$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19397180-5cf1-3610-9843-71b04f6d99d4.roa File: 19397180-5cf1-3610-9843-71b04f6d99d4.roa (raw, json) Hash identifier: r9oKJ0iobGeNVulv2/Ogh2SHXd/mTUfftjUKnOrvr0M= Subject key identifier: 5E:45:80:E2:C2:1C:0D:46:5D:5F:09:21:B2:F8:72:81:B8:56:62:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C490CAB425C7364F77AF40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19397180-5cf1-3610-9843-71b04f6d99d4.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:90:ca:b4:25:c7:36:4f:77:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=997279d6-8ac2-482e-a32b-60e21ab81dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:21:6e:9f:3b:38:1b:d8:c5:21:95:92:d1: 60:f3:b1:14:32:f3:83:b0:e8:b2:b5:6d:6d:02:70: af:23:53:88:cf:66:97:92:59:72:2d:7d:03:69:6c: cd:dc:e6:3b:39:32:67:2e:49:b7:52:89:e7:8d:c0: a8:79:bb:aa:33:c3:fb:06:2e:2e:af:d4:5f:2b:69: 1c:62:be:f2:4b:91:e4:63:f4:2a:67:63:fe:62:ab: ed:e3:cb:67:16:0d:af:b1:ec:93:95:26:29:c1:a4: 45:fd:c1:35:43:6b:9a:54:7b:ae:58:e0:97:22:0b: 3e:bc:bd:94:4b:43:4d:36:dc:0f:71:bc:f3:ed:10: b9:93:37:9a:05:30:ec:3d:cc:50:89:e6:d6:ea:ea: e6:7b:32:18:e9:45:fc:70:d9:35:5b:12:14:ef:b5: 4a:be:f8:34:92:0d:ae:5d:db:f3:b2:5f:60:6d:0a: bd:52:e5:cb:00:05:2a:b1:23:a3:ab:a7:ac:88:a7: 3e:bc:41:00:fc:45:61:1c:22:30:78:d0:24:e7:fb: 02:38:05:79:f2:15:98:ca:93:eb:f9:ba:70:f3:e2: 1b:27:5e:75:8e:6b:38:3c:5a:42:80:3e:1b:cb:9e: 72:4b:98:dc:1d:58:51:ff:9a:ff:7d:33:49:e8:ae: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:45:80:E2:C2:1C:0D:46:5D:5F:09:21:B2:F8:72:81:B8:56:62:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19397180-5cf1-3610-9843-71b04f6d99d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6c:a2:e1:75:48:04:77:29:d1:d7:d6:7a:32:95:90:73:84: 2c:5f:86:5e:d4:a3:ca:0c:53:74:81:b0:85:25:bd:7b:d1:bd: e3:0b:9f:68:a9:29:ab:05:91:6e:58:57:a2:f4:de:8a:bb:ee: eb:ef:8d:7a:ab:48:e5:fd:76:a5:b9:01:1b:e7:fc:dc:1a:33: fc:a2:43:4f:94:3b:85:0d:80:53:4e:02:e5:9c:10:6a:fd:cf: eb:16:63:e4:60:4c:d4:6d:b1:9d:77:41:78:53:12:b9:6e:49: fc:44:e2:ce:ac:d5:23:53:95:e8:d5:00:d2:ce:e7:a5:ec:99: b4:09:50:2d:8b:eb:bd:63:3f:39:9e:c4:62:54:a2:21:91:3f: cc:ff:5e:21:c0:7d:0e:10:9e:69:81:7f:ed:50:b3:b7:a4:4c: d7:37:73:be:64:8d:5a:77:a7:e2:d8:80:6a:b9:0b:58:07:eb: 52:f7:c1:1c:94:e4:db:df:51:ef:bf:ed:ad:c9:8d:4c:bc:73: 10:13:7d:25:b6:2c:b7:dd:c1:84:26:26:41:76:38:72:92:f9: a5:a2:79:d6:3c:71:03:d1:27:c1:08:24:a7:0b:27:b6:15:10: 17:4e:8e:10:34:92:15:b8:e0:c8:4b:ef:b6:c9:9d:3c:59:fb: 20:61:c5:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJDKtCXHNk93r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk OTk3Mjc5ZDYtOGFjMi00ODJlLWEzMmItNjBlMjFhYjgxZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq8hbp87OBvYxSGVktFg87EUMvODsOiytW1t AnCvI1OIz2aXkllyLX0DaWzN3OY7OTJnLkm3UonnjcCoebuqM8P7Bi4ur9RfK2kc Yr7yS5HkY/QqZ2P+Yqvt48tnFg2vseyTlSYpwaRF/cE1Q2uaVHuuWOCXIgs+vL2U S0NNNtwPcbzz7RC5kzeaBTDsPcxQiebW6urmezIY6UX8cNk1WxIU77VKvvg0kg2u Xdvzsl9gbQq9UuXLAAUqsSOjq6esiKc+vEEA/EVhHCIweNAk5/sCOAV58hWYypPr +bpw8+IbJ151jms4PFpCgD4by55yS5jcHVhR/5r/fTNJ6K6maQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5FgOLCHA1GXV8JIbL4coG4VmJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTkzOTcxODAtNWNmMS0z NjEwLTk4NDMtNzFiMDRmNmQ5OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdsouF1SAR3KdHX1noylZBzhCxfhl7Uo8oMU3SBsIUlvXvRveMLn2ip KasFkW5YV6L03oq77uvvjXqrSOX9dqW5ARvn/NwaM/yiQ0+UO4UNgFNOAuWcEGr9 z+sWY+RgTNRtsZ13QXhTErluSfxE4s6s1SNTlejVANLO56XsmbQJUC2L671jPzme xGJUoiGRP8z/XiHAfQ4QnmmBf+1Qs7ekTNc3c75kjVp3p+LYgGq5C1gH61L3wRyU 5NvfUe+/7a3JjUy8cxATfSW2LLfdwYQmJkF2OHKS+aWiedY8cQPRJ8EIJKcLJ7YV EBdOjhA0khW44MhL77bJnTxZ+yBhxUE= -----END CERTIFICATE-----Generated at Fri May 9 15:35:41 2025 by rpki-client