$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa File: e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa (raw, json) Hash identifier: IOc7PX5ye8IW6R40BzC/X0GQ7TpxcgTGDMatvjXvt2M= Subject key identifier: C3:5E:72:45:D6:F4:8E:75:08:90:E1:F9:19:2F:23:28:20:3D:FB:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FD3E352BF90237CDA040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fd:3e:35:2b:f9:02:37:cd:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=50026a5b-1d4e-407f-899b-fa10600fa1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cb:f0:81:5e:dc:3b:b4:c0:2b:7d:97:db:d8: 20:7c:5c:4d:5e:22:e2:d7:49:26:a8:e5:4f:ba:43: 40:ab:24:3e:83:e5:ae:64:1a:d1:24:7d:7c:78:62: 5a:a7:94:54:a9:0e:ef:a3:1b:f1:1f:98:36:d3:d8: 99:a1:2d:12:08:fe:9f:04:e4:5c:6d:d0:e0:26:92: 98:68:28:cc:99:13:d8:6c:2b:14:e1:49:af:16:ac: a4:5a:b4:6d:e2:d2:b6:2f:e5:60:2d:c9:f7:b6:f6: 34:ef:0d:e5:fc:96:6e:64:a0:aa:2e:c1:1e:19:da: a6:d3:06:15:39:c1:86:1f:34:d7:3c:ae:81:ab:d4: b6:06:f1:30:23:d2:d5:16:c8:10:12:89:ae:de:24: 36:c5:1e:93:e7:6d:60:94:c6:d3:1d:54:e9:5c:23: d9:00:25:bf:9e:00:e4:71:77:81:4e:16:19:73:69: b7:f5:aa:4a:00:62:bf:dc:b4:ca:6c:3a:8b:9e:ba: bf:e1:70:a7:b6:93:3c:b1:15:34:3f:c5:ac:5a:49: db:ab:7e:1c:d2:52:06:36:8d:03:12:df:0d:c5:28: 9e:8c:ac:43:b7:54:af:18:02:fe:1a:4f:cc:6f:c4: 84:b6:b8:65:44:e4:a7:3d:8d:65:c6:e3:b3:43:cb: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:72:45:D6:F4:8E:75:08:90:E1:F9:19:2F:23:28:20:3D:FB:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7f:8a:e4:59:cb:e8:f7:2d:19:b3:fe:84:a8:a7:0a:06:da: 10:69:a0:f8:71:7e:3b:4c:d4:1a:40:7e:34:38:6e:c8:68:1e: ae:9b:a9:1c:a0:7f:96:76:87:f8:d5:a7:e7:5c:a0:02:d7:26: d9:d6:e1:9f:d7:fc:e1:6c:d3:dc:50:5d:38:f9:e0:d5:7a:b1: cf:4f:21:46:d4:6a:e3:8a:c1:78:fc:6b:7a:58:ef:1e:b0:8e: 8b:24:9a:9b:42:80:90:59:a7:d3:9c:18:90:3c:f4:b3:88:24: 79:85:9e:d1:3d:9c:69:08:58:a8:d9:e0:12:8a:f3:0c:14:5f: 2a:5e:34:ee:63:4a:cb:f0:51:10:29:dc:18:54:3a:2f:c4:30: 63:d7:e5:33:ac:df:6e:b4:36:30:bb:27:56:82:8d:27:b7:3e: 66:3f:9b:00:c5:a5:77:f4:6b:28:fa:0a:6b:1b:81:9a:8a:aa: 17:10:8a:07:43:e4:dd:83:b1:bc:60:a6:cd:fe:ac:4b:19:80: 0a:f8:e8:9a:22:9c:57:b8:80:86:7d:a4:af:d4:6d:1d:81:79: ba:ba:7d:10:26:32:07:54:73:e4:77:19:08:92:aa:79:2a:d3: 45:fb:ba:41:53:29:ce:a5:82:1a:59:65:c4:30:45:e1:96:b7: e5:75:9c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf0+NSv5AjfNoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTAwMjZhNWItMWQ0ZS00MDdmLTg5OWItZmExMDYwMGZhMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8vwgV7cO7TAK32X29ggfFxNXiLi10kmqOVP ukNAqyQ+g+WuZBrRJH18eGJap5RUqQ7voxvxH5g209iZoS0SCP6fBORcbdDgJpKY aCjMmRPYbCsU4UmvFqykWrRt4tK2L+VgLcn3tvY07w3l/JZuZKCqLsEeGdqm0wYV OcGGHzTXPK6Bq9S2BvEwI9LVFsgQEomu3iQ2xR6T521glMbTHVTpXCPZACW/ngDk cXeBThYZc2m39apKAGK/3LTKbDqLnrq/4XCntpM8sRU0P8WsWknbq34c0lIGNo0D Et8NxSiejKxDt1SvGAL+Gk/Mb8SEtrhlROSnPY1lxuOzQ8vzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNeckXW9I51CJDh+RkvIyggPftsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTZiMjg5NzYtZmNmMC0z ZGY4LWE5YzYtZjI0Y2NlMGRmZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9/iuRZy+j3LRmz/oSopwoG2hBpoPhxfjtM1BpAfjQ4bshoHq6bqRyg f5Z2h/jVp+dcoALXJtnW4Z/X/OFs09xQXTj54NV6sc9PIUbUauOKwXj8a3pY7x6w joskmptCgJBZp9OcGJA89LOIJHmFntE9nGkIWKjZ4BKK8wwUXypeNO5jSsvwURAp 3BhUOi/EMGPX5TOs3260NjC7J1aCjSe3PmY/mwDFpXf0ayj6CmsbgZqKqhcQigdD 5N2Dsbxgps3+rEsZgAr46JoinFe4gIZ9pK/UbR2Bebq6fRAmMgdUc+R3GQiSqnkq 00X7ukFTKc6lghpZZcQwReGWt+V1nME= -----END CERTIFICATE-----Generated at Sat Apr 26 20:54:38 2025 by rpki-client