$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7168eb0-fb8c-37b3-a0d2-d56d9ca5b6d7.roa File: f7168eb0-fb8c-37b3-a0d2-d56d9ca5b6d7.roa (raw, json) Hash identifier: J+53XLJjam4FVo9rPB2pYDLO58++sl8IU5nSUuCyJkU= Subject key identifier: 10:34:70:B9:54:5D:34:B3:F3:3B:20:F1:D9:C0:5E:78:D3:8C:BA:16 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3F47AA4A15A718896800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7168eb0-fb8c-37b3-a0d2-d56d9ca5b6d7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3f:47:aa:4a:15:a7:18:89:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2e8a409b-5f15-4249-a949-67aaa368b21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:06:71:f5:ce:6b:86:53:b4:00:d0:de:44: 96:94:b0:9a:09:23:3e:26:76:69:58:02:87:a7:c1: 27:77:1c:5d:d0:c3:e5:2f:0d:f9:9d:64:de:bb:dd: 81:9e:e6:98:d4:39:b8:34:b7:88:74:8d:06:93:c6: cb:e2:25:2f:6f:3c:8f:f7:38:1b:b1:68:b4:34:92: 5f:60:ad:e0:b4:21:5f:b4:76:be:49:6a:24:09:f1: bf:66:04:20:fd:a4:d4:03:59:28:f0:f6:6b:6b:25: 5b:88:e6:55:d4:8b:9a:93:b9:a3:59:28:47:d6:d0: c2:4f:d8:82:92:06:98:61:15:cb:a5:fc:d8:d2:dd: 74:0e:85:09:74:24:1f:a0:d9:38:80:07:22:8f:1b: 3f:5d:f4:34:a9:8e:81:7e:cb:31:23:67:67:ad:6b: d7:7f:12:e5:e4:74:29:44:9d:71:f0:68:58:b0:24: 0d:95:b2:e6:95:fe:10:0c:cc:db:80:45:52:39:7b: a6:ac:82:df:b4:fb:2b:9e:d5:ed:f3:39:b4:df:37: 09:45:f6:1d:4f:64:e4:a7:fc:95:b4:fc:7b:23:99: 80:d1:cb:95:da:ac:86:2f:db:eb:b6:eb:02:1f:e1: 67:02:dd:6c:d1:7b:a3:14:a7:14:33:78:5b:ef:25: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:70:B9:54:5D:34:B3:F3:3B:20:F1:D9:C0:5E:78:D3:8C:BA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7168eb0-fb8c-37b3-a0d2-d56d9ca5b6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3a:8a:54:c0:88:be:56:51:57:d4:5a:28:5e:e2:1b:b5:c4: e8:ee:d7:de:d8:54:92:6c:d5:3b:64:33:d5:d3:1c:90:ad:68: 70:1b:f9:34:f0:06:c9:31:a8:3a:6b:92:89:3a:2d:b2:76:26: bf:c2:16:76:50:fc:94:64:d0:f6:90:f7:7b:15:d8:50:52:9b: 17:36:6a:6e:d9:4d:f7:91:4d:01:f0:99:29:b9:64:6a:d2:37: 85:70:38:a8:37:d1:98:41:ca:7a:3c:ae:47:72:ca:13:d5:5b: ad:5e:6f:69:a3:c7:83:29:a3:80:8d:11:f2:d0:36:20:e3:98: 0d:9c:93:ef:b6:a2:7b:1c:17:cb:b6:39:27:69:45:12:e8:10: 2a:3c:ba:75:56:f6:35:49:e1:5f:bf:dd:7f:83:3d:f5:c0:9f: d7:8a:ec:2c:7b:e8:db:33:ea:77:99:cc:05:68:16:90:6a:f7: 17:89:4b:ed:02:f7:b5:43:10:96:fc:92:1f:90:83:ba:b0:76: 69:3a:e2:4b:fd:ab:85:ee:78:be:a8:d5:1f:0c:2d:89:fc:ca: aa:6e:b0:09:65:e9:17:74:d1:0b:66:49:b4:45:1e:79:3c:2b: d9:ca:6e:44:6a:6f:24:d7:01:cc:f2:e1:3b:d4:f9:a5:1b:ab: 0b:94:73:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj9HqkoVpxiJaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmU4YTQwOWItNWYxNS00MjQ5LWE5NDktNjdhYWEzNjhiMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbQGcfXOa4ZTtADQ3kSWlLCaCSM+JnZpWAKH p8Endxxd0MPlLw35nWTeu92BnuaY1Dm4NLeIdI0Gk8bL4iUvbzyP9zgbsWi0NJJf YK3gtCFftHa+SWokCfG/ZgQg/aTUA1ko8PZrayVbiOZV1Iuak7mjWShH1tDCT9iC kgaYYRXLpfzY0t10DoUJdCQfoNk4gAcijxs/XfQ0qY6BfssxI2dnrWvXfxLl5HQp RJ1x8GhYsCQNlbLmlf4QDMzbgEVSOXumrILftPsrntXt8zm03zcJRfYdT2Tkp/yV tPx7I5mA0cuV2qyGL9vrtusCH+FnAt1s0XujFKcUM3hb7yWjfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA0cLlUXTSz8zsg8dnAXnjTjLoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjcxNjhlYjAtZmI4Yy0z N2IzLWEwZDItZDU2ZDljYTViNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY6ilTAiL5WUVfUWihe4hu1xOju197YVJJs1TtkM9XTHJCtaHAb+TTw BskxqDprkok6LbJ2Jr/CFnZQ/JRk0PaQ93sV2FBSmxc2am7ZTfeRTQHwmSm5ZGrS N4VwOKg30ZhByno8rkdyyhPVW61eb2mjx4Mpo4CNEfLQNiDjmA2ck++2onscF8u2 OSdpRRLoECo8unVW9jVJ4V+/3X+DPfXAn9eK7Cx76Nsz6neZzAVoFpBq9xeJS+0C 97VDEJb8kh+Qg7qwdmk64kv9q4XueL6o1R8MLYn8yqpusAll6Rd00QtmSbRFHnk8 K9nKbkRqbyTXAczy4TvU+aUbqwuUc6k= -----END CERTIFICATE-----Generated at Sat Apr 26 21:43:18 2025 by rpki-client