$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa File: ca678994-138f-3640-a31c-0c61ce87c7a5.roa (raw, json) Hash identifier: 1a1MB0PMFuKn7S1TSyuUqFYEXxAcPYq+nutX6Cr5Rdw= Subject key identifier: B1:39:B3:CC:5C:38:BA:E7:63:A4:4E:A3:7E:15:F6:B7:7C:A4:0D:0F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A89126DACA16E85B9900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.20.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a8:91:26:da:ca:16:e8:5b:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=878dda01-5219-47b9-85cf-7da125672463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bb:6a:70:77:8c:95:3b:ba:f0:6c:6e:d1:a2: 77:2e:d0:b7:54:4f:59:8b:1e:5e:76:40:59:f7:67: 33:a2:c9:7f:68:39:ca:a9:f4:f4:a8:89:27:f9:40: c8:54:34:5d:d6:eb:15:2a:21:14:06:88:b0:d3:0e: f5:89:db:83:da:e0:3b:f2:66:db:f6:0a:98:1e:c4: 15:f5:76:57:19:54:35:4f:7f:6c:86:05:67:b1:d3: 3b:1c:ed:86:13:30:e7:80:ce:d3:70:16:eb:46:f8: a7:b3:7a:8b:74:46:11:46:7c:fd:7e:c2:e6:e8:9f: d6:64:b2:33:57:b7:74:f3:c6:d1:6a:0f:dd:98:03: e8:5a:a1:ef:4a:5c:df:f5:a7:c7:fe:86:1e:03:32: a6:c1:6e:c2:f8:d0:0c:54:41:7a:34:02:94:f4:bc: 74:fa:40:d9:2a:2f:c5:da:39:7a:26:a8:70:63:7c: 37:28:34:1a:73:02:79:24:07:de:48:b5:bb:32:ce: e8:02:5a:34:34:29:22:b4:ce:95:63:4e:0e:7b:86: b7:e6:f4:b1:58:ec:76:97:6c:71:59:a3:1a:d9:54: 67:22:dd:68:d8:6a:a1:a8:57:76:f4:74:50:6c:c0: 25:e1:db:0f:51:de:3b:32:cb:6d:95:46:08:c3:e5: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:39:B3:CC:5C:38:BA:E7:63:A4:4E:A3:7E:15:F6:B7:7C:A4:0D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d9:46:ba:f6:cd:46:de:58:93:d7:b1:67:f4:10:91:ac:0e: b0:7c:05:7b:ba:95:01:e5:f7:78:a7:c8:68:ed:6e:34:0c:91: 06:61:56:47:85:ae:31:52:40:42:eb:63:f0:15:8b:25:5d:65: af:3e:de:b6:a1:f2:0f:8d:2c:da:cd:1b:6c:b6:64:29:3c:27: a4:da:6e:d6:72:6f:e3:16:16:26:87:13:81:1d:6e:af:a3:8d: 12:cc:84:c1:12:7b:75:e6:17:50:2c:7b:86:83:be:61:65:ae: 69:27:2d:45:2d:53:b4:c1:52:3a:ef:e4:11:c7:bb:fb:47:3e: bd:e4:0f:fe:cb:66:59:f1:a1:4b:99:5e:7e:8a:1a:bd:17:73: c1:99:bd:e2:37:84:95:a4:30:f8:62:44:77:d1:1a:aa:43:dd: 73:c5:0b:c9:ca:1f:8f:d0:6a:f0:40:c4:34:3c:f5:10:34:b9: 8b:f7:22:7b:ee:a9:78:5e:29:a2:d9:7e:c8:bc:f2:e8:19:3e: 84:64:24:fd:05:46:87:3d:a5:6d:ed:62:a1:38:77:67:fb:5a: f4:62:b4:b7:7d:1a:63:92:bd:42:24:33:c4:88:a8:a7:f7:d9: 48:c2:b3:4c:6a:09:5f:2c:b1:75:9c:8b:0d:b1:65:67:bd:2e: e4:1b:85:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKiRJtrKFuhbmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODc4ZGRhMDEtNTIxOS00N2I5LTg1Y2YtN2RhMTI1NjcyNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLtqcHeMlTu68Gxu0aJ3LtC3VE9Zix5edkBZ 92czosl/aDnKqfT0qIkn+UDIVDRd1usVKiEUBoiw0w71iduD2uA78mbb9gqYHsQV 9XZXGVQ1T39shgVnsdM7HO2GEzDngM7TcBbrRvins3qLdEYRRnz9fsLm6J/WZLIz V7d088bRag/dmAPoWqHvSlzf9afH/oYeAzKmwW7C+NAMVEF6NAKU9Lx0+kDZKi/F 2jl6JqhwY3w3KDQacwJ5JAfeSLW7Ms7oAlo0NCkitM6VY04Oe4a35vSxWOx2l2xx WaMa2VRnIt1o2GqhqFd29HRQbMAl4dsPUd47MsttlUYIw+Uf1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE5s8xcOLrnY6ROo34V9rd8pA0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2E2Nzg5OTQtMTM4Zi0z NjQwLWEzMWMtMGM2MWNlODdjN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfZRrr2zUbeWJPXsWf0EJGsDrB8BXu6lQHl93inyGjtbjQMkQZhVkeF rjFSQELrY/AViyVdZa8+3rah8g+NLNrNG2y2ZCk8J6TabtZyb+MWFiaHE4Edbq+j jRLMhMESe3XmF1Ase4aDvmFlrmknLUUtU7TBUjrv5BHHu/tHPr3kD/7LZlnxoUuZ Xn6KGr0Xc8GZveI3hJWkMPhiRHfRGqpD3XPFC8nKH4/QavBAxDQ89RA0uYv3Invu qXheKaLZfsi88ugZPoRkJP0FRoc9pW3tYqE4d2f7WvRitLd9GmOSvUIkM8SIqKf3 2UjCs0xqCV8ssXWciw2xZWe9LuQbhVY= -----END CERTIFICATE-----Generated at Sat May 10 08:36:20 2025 by rpki-client