$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb7eb31-f5a9-34c2-a365-947e56fbf10d.roa File: dcb7eb31-f5a9-34c2-a365-947e56fbf10d.roa (raw, json) Hash identifier: 2t+3ZcKLwqQVY+Hac4Dq50HjDXXvRc/OFNA7SdgXhY4= Subject key identifier: 60:3F:53:D7:FB:DA:9C:5B:7D:C6:38:41:E9:08:48:4E:E0:45:D7:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA17311FE38BA4876A3A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb7eb31-f5a9-34c2-a365-947e56fbf10d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:17:31:1f:e3:8b:a4:87:6a:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bda6cf09-fb64-42e7-9769-56ebfc9db138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:56:8d:24:40:ae:a5:93:fa:b3:49:fc:85: d8:c0:bc:0c:37:af:0e:1e:6d:e3:75:3c:b7:49:89: d6:c9:3c:34:cf:a1:82:55:a7:06:ae:4d:fc:f8:1b: e9:bc:7b:9e:fe:ec:31:02:6c:36:79:78:d0:8b:c9: 80:1e:02:59:6e:ac:94:ad:10:7f:83:ff:f7:1d:3d: ae:55:82:69:19:8b:87:70:52:13:1b:06:85:31:eb: 97:e6:96:40:d2:9a:19:93:94:79:2b:f4:1f:88:0c: 3f:04:d6:a7:20:5c:53:41:43:66:15:97:b4:16:8e: 3a:ca:51:4f:cb:d9:4a:b0:d9:08:bd:0d:34:fa:8b: aa:a0:1f:5a:a9:93:46:de:c4:df:d4:bc:37:ab:da: ac:10:87:3c:92:06:a7:55:d0:9d:24:e6:48:b4:f4: 0c:ad:49:0d:2c:b8:c5:56:3b:fe:dc:f7:86:a7:e1: 78:a9:35:f8:52:08:d1:6b:9e:b5:13:91:57:3b:8e: 4c:dc:3d:fd:ea:a1:47:f3:02:33:2f:c1:f7:84:80: de:3e:63:3c:42:8c:84:28:ad:02:3f:43:89:5e:72: c1:2a:50:74:7e:a1:9b:84:45:e0:c7:42:a2:9a:82: e4:da:c2:ad:66:51:c3:b5:8c:13:45:00:c4:22:b5: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:53:D7:FB:DA:9C:5B:7D:C6:38:41:E9:08:48:4E:E0:45:D7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dcb7eb31-f5a9-34c2-a365-947e56fbf10d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a0:61:9f:6f:e5:10:f7:42:d1:05:b0:a7:b7:ae:c1:5e:80: 20:41:0a:90:8c:79:6b:4e:39:4c:49:41:89:b2:01:2b:80:8e: aa:82:7f:9e:43:d0:3e:da:87:86:b0:8c:08:b9:17:5d:45:d2: 68:b4:47:02:53:60:e6:87:99:14:0f:e8:5d:b4:f7:e8:35:1e: b7:58:ac:13:4c:19:bd:fc:82:73:4d:2d:78:f6:8c:d8:37:19: 9f:ec:44:12:67:21:1d:06:a8:d8:54:c3:e5:ba:f1:14:8a:1e: 71:e8:4b:16:27:c2:fc:90:e6:59:6f:37:46:8f:d7:a2:4d:29: 92:1a:f1:49:14:1d:80:12:5a:af:ff:f4:a5:bc:fc:ec:80:7f: f8:a3:79:43:6d:01:6f:16:93:9d:67:07:5d:b7:d4:32:df:d6: 56:73:e7:22:fe:23:72:92:0f:f1:5f:90:2f:43:1a:50:09:e7: 9d:6c:29:a9:6b:13:77:7d:f3:b8:a8:be:12:2a:9a:eb:6f:a0: 9e:1d:3f:87:8d:0a:32:a2:5d:ed:d2:85:b9:22:e0:d9:3d:80: b0:13:70:8b:b9:d1:bd:27:f2:46:8e:23:c3:b2:e3:3f:61:b7: b6:c8:b3:bd:74:58:68:4e:e9:f1:65:12:79:8d:ad:ee:92:48: cb:0e:04:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhcxH+OLpIdqOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmRhNmNmMDktZmI2NC00MmU3LTk3NjktNTZlYmZjOWRiMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JVWjSRArqWT+rNJ/IXYwLwMN68OHm3jdTy3 SYnWyTw0z6GCVacGrk38+BvpvHue/uwxAmw2eXjQi8mAHgJZbqyUrRB/g//3HT2u VYJpGYuHcFITGwaFMeuX5pZA0poZk5R5K/QfiAw/BNanIFxTQUNmFZe0Fo46ylFP y9lKsNkIvQ00+ouqoB9aqZNG3sTf1Lw3q9qsEIc8kganVdCdJOZItPQMrUkNLLjF Vjv+3PeGp+F4qTX4UgjRa561E5FXO45M3D396qFH8wIzL8H3hIDePmM8QoyEKK0C P0OJXnLBKlB0fqGbhEXgx0KimoLk2sKtZlHDtYwTRQDEIrXmRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA/U9f72pxbfcY4QekISE7gRdfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGNiN2ViMzEtZjVhOS0z NGMyLWEzNjUtOTQ3ZTU2ZmJmMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGigYZ9v5RD3QtEFsKe3rsFegCBBCpCMeWtOOUxJQYmyASuAjqqCf55D 0D7ah4awjAi5F11F0mi0RwJTYOaHmRQP6F209+g1HrdYrBNMGb38gnNNLXj2jNg3 GZ/sRBJnIR0GqNhUw+W68RSKHnHoSxYnwvyQ5llvN0aP16JNKZIa8UkUHYASWq// 9KW8/OyAf/ijeUNtAW8Wk51nB1231DLf1lZz5yL+I3KSD/FfkC9DGlAJ551sKalr E3d987iovhIqmutvoJ4dP4eNCjKiXe3Shbki4Nk9gLATcIu50b0n8kaOI8Oy4z9h t7bIs710WGhO6fFlEnmNre6SSMsOBAk= -----END CERTIFICATE-----Generated at Mon Apr 28 06:16:07 2025 by rpki-client