$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f2f419d-9580-3e15-b3fb-c724423d184c.roa File: 2f2f419d-9580-3e15-b3fb-c724423d184c.roa (raw, json) Hash identifier: h0ah3T8cPYLJU0s/XDeEaZHq9OjgyX9cU4rAMDtQiIA= Subject key identifier: F8:1C:FC:46:8F:A7:38:85:2C:F2:00:1A:CD:3C:56:DA:76:14:12:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3F3871059FE7A532C1D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f2f419d-9580-3e15-b3fb-c724423d184c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3f:38:71:05:9f:e7:a5:32:c1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2bdbced4-2871-4e1a-96e5-15ca9a33f2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4c:f8:f0:8a:7d:92:04:59:76:7e:88:c6:9f: 82:c4:84:27:75:57:b5:4e:8b:a4:63:19:8a:9e:0e: 0d:ef:53:d5:5b:42:f6:ba:3e:4e:0e:84:78:b4:c0: 91:2f:23:b5:e5:d2:7f:e6:3a:b1:07:d6:e5:54:e1: 12:d3:39:6f:b2:f4:b9:1e:5f:94:5e:0b:46:9a:a0: a8:9b:13:47:4a:81:f7:33:48:fa:3e:01:2c:6a:1a: af:bc:ae:aa:63:04:f8:5f:19:cc:7f:64:ba:d3:28: c1:8b:6f:d3:a8:73:69:b7:de:63:41:bd:e4:0b:3f: 13:1a:32:25:fe:08:fe:8e:31:e9:98:a5:b2:af:9d: 3c:e8:f0:2f:79:ea:88:0c:c1:5e:f8:4f:2d:99:e1: 22:2b:83:57:d8:13:18:50:96:d2:77:b4:75:c1:37: 84:85:b6:12:a9:64:dc:d5:57:b5:cb:a0:d3:13:d4: 8a:12:87:a1:77:0d:0f:f0:25:18:4f:6f:85:b9:a0: c5:9a:cc:24:9a:ae:5f:07:9f:0b:95:14:1a:c4:c2: ed:63:1a:12:2d:ea:a5:d5:66:49:29:f1:fc:fc:06: 77:2d:cc:65:82:a5:c7:57:bf:fe:78:98:c5:4e:1c: a3:10:78:08:31:bb:f6:62:ea:29:84:1c:68:35:7f: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1C:FC:46:8F:A7:38:85:2C:F2:00:1A:CD:3C:56:DA:76:14:12:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f2f419d-9580-3e15-b3fb-c724423d184c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:cc:c7:e6:7f:25:06:39:de:4d:8b:77:e5:16:e4:56:bb:a8: 66:bd:61:62:5b:4d:38:67:fa:b0:06:68:5f:7d:be:6c:e6:76: d6:f1:2b:c4:1c:b8:28:c2:3e:52:c5:48:5c:32:12:12:c7:53: 3b:2a:a7:56:bd:eb:e8:55:6c:b4:b8:8f:01:8c:e3:78:d4:62: c8:f5:a7:b3:4b:a9:57:2d:44:80:ea:1c:ec:78:cc:0a:d3:f2: c7:58:6e:78:0f:5c:e1:a1:70:6b:17:32:04:4c:fc:0f:5c:10: 92:79:e8:24:6f:c9:82:e6:fb:a9:ae:63:fd:b8:e9:bf:7f:d7: d8:ac:21:16:1b:e3:e5:be:7f:3d:28:7f:61:48:7f:88:6b:22: 38:0a:8c:8e:85:18:9a:51:9b:9c:be:37:74:64:4e:55:15:e4: ec:82:2b:d5:31:15:86:d9:e0:92:75:b8:e3:c5:0b:39:d1:17: 90:4b:fd:52:c3:dc:c9:26:4d:3d:99:63:a3:38:3b:df:fc:a2: a3:3a:7a:e9:36:4c:e3:1d:13:e5:c4:4a:05:6a:e5:13:2d:b4: 06:b1:92:fa:52:5c:fe:b9:13:01:e6:c3:c2:96:8a:07:5f:bc: b4:23:eb:aa:a0:c6:d3:1b:7c:0e:4b:3e:37:93:ca:2c:da:4e: 12:98:db:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj84cQWf56UywdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmJkYmNlZDQtMjg3MS00ZTFhLTk2ZTUtMTVjYTlhMzNmMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEz48Ip9kgRZdn6Ixp+CxIQndVe1ToukYxmK ng4N71PVW0L2uj5ODoR4tMCRLyO15dJ/5jqxB9blVOES0zlvsvS5Hl+UXgtGmqCo mxNHSoH3M0j6PgEsahqvvK6qYwT4XxnMf2S60yjBi2/TqHNpt95jQb3kCz8TGjIl /gj+jjHpmKWyr5086PAveeqIDMFe+E8tmeEiK4NX2BMYUJbSd7R1wTeEhbYSqWTc 1Ve1y6DTE9SKEoehdw0P8CUYT2+FuaDFmswkmq5fB58LlRQaxMLtYxoSLeql1WZJ KfH8/AZ3LcxlgqXHV7/+eJjFThyjEHgIMbv2YuophBxoNX8tCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgc/EaPpziFLPIAGs08Vtp2FBIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmYyZjQxOWQtOTU4MC0z ZTE1LWIzZmItYzcyNDQyM2QxODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzMx+Z/JQY53k2Ld+UW5Fa7qGa9YWJbTThn+rAGaF99vmzmdtbxK8Qc uCjCPlLFSFwyEhLHUzsqp1a96+hVbLS4jwGM43jUYsj1p7NLqVctRIDqHOx4zArT 8sdYbngPXOGhcGsXMgRM/A9cEJJ56CRvyYLm+6muY/246b9/19isIRYb4+W+fz0o f2FIf4hrIjgKjI6FGJpRm5y+N3RkTlUV5OyCK9UxFYbZ4JJ1uOPFCznRF5BL/VLD 3MkmTT2ZY6M4O9/8oqM6euk2TOMdE+XESgVq5RMttAaxkvpSXP65EwHmw8KWigdf vLQj66qgxtMbfA5LPjeTyizaThKY23c= -----END CERTIFICATE-----Generated at Fri May 9 01:09:49 2025 by rpki-client