTUyNi00YjA2LTk1MzYtNGE1Zjg3MmEzNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQV7agIFofKOMln0OOcZUFsF2QO+9n+Er0Ok Z5FKbF3TrcozjEUzrr2s87+paldIoDxxIRVo306KFi+a6dxoVSBxRWA1IikZptkz Ok807d8kBYDsuzoU4c4gXR3eTAshM0AJDD0Wo5tSZ3OZLhnKBchR4saqMOIrIfXI eh0weNLgMH5rkBoldSh6DCzGIXEY2+atkd1MiVkYUHadRglzrJwhGfJJayWZHMza 1mxmj8xnDyziCH9IwV95dTbAKOyGMyayYNRfIu4jur28b2RZUCzal0enNDE9WUHT Dbc4A9mW6+OzGL+IhDoJrTYex+oYUQPQTW9wKvIJDQyuUmYsnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYlNSi3ZnOBnhEzVI40ZcchgcdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ1OWI5YjgtMWFkYi0z MjBmLTliZjItYmEzMDg2NjE5NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJCbSFj8L80wsABgN1PBXagIkgebnAEHaSmTuBr5dnr8o1oCIUWRi45 GjXIhc+ex3EssoYh4JaVohsJoZHchvDi5j++jpqniTuYoQiD6sk7tT5rfs3Xnj9Q c2qbb944O3jAaQQXsdBlEhwYUoQjTSivIWJwf0tKhfljPPQjvxpq/Xdhpq4EawOl szl+QeifuKpGt49OjaKzsJ8E7DQDTLvubBrMCCW8fwPc6+7yMzkO1WHGABb91EqX yYwhYbAYf7ppSSx0hixmdJihstWxM3LIhiOOlJO1BXvqA9rsPGs0aB4vzbTMQKZ+ uvZXrn7ZIeyYAvpC+NsJH0Rl9pu+ijs= -----END CERTIFICATE-----Generated at Sun Apr 27 21:33:26 2025 by rpki-client