$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa File: 4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json) Hash identifier: RWtZFrW+Dnomv0NCTOhpH+bN1aDOYDebPziSzOc13r0= Subject key identifier: 28:09:4D:62:08:97:F7:D2:21:60:F4:27:CA:02:21:3E:5D:E5:8D:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A27B2E4756AFF35CB100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a2:7b:2e:47:56:af:f3:5c:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b759d41f-4b7c-4996-b45a-d9143bc22d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:53:01:59:02:c1:70:8c:73:7a:56:60:46:13: 73:66:86:0c:d0:f4:b4:2b:a5:2e:e3:d5:90:e2:20: f0:f3:de:96:68:c2:18:e5:17:f1:db:27:2c:0c:6a: 27:3a:62:a2:54:4e:5f:02:75:3c:33:a6:4d:19:ca: f0:a7:b0:66:a9:49:6a:dc:3f:6c:f8:dc:31:87:05: bc:14:2a:b4:c0:71:85:db:6c:d3:05:7d:1c:bc:a3: be:dc:37:89:0c:5e:e4:cb:43:c9:ba:38:26:f3:5e: 65:9a:aa:21:03:38:f9:61:05:bd:fc:a8:1d:8c:a0: b4:5d:27:a6:c3:9b:0a:c4:54:bf:69:de:90:fc:19: a3:59:95:24:e5:1b:b9:27:31:ca:0e:0a:77:04:cf: b7:a1:72:2b:64:05:05:29:64:cf:be:8e:eb:33:f3: 35:4c:de:03:3f:7a:b2:78:18:48:19:25:70:1b:88: ab:bb:1a:8c:80:38:52:ef:a3:11:a3:a9:00:b2:bc: b7:de:7b:b7:36:dc:6a:78:41:df:a0:55:43:bf:6b: 50:75:32:88:8a:2c:b4:c2:1c:bc:74:a9:0f:a8:24: 35:2b:a0:d1:3b:f6:30:b5:bc:ac:1d:2c:7c:83:5d: 5f:95:49:51:58:58:c8:e0:05:99:4c:56:cd:8b:25: 1d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:09:4D:62:08:97:F7:D2:21:60:F4:27:CA:02:21:3E:5D:E5:8D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c8:cb:3d:ee:b5:af:73:4c:73:c5:93:32:7b:62:a7:7e:f5: 2b:e4:b9:4a:6d:0f:1b:36:ff:32:2a:c4:18:31:cc:9e:2f:c2: 62:a0:4d:85:e2:2b:00:84:48:67:fd:b5:16:74:19:f3:1e:aa: b4:1a:de:55:79:6a:1d:26:80:0b:b9:10:56:bd:d8:b0:ec:a7: 80:1f:70:22:20:c7:42:33:c5:1d:7a:b6:5e:76:29:ef:23:30: ca:fd:cd:08:87:e0:e0:3a:99:45:03:5b:04:62:3c:23:ed:ad: 50:a6:c3:57:a2:59:27:ea:62:7c:35:2f:c2:fc:71:57:96:96: a7:8e:83:a9:db:dd:ad:b9:5f:5a:75:70:d9:f5:2e:8a:99:bb: bf:b6:3e:89:5f:cc:f5:5d:6d:18:2d:dd:a0:7d:20:76:0a:21: 84:0f:57:37:82:1b:69:2b:8d:bf:45:27:7d:41:d6:a6:92:98: ff:68:19:6e:a0:2b:ec:32:cb:22:17:cc:07:fb:cb:59:21:60: 2a:d2:44:3e:94:7f:78:bc:1d:e1:3e:2f:ce:54:83:7a:7c:c9: 33:ce:27:a0:95:13:10:cf:03:15:c4:f1:81:ab:ec:e3:64:e0: bc:64:60:9b:60:bc:75:4c:76:cb:cc:e9:7b:44:a3:d3:9c:d2: bd:76:79:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKJ7LkdWr/NcsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Yjc1OWQ0MWYtNGI3Yy00OTk2LWI0NWEtZDkxNDNiYzIyZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklMBWQLBcIxzelZgRhNzZoYM0PS0K6Uu49WQ 4iDw896WaMIY5Rfx2ycsDGonOmKiVE5fAnU8M6ZNGcrwp7BmqUlq3D9s+NwxhwW8 FCq0wHGF22zTBX0cvKO+3DeJDF7ky0PJujgm815lmqohAzj5YQW9/KgdjKC0XSem w5sKxFS/ad6Q/BmjWZUk5Ru5JzHKDgp3BM+3oXIrZAUFKWTPvo7rM/M1TN4DP3qy eBhIGSVwG4iruxqMgDhS76MRo6kAsry33nu3NtxqeEHfoFVDv2tQdTKIiiy0why8 dKkPqCQ1K6DRO/YwtbysHSx8g11flUlRWFjI4AWZTFbNiyUdLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgJTWIIl/fSIWD0J8oCIT5d5Y2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY1MmI1YjQtMWI3Ni0z M2E5LTg0MzMtZWU0YzZlNjk2YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITIyz3uta9zTHPFkzJ7Yqd+9SvkuUptDxs2/zIqxBgxzJ4vwmKgTYXi KwCESGf9tRZ0GfMeqrQa3lV5ah0mgAu5EFa92LDsp4AfcCIgx0IzxR16tl52Ke8j MMr9zQiH4OA6mUUDWwRiPCPtrVCmw1eiWSfqYnw1L8L8cVeWlqeOg6nb3a25X1p1 cNn1LoqZu7+2PolfzPVdbRgt3aB9IHYKIYQPVzeCG2krjb9FJ31B1qaSmP9oGW6g K+wyyyIXzAf7y1khYCrSRD6Uf3i8HeE+L85Ug3p8yTPOJ6CVExDPAxXE8YGr7ONk 4LxkYJtgvHVMdsvM6XtEo9Oc0r12eUw= -----END CERTIFICATE-----Generated at Mon Jun 30 10:29:20 2025 by rpki-client