$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa File: 3e0b4933-96a8-3045-9cc4-034ba229beeb.roa (raw, json) Hash identifier: eI4T8wyBxMmFyOadEUoZXIXn64/aKWbC4C7ozbNDWYM= Subject key identifier: 1E:A2:8B:BA:AA:80:1A:74:A0:9A:A1:F3:97:8A:33:1C:B4:15:AA:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C490ED6AB8CC466397FB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:90:ed:6a:b8:cc:46:63:97:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=18e36390-86f8-438e-a460-4ef3db1f1e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:bb:69:f9:a0:b5:c2:2f:7f:b0:d0:b4:52: d0:34:c7:7a:d6:71:1b:f3:db:a6:c7:90:f9:cb:9c: ec:71:5f:69:c8:6a:80:01:12:cc:2f:57:8e:78:40: d9:48:94:b5:a8:aa:87:ad:46:ce:cd:17:f9:e7:b9: f7:c1:05:f1:9a:20:b0:8a:77:ee:d9:59:4f:76:0e: b4:22:26:47:5b:92:17:15:4e:b3:bf:b4:3f:46:cc: 30:8d:70:2b:33:22:7c:4d:f4:94:3c:22:1e:38:24: 93:47:95:35:0e:f9:27:e3:2c:3d:c9:50:71:0a:10: af:2f:c0:6e:be:44:99:a7:6a:73:30:3e:ab:18:6c: 2f:ff:eb:57:d2:45:c7:e8:e9:dd:5f:47:5a:9d:f4: e4:26:05:4b:a8:2e:ed:41:aa:42:8d:04:44:c8:f0: 9d:cc:d2:a6:e4:c7:76:ff:9e:8c:a0:33:b8:75:be: 16:f4:e1:c9:b3:fc:69:14:8b:a8:62:ad:74:da:9d: 89:43:5b:27:e4:b8:b6:58:3a:a5:f0:1f:b3:31:88: 82:68:de:4d:17:db:a0:c6:e4:f9:53:9f:d1:a0:cd: b0:ce:f5:3b:0f:e3:ea:95:39:fe:a1:fc:07:a7:00: f2:a5:63:4e:e2:de:65:0e:15:7d:d2:28:d9:e8:d5: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A2:8B:BA:AA:80:1A:74:A0:9A:A1:F3:97:8A:33:1C:B4:15:AA:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:dd:47:e6:f5:52:24:af:2d:8d:ba:07:db:74:5a:4d:77:7c: bd:8a:06:e9:83:17:82:63:81:e2:84:3a:e8:8c:31:6a:95:3a: 0e:01:b5:a7:9e:2a:49:5f:3c:2d:16:4b:97:a8:a9:5e:d8:71: 8f:84:55:bd:60:4a:04:54:d0:62:33:dc:83:e5:0a:a1:3c:22: 6a:9e:ec:d9:1f:62:db:b2:61:e7:c2:b8:b0:17:9d:c6:d7:da: d2:79:64:aa:48:6c:ad:bf:5f:41:d6:76:e0:bb:61:4b:88:6f: d1:37:04:6d:16:6f:c9:73:0a:d9:87:43:d7:da:20:47:24:cf: 2c:fc:8a:89:93:eb:0a:9d:ca:a7:4d:bb:c7:4b:34:d0:08:a7: 86:da:29:12:e6:5d:71:68:a2:8a:ac:b9:3f:4a:7c:9b:db:ef: 07:8a:0b:4b:55:2b:e2:93:56:f4:29:d6:55:d5:98:e5:6b:d7: 0f:f4:16:f7:0f:27:41:f8:bc:85:e6:4f:14:67:4c:6f:f8:e8: 5a:ad:f8:86:42:ff:94:4f:84:66:e5:4f:ff:d5:6e:22:62:e7: 77:96:14:11:cd:69:a5:65:9d:84:f7:52:8c:2a:53:b5:95:c8: 32:77:be:22:ff:b2:79:33:7a:41:a7:c1:38:16:6f:9b:d2:72: 75:15:c8:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJDtarjMRmOX+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MThlMzYzOTAtODZmOC00MzhlLWE0NjAtNGVmM2RiMWYxZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCK7afmgtcIvf7DQtFLQNMd61nEb89umx5D5 y5zscV9pyGqAARLML1eOeEDZSJS1qKqHrUbOzRf557n3wQXxmiCwinfu2VlPdg60 IiZHW5IXFU6zv7Q/RswwjXArMyJ8TfSUPCIeOCSTR5U1Dvkn4yw9yVBxChCvL8Bu vkSZp2pzMD6rGGwv/+tX0kXH6OndX0danfTkJgVLqC7tQapCjQREyPCdzNKm5Md2 /56MoDO4db4W9OHJs/xpFIuoYq102p2JQ1sn5Li2WDql8B+zMYiCaN5NF9ugxuT5 U5/RoM2wzvU7D+PqlTn+ofwHpwDypWNO4t5lDhV90ijZ6NVsOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6ii7qqgBp0oJqh85eKMxy0Far4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2UwYjQ5MzMtOTZhOC0z MDQ1LTljYzQtMDM0YmEyMjliZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLdR+b1UiSvLY26B9t0Wk13fL2KBumDF4JjgeKEOuiMMWqVOg4Btaee KklfPC0WS5eoqV7YcY+EVb1gSgRU0GIz3IPlCqE8Imqe7NkfYtuyYefCuLAXncbX 2tJ5ZKpIbK2/X0HWduC7YUuIb9E3BG0Wb8lzCtmHQ9faIEckzyz8iomT6wqdyqdN u8dLNNAIp4baKRLmXXFoooqsuT9KfJvb7weKC0tVK+KTVvQp1lXVmOVr1w/0FvcP J0H4vIXmTxRnTG/46Fqt+IZC/5RPhGblT//VbiJi53eWFBHNaaVlnYT3UowqU7WV yDJ3viL/snkzekGnwTgWb5vScnUVyDc= -----END CERTIFICATE-----Generated at Thu May 8 23:29:52 2025 by rpki-client