$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa File: d8921189-8a05-30ea-b129-092968bc220d.roa (raw, json) Hash identifier: kozYW63ByOjJdBOj/8xXlQ0T1ac39L4sXaC9yldDGvA= Subject key identifier: A0:FF:0A:F0:44:21:5D:11:98:85:C2:1D:8B:28:18:50:51:72:D3:2B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FDB09B08B71CB21C5880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fd:b0:9b:08:b7:1c:b2:1c:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c8fad0a1-692f-41f5-8bf1-968868d39b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e2:bd:62:f2:ea:a1:81:7a:ec:11:2e:91:de: c2:4f:47:34:da:ed:8e:40:fd:58:c8:4a:f9:b3:cc: f8:c3:fa:fe:a4:5c:50:f5:a3:56:ac:b4:e0:25:c2: f4:f7:38:cf:a5:c7:88:03:33:46:9c:35:77:6d:78: cc:7d:27:af:b9:4c:ff:39:96:f2:32:8f:a8:f8:26: b7:12:d1:3c:c3:ef:89:e1:ef:5b:a1:a6:51:5f:3f: d5:79:34:cf:86:f8:c9:07:9c:63:b6:dd:71:be:80: 1e:d2:66:33:f4:07:db:71:0b:92:d5:c2:49:02:99: 55:3d:1e:ef:e0:13:b2:71:f3:83:81:6d:7d:30:05: 53:af:71:65:5e:fd:1a:9f:ac:b2:83:79:cd:b3:d0: c3:69:1f:06:3c:c8:5a:ca:66:ad:5a:1a:ad:e2:8c: d2:10:84:08:17:bf:f7:d0:59:dd:12:7b:fc:a0:c6: 35:2e:0d:5d:03:b2:d6:8f:d7:76:52:f4:62:00:94: 03:da:08:da:a2:c7:d3:93:f6:cc:30:4c:71:bd:53: b2:c5:b7:9a:23:58:1a:bc:6f:f9:87:05:99:9e:f9: 7d:d6:a6:b9:dc:c6:6f:e4:1c:ab:b9:78:72:94:58: e4:a5:ae:5a:82:05:09:ca:8d:a5:c9:58:8b:86:59: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FF:0A:F0:44:21:5D:11:98:85:C2:1D:8B:28:18:50:51:72:D3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e9:0d:8d:5c:57:48:91:7e:2d:03:37:db:0d:5a:e3:83:8b: 0f:5a:c1:ce:ce:51:e6:a7:3c:02:6c:0a:0b:8a:ab:c6:ad:53: 77:f3:82:4a:16:4a:a8:a7:94:4b:21:47:f8:e5:5f:84:1e:81: 85:cf:70:f6:9a:02:d4:a6:e5:1b:86:01:f4:66:65:07:21:a6: 0a:f5:21:18:9d:c5:8c:b8:65:fd:0c:2e:4e:f6:09:ed:f2:65: 1b:6f:9b:47:c6:b9:63:00:8e:8a:2c:56:72:74:eb:79:7c:ec: 7c:6f:1f:af:71:3d:c8:13:66:a8:28:2b:f0:80:77:60:ca:b0: 07:7b:3c:09:5f:d3:53:39:17:6a:c1:69:83:3b:63:d5:e4:60: 49:97:d4:8d:1b:71:29:ea:a5:b2:c4:5c:39:71:da:10:5c:06: 55:96:7b:fe:da:8d:c3:a4:8d:b2:8b:54:eb:50:64:c6:c7:4f: e0:4e:b5:bf:f7:a1:09:73:3b:ec:95:c5:be:64:d8:b2:26:ad: db:a1:01:52:c8:84:3c:d9:be:e3:30:96:a5:80:ee:d3:1d:b4: d1:a2:a5:a3:99:7b:7d:86:cc:7a:1c:2e:f0:9a:d5:e6:d9:87: 8f:60:68:d3:da:ac:bc:b0:b4:e1:6f:f1:e9:bd:83:8d:54:cf: 00:01:e1:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf2wmwi3HLIcWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzhmYWQwYTEtNjkyZi00MWY1LThiZjEtOTY4ODY4ZDM5YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+K9YvLqoYF67BEukd7CT0c02u2OQP1YyEr5 s8z4w/r+pFxQ9aNWrLTgJcL09zjPpceIAzNGnDV3bXjMfSevuUz/OZbyMo+o+Ca3 EtE8w++J4e9boaZRXz/VeTTPhvjJB5xjtt1xvoAe0mYz9AfbcQuS1cJJAplVPR7v 4BOycfODgW19MAVTr3FlXv0an6yyg3nNs9DDaR8GPMhaymatWhqt4ozSEIQIF7/3 0FndEnv8oMY1Lg1dA7LWj9d2UvRiAJQD2gjaosfTk/bMMExxvVOyxbeaI1gavG/5 hwWZnvl91qa53MZv5ByruXhylFjkpa5aggUJyo2lyViLhlmdiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD/CvBEIV0RmIXCHYsoGFBRctMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDg5MjExODktOGEwNS0z MGVhLWIxMjktMDkyOTY4YmMyMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDpDY1cV0iRfi0DN9sNWuODiw9awc7OUeanPAJsCguKq8atU3fzgkoW SqinlEshR/jlX4QegYXPcPaaAtSm5RuGAfRmZQchpgr1IRidxYy4Zf0MLk72Ce3y ZRtvm0fGuWMAjoosVnJ063l87HxvH69xPcgTZqgoK/CAd2DKsAd7PAlf01M5F2rB aYM7Y9XkYEmX1I0bcSnqpbLEXDlx2hBcBlWWe/7ajcOkjbKLVOtQZMbHT+BOtb/3 oQlzO+yVxb5k2LImrduhAVLIhDzZvuMwlqWA7tMdtNGipaOZe32GzHocLvCa1ebZ h49gaNParLywtOFv8em9g41UzwAB4Sc= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:42 2025 by rpki-client