$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3434302-79ee-3bd7-aaf6-27b69f2b02e2.roa File: c3434302-79ee-3bd7-aaf6-27b69f2b02e2.roa (raw, json) Hash identifier: pBFtxsDUa4seua62dypuTjDWE8ZUbNVsGjbKMaJ7KBA= Subject key identifier: 60:A4:9E:D4:EC:98:99:8B:36:AE:2F:F9:D4:1C:0C:73:23:EB:AD:BD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4EF9C22CD37FCC76D980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3434302-79ee-3bd7-aaf6-27b69f2b02e2.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4e:f9:c2:2c:d3:7f:cc:76:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=8b920864-18d2-4d78-ad17-12d274e53fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:f9:ee:2a:00:d0:a9:ed:aa:dd:cd:92:df: e7:38:79:d5:b8:b0:8a:84:33:d9:fb:05:13:aa:f1: e8:1b:c9:7f:c1:b8:e0:5d:7e:78:e0:c3:2a:13:8e: 6e:35:b6:3a:97:a7:b2:94:3c:09:21:68:7d:3f:ec: 3b:fb:d1:9e:3d:16:33:78:47:3a:65:df:a5:27:19: 45:4c:08:98:e5:34:03:1c:4d:f0:60:ee:e0:72:38: a6:07:4b:67:1b:06:ad:46:50:04:05:37:a7:de:9f: 50:76:22:cb:bc:f9:d1:10:1a:6e:a1:19:5c:47:60: 0b:f7:a0:df:b6:26:90:da:70:61:c5:81:73:9b:9f: 53:32:92:56:dc:5b:09:8a:4f:93:c0:e4:4b:cb:2e: 41:91:7e:a8:08:7d:d7:cf:42:6f:b4:50:f0:22:0a: 7f:d9:f0:cf:e5:18:5d:aa:55:52:0e:ad:35:65:7c: 02:6e:5e:06:d1:19:fe:6b:93:e1:f3:89:79:6f:51: 77:02:6b:a3:9e:fb:eb:5d:03:fe:1c:cb:a7:61:27: fc:34:44:b7:85:df:3d:0f:c0:7f:9c:3f:84:78:ec: 33:3b:61:b9:52:36:85:c1:b4:cd:0d:32:f5:f8:12: 6a:62:39:ef:3f:1a:9e:e9:cc:91:4a:34:3b:5b:ed: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A4:9E:D4:EC:98:99:8B:36:AE:2F:F9:D4:1C:0C:73:23:EB:AD:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3434302-79ee-3bd7-aaf6-27b69f2b02e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:46:d0:85:66:c3:15:da:0b:20:6b:11:a4:4c:db:27:b8:9a: bb:59:a9:65:f3:1f:a7:e3:f6:23:d4:10:04:c4:7e:12:60:c0: 9f:66:88:d8:7e:b4:b8:c3:d6:3f:49:e2:3a:3b:15:28:3d:13: 6a:5f:e6:ac:a9:42:bc:bd:5e:33:15:7f:5d:0e:de:a5:73:5e: 14:11:a7:a7:63:a4:f3:90:a4:0b:5b:f6:3b:5b:7b:f4:d2:74: 37:43:08:6d:fb:0c:90:48:0a:4a:6b:3f:cd:32:fd:54:58:a5: e5:43:e9:99:7b:0a:d1:a4:f5:5d:3a:84:e6:72:02:af:8a:b8: 11:ff:ec:47:ee:46:c9:ca:f0:84:81:fa:3f:86:12:25:1f:8a: ff:61:5b:7f:f7:ff:18:21:c1:a3:48:d6:b7:0c:c8:91:27:d4: 37:da:8e:45:5a:cd:55:3a:25:f1:38:73:a7:f8:45:67:59:87: 92:e2:3f:d0:c6:51:39:c9:3b:a1:2a:d3:0b:0c:ce:38:90:8b: b7:8f:86:a4:ee:02:00:ca:5c:10:56:5e:79:46:39:7f:3d:dd: e1:74:9a:f4:ba:ce:e5:cb:70:92:5e:7b:c5:4d:78:ee:d0:a2: c0:d3:f7:84:1f:c9:51:28:44:30:1c:3d:0d:72:eb:b0:cf:b0: 34:70:a1:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh7075wizTf8x22YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OGI5MjA4NjQtMThkMi00ZDc4LWFkMTctMTJkMjc0ZTUzZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBn57ioA0Kntqt3Nkt/nOHnVuLCKhDPZ+wUT qvHoG8l/wbjgXX544MMqE45uNbY6l6eylDwJIWh9P+w7+9GePRYzeEc6Zd+lJxlF TAiY5TQDHE3wYO7gcjimB0tnGwatRlAEBTen3p9QdiLLvPnREBpuoRlcR2AL96Df tiaQ2nBhxYFzm59TMpJW3FsJik+TwORLyy5BkX6oCH3Xz0JvtFDwIgp/2fDP5Rhd qlVSDq01ZXwCbl4G0Rn+a5Ph84l5b1F3AmujnvvrXQP+HMunYSf8NES3hd89D8B/ nD+EeOwzO2G5UjaFwbTNDTL1+BJqYjnvPxqe6cyRSjQ7W+1NlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCkntTsmJmLNq4v+dQcDHMj6629MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzM0MzQzMDItNzllZS0z YmQ3LWFhZjYtMjdiNjlmMmIwMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtG0IVmwxXaCyBrEaRM2ye4mrtZqWXzH6fj9iPUEATEfhJgwJ9miNh+ tLjD1j9J4jo7FSg9E2pf5qypQry9XjMVf10O3qVzXhQRp6djpPOQpAtb9jtbe/TS dDdDCG37DJBICkprP80y/VRYpeVD6Zl7CtGk9V06hOZyAq+KuBH/7EfuRsnK8ISB +j+GEiUfiv9hW3/3/xghwaNI1rcMyJEn1DfajkVazVU6JfE4c6f4RWdZh5LiP9DG UTnJO6Eq0wsMzjiQi7ePhqTuAgDKXBBWXnlGOX893eF0mvS6zuXLcJJee8VNeO7Q osDT94QfyVEoRDAcPQ1y67DPsDRwoUk= -----END CERTIFICATE-----Generated at Fri May 9 08:40:25 2025 by rpki-client