$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d51d1d3-c4c0-3dd8-992c-07c1997a78ff.roa File: 2d51d1d3-c4c0-3dd8-992c-07c1997a78ff.roa (raw, json) Hash identifier: 6FkeFoMwInOrOFHgPmAzUfde0XGHIYpTWeROE4GlVDI= Subject key identifier: 16:98:41:7A:D8:E5:31:55:E6:E9:D6:3F:1D:F7:01:0B:4C:33:5E:8A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F323BDCF8CC7FCE6BCBE8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d51d1d3-c4c0-3dd8-992c-07c1997a78ff.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.20.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:32:3b:dc:f8:cc:7f:ce:6b:cb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=d8a36642-4be4-445c-8e68-1b0d5dd4d637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:82:aa:74:88:44:9d:fb:69:5b:81:85:04:02: 59:c7:b3:54:b8:43:5e:71:aa:87:98:b8:7e:c1:d3: 6d:bf:b8:38:50:8a:48:c9:9c:5c:36:9a:70:7a:cf: 05:98:55:96:bf:f0:a2:23:4c:24:39:88:d5:00:0e: e0:51:fc:77:19:23:9b:42:48:14:bf:8e:97:34:04: 4a:6f:ef:94:34:f0:b1:47:bb:96:e5:ce:72:d6:e5: 33:2e:8a:17:c5:b6:3f:02:5a:17:2d:73:c0:3e:11: fe:83:34:a2:f1:be:9b:0c:66:dc:d5:32:7c:90:82: 8b:12:46:8f:40:16:a0:96:22:10:d7:c4:5e:66:fe: 96:ac:f4:2b:84:9c:9b:25:d4:e1:d3:dd:e9:dc:1e: ee:3e:40:90:fa:86:06:cf:93:88:8f:f8:c6:cd:d7: 36:6c:78:2f:59:d6:ff:64:fe:12:c4:ef:d0:ac:62: fa:c1:da:c5:4f:5b:74:c9:5a:0b:41:30:fd:5a:00: d6:4a:84:93:71:c1:58:fe:18:b6:48:9e:23:2c:bb: 83:04:59:4f:98:e4:a7:ec:78:bc:8d:c9:90:56:42: 65:9d:e0:38:e4:39:a9:59:84:ef:ac:d7:1f:a2:1a: a0:ba:ea:eb:3a:9c:1a:ad:61:44:33:fc:fc:b1:1c: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:98:41:7A:D8:E5:31:55:E6:E9:D6:3F:1D:F7:01:0B:4C:33:5E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d51d1d3-c4c0-3dd8-992c-07c1997a78ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ee:e1:f2:00:02:79:cc:f4:09:3a:8d:e2:b9:47:7a:a0:5b: 67:37:e6:88:71:b0:97:a4:8e:c2:cf:65:2c:94:5e:c4:75:89: 67:c7:56:83:e4:e7:92:a4:c1:fd:d7:c4:88:9f:7a:ed:0a:73: 1d:bc:bc:87:43:ec:18:dc:71:70:2e:16:20:69:d8:ba:70:87: 3a:41:70:a5:9e:be:91:d6:92:a2:c8:4d:40:cc:75:97:82:c4: b8:e6:b4:35:dd:50:c4:1d:7f:2b:4e:9a:1b:b2:e1:36:24:79: 00:70:9a:a6:4e:93:93:f3:35:48:a0:08:d5:12:97:02:e4:d0: 46:8c:78:90:31:c3:3a:7f:13:40:5f:66:74:4a:ee:ae:f5:7a: 1d:36:2d:95:1f:b1:a8:36:38:ba:1c:fa:7a:ae:9a:24:44:63: 2c:bf:bc:da:2a:d1:1c:52:42:67:ac:4f:84:68:4f:fd:e3:5d: 08:2f:b3:76:4e:79:c9:3d:ac:c9:a5:5e:36:15:92:4e:1f:e3: 66:4f:f0:84:a9:c3:ef:52:67:d9:96:95:bf:09:97:af:de:e3: d7:76:af:4c:14:10:61:92:65:74:67:88:3a:91:31:40:50:ce: 85:75:db:4b:93:dd:78:89:bc:7c:ce:64:44:e1:49:a9:42:57: 70:ca:de:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzI73PjMf85ry+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZDhhMzY2NDItNGJlNC00NDVjLThlNjgtMWIwZDVkZDRkNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIKqdIhEnftpW4GFBAJZx7NUuENecaqHmLh+ wdNtv7g4UIpIyZxcNppwes8FmFWWv/CiI0wkOYjVAA7gUfx3GSObQkgUv46XNARK b++UNPCxR7uW5c5y1uUzLooXxbY/AloXLXPAPhH+gzSi8b6bDGbc1TJ8kIKLEkaP QBagliIQ18ReZv6WrPQrhJybJdTh093p3B7uPkCQ+oYGz5OIj/jGzdc2bHgvWdb/ ZP4SxO/QrGL6wdrFT1t0yVoLQTD9WgDWSoSTccFY/hi2SJ4jLLuDBFlPmOSn7Hi8 jcmQVkJlneA45DmpWYTvrNcfohqguurrOpwarWFEM/z8sRzoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaYQXrY5TFV5unWPx33AQtMM16KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ1MWQxZDMtYzRjMC0z ZGQ4LTk5MmMtMDdjMTk5N2E3OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbu4fIAAnnM9Ak6jeK5R3qgW2c35ohxsJekjsLPZSyUXsR1iWfHVoPk 55Kkwf3XxIifeu0Kcx28vIdD7BjccXAuFiBp2LpwhzpBcKWevpHWkqLITUDMdZeC xLjmtDXdUMQdfytOmhuy4TYkeQBwmqZOk5PzNUigCNUSlwLk0EaMeJAxwzp/E0Bf ZnRK7q71eh02LZUfsag2OLoc+nqumiREYyy/vNoq0RxSQmesT4RoT/3jXQgvs3ZO eck9rMmlXjYVkk4f42ZP8ISpw+9SZ9mWlb8Jl6/e49d2r0wUEGGSZXRniDqRMUBQ zoV120uT3XiJvHzOZEThSalCV3DK3ok= -----END CERTIFICATE-----Generated at Fri May 9 08:32:28 2025 by rpki-client