$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be94d24d-4eb2-3ca7-80ea-f7f9a261429c.roa File: be94d24d-4eb2-3ca7-80ea-f7f9a261429c.roa (raw, json) Hash identifier: pOVpWVLRvTFfkzmg+R7YXiseAWzkTcT5GuDf40upjE8= Subject key identifier: E7:33:C7:5C:2B:47:E8:EE:3C:CD:11:A0:F6:CC:C9:45:47:30:89:C1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA336786E494912D08D200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be94d24d-4eb2-3ca7-80ea-f7f9a261429c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:33:67:86:e4:94:91:2d:08:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2122c945-b796-4772-ab6f-14322bd424c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:79:9a:9b:b7:c5:d8:12:d1:7d:8f:74:72:3e: af:67:2d:a9:c0:e4:65:82:7f:d9:5d:f6:32:bf:89: a6:1c:20:2b:3a:c8:d4:1a:e0:b8:a8:7b:ac:e6:37: 70:dd:ad:82:0f:36:17:eb:8a:01:85:13:3a:df:dc: 54:13:b2:07:2c:f5:b2:4e:3b:dd:a4:ea:61:5f:b9: f3:4e:cb:25:36:cf:1d:43:d3:47:06:28:93:5c:ca: 3e:3c:92:ce:c7:9b:81:13:9b:ce:c4:e5:03:d6:53: f0:51:eb:2b:2e:0a:5a:29:96:ed:89:02:c4:69:52: 2e:01:30:a9:b4:0a:f1:e0:4e:8c:bc:51:4f:d0:02: 53:b3:d2:6f:25:5e:e8:03:3b:e4:7a:0f:18:f8:07: 30:da:84:ec:25:4d:80:4a:26:2d:0d:ef:4a:6a:9e: 48:92:b6:a7:fc:36:3c:de:29:43:42:19:7d:19:f5: e8:2b:8e:23:ad:9b:4c:e6:8f:60:38:cd:81:7f:bc: 99:19:fd:8f:b3:5e:da:ec:4c:3c:6c:11:f8:52:9f: 85:4c:a5:1e:6f:3b:e0:02:d4:e2:06:ac:16:65:e5: 28:1f:9b:cf:d2:d8:cf:96:66:f2:54:13:f0:70:23: 0c:20:af:b6:c6:24:d6:9c:01:84:8d:aa:b1:2a:5a: 51:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:33:C7:5C:2B:47:E8:EE:3C:CD:11:A0:F6:CC:C9:45:47:30:89:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be94d24d-4eb2-3ca7-80ea-f7f9a261429c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:36:0e:ed:65:cd:a8:98:53:47:ac:b9:41:c2:04:a7:66:84: 8c:bd:ae:b1:19:ed:f8:6e:3c:98:22:0d:5c:49:d5:3f:44:2a: 94:89:7c:31:cd:51:64:d1:4e:61:80:8c:f3:69:94:f3:64:26: 09:e9:19:0e:bd:f9:15:96:51:e5:31:8c:47:d0:1f:09:aa:75: 9a:59:0e:6a:45:ea:bd:c8:03:02:35:c3:9c:f1:5a:e3:86:96: 27:c4:99:27:65:d9:dc:b4:f2:f5:34:96:2d:65:e9:4b:42:82: 1d:7f:9b:53:c0:25:f2:92:50:0b:84:81:5a:e7:16:32:90:13: fd:3f:ff:28:8d:b6:da:a9:1f:be:d7:70:49:2b:30:5c:93:28: 93:a4:61:e1:5f:8b:ca:60:a4:8a:23:5e:d2:38:9b:29:95:23: 9f:cd:4b:cb:82:6d:cd:6d:b5:d6:34:96:f8:37:31:a4:1b:c6: 75:ba:d8:a1:33:31:f5:4e:f6:dd:b7:42:c9:ac:38:62:28:72: 87:41:57:8e:b7:95:23:7d:11:c0:21:ea:7e:4d:53:25:9f:4c: 61:05:0d:f7:7e:be:14:e2:61:55:5a:35:87:84:d4:cd:ef:1a: 15:77:10:da:f3:44:5e:5d:ce:33:f5:14:31:2b:4b:bb:8a:19: 22:4c:ec:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujNnhuSUkS0I0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjEyMmM5NDUtYjc5Ni00NzcyLWFiNmYtMTQzMjJiZDQyNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3mam7fF2BLRfY90cj6vZy2pwORlgn/ZXfYy v4mmHCArOsjUGuC4qHus5jdw3a2CDzYX64oBhRM639xUE7IHLPWyTjvdpOphX7nz TsslNs8dQ9NHBiiTXMo+PJLOx5uBE5vOxOUD1lPwUesrLgpaKZbtiQLEaVIuATCp tArx4E6MvFFP0AJTs9JvJV7oAzvkeg8Y+Acw2oTsJU2ASiYtDe9Kap5Ikran/DY8 3ilDQhl9GfXoK44jrZtM5o9gOM2Bf7yZGf2Ps17a7Ew8bBH4Up+FTKUebzvgAtTi BqwWZeUoH5vP0tjPlmbyVBPwcCMMIK+2xiTWnAGEjaqxKlpRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOczx1wrR+juPM0RoPbMyUVHMInBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmU5NGQyNGQtNGViMi0z Y2E3LTgwZWEtZjdmOWEyNjE0MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY2Du1lzaiYU0esuUHCBKdmhIy9rrEZ7fhuPJgiDVxJ1T9EKpSJfDHN UWTRTmGAjPNplPNkJgnpGQ69+RWWUeUxjEfQHwmqdZpZDmpF6r3IAwI1w5zxWuOG lifEmSdl2dy08vU0li1l6UtCgh1/m1PAJfKSUAuEgVrnFjKQE/0//yiNttqpH77X cEkrMFyTKJOkYeFfi8pgpIojXtI4mymVI5/NS8uCbc1ttdY0lvg3MaQbxnW62KEz MfVO9t23QsmsOGIocodBV463lSN9EcAh6n5NUyWfTGEFDfd+vhTiYVVaNYeE1M3v GhV3ENrzRF5dzjP1FDErS7uKGSJM7Dc= -----END CERTIFICATE-----Generated at Fri May 9 08:38:24 2025 by rpki-client