$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa File: f568845e-6a2b-3552-aa3f-087a3d48d162.roa (raw, json) Hash identifier: ly9GSGzogktQaE6i8+5le58Uid+6bjT1y6qym8HaDOM= Subject key identifier: D9:DA:BE:A8:13:38:A7:E1:26:9B:4B:DD:75:C5:AE:A4:7F:9D:07:76 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C490BA724FBDCA0165F380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:90:ba:72:4f:bd:ca:01:65:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=5ff82789-56cb-4f76-a381-0d9b1b617340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:83:b4:8f:cf:0f:aa:30:fc:56:ae:e2:6d: ac:04:0f:f3:b6:86:2c:1d:9b:19:39:d5:60:4c:3a: e0:94:f4:7e:db:dd:ab:ec:58:ac:09:39:95:7a:52: 3b:ba:78:1c:d9:6d:90:ef:4d:38:3e:e0:ea:bc:b1: 0c:a5:ae:d5:e0:6f:69:ca:86:46:a5:61:d9:40:47: 7f:ee:b2:0a:30:07:10:41:99:df:a1:10:a0:56:83: 2e:a5:4c:4d:10:fe:3c:87:93:bb:b0:f8:66:a3:18: 9b:a4:df:5b:32:ae:17:8e:2c:43:49:6b:0e:41:c4: 03:d2:52:8f:15:98:94:11:51:3b:a6:a1:60:13:3c: 4d:4f:7f:24:f8:e0:17:c6:d2:e7:e5:d4:6c:9b:c9: 4e:e1:d6:49:72:c2:ac:30:4c:b7:87:f0:2b:02:c8: 99:9a:19:a6:83:aa:94:ef:f8:a8:e3:60:8a:36:e3: 85:df:29:08:0d:8c:ec:07:c8:d7:c0:b1:09:c3:67: b8:2f:04:c0:4b:b4:86:7b:51:47:ce:0e:c3:fe:4a: 63:fa:b4:eb:42:a1:e0:43:1e:57:c0:22:ca:89:e9: fe:f1:6a:d6:bf:fd:1c:95:e2:0d:ce:b2:ca:82:b5: 48:96:25:c3:a8:4a:4b:56:a7:f8:31:ec:11:a6:cd: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DA:BE:A8:13:38:A7:E1:26:9B:4B:DD:75:C5:AE:A4:7F:9D:07:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8d:3d:ae:6e:c3:c7:50:97:61:f2:61:2d:4b:a2:36:23:77: 4e:04:7a:39:71:a8:59:4a:c0:e0:d1:cc:89:10:f8:1d:c0:25: 46:1a:ef:d3:bd:6f:c2:d0:8e:06:5d:22:9a:c4:0c:a4:28:51: c0:6b:99:da:9d:60:76:c7:0f:08:69:d7:82:7a:a6:24:3f:48: a3:42:2d:67:d6:5f:c5:87:62:a2:6d:ce:49:29:73:8d:67:b3: de:6a:eb:d3:25:b8:1d:f0:24:27:82:2c:97:ab:73:48:c9:ba: 94:87:1e:d1:c9:3d:f6:90:bf:9c:ea:90:70:1a:27:0e:32:0f: e3:d8:f8:29:7b:9a:2a:d6:95:fc:80:22:00:ce:b6:f1:d1:60: 94:ae:c9:60:11:37:33:06:f4:45:e7:57:81:ff:fb:85:0b:d8: d7:54:76:3c:ea:86:f6:13:16:02:ff:de:7a:74:f2:46:31:de: 41:01:98:17:a7:cd:d9:0a:9a:85:a0:f2:26:c8:2a:f8:4f:4d: d1:31:de:22:34:8b:e9:d4:b4:30:46:ab:49:4a:68:2a:77:41: fb:07:93:dd:2e:54:5e:ed:83:fd:d1:23:76:ce:f1:dd:39:46: 76:80:6c:cc:88:24:5b:8a:fe:41:43:e4:e1:3a:7f:e7:a0:fc: 51:d6:b6:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJC6ck+9ygFl84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NWZmODI3ODktNTZjYi00Zjc2LWEzODEtMGQ5YjFiNjE3MzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5aDtI/PD6ow/Fau4m2sBA/ztoYsHZsZOdVg TDrglPR+292r7FisCTmVelI7ungc2W2Q7004PuDqvLEMpa7V4G9pyoZGpWHZQEd/ 7rIKMAcQQZnfoRCgVoMupUxNEP48h5O7sPhmoxibpN9bMq4XjixDSWsOQcQD0lKP FZiUEVE7pqFgEzxNT38k+OAXxtLn5dRsm8lO4dZJcsKsMEy3h/ArAsiZmhmmg6qU 7/io42CKNuOF3ykIDYzsB8jXwLEJw2e4LwTAS7SGe1FHzg7D/kpj+rTrQqHgQx5X wCLKien+8WrWv/0cleINzrLKgrVIliXDqEpLVqf4MewRps0j7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnavqgTOKfhJptL3XXFrqR/nQd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjU2ODg0NWUtNmEyYi0z NTUyLWFhM2YtMDg3YTNkNDhkMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2NPa5uw8dQl2HyYS1LojYjd04EejlxqFlKwODRzIkQ+B3AJUYa79O9 b8LQjgZdIprEDKQoUcBrmdqdYHbHDwhp14J6piQ/SKNCLWfWX8WHYqJtzkkpc41n s95q69MluB3wJCeCLJerc0jJupSHHtHJPfaQv5zqkHAaJw4yD+PY+Cl7mirWlfyA IgDOtvHRYJSuyWARNzMG9EXnV4H/+4UL2NdUdjzqhvYTFgL/3np08kYx3kEBmBen zdkKmoWg8ibIKvhPTdEx3iI0i+nUtDBGq0lKaCp3QfsHk90uVF7tg/3RI3bO8d05 RnaAbMyIJFuK/kFD5OE6f+eg/FHWtsw= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:12 2025 by rpki-client