$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d707865e-992c-3f63-be7c-23dc9a4a180f.roa File: d707865e-992c-3f63-be7c-23dc9a4a180f.roa (raw, json) Hash identifier: uEh+NvQ+dweozK5v+eOiMLVYL5ej0iab+AeZYwBX5pg= Subject key identifier: FD:EB:2C:94:0D:C5:A9:E9:DA:EF:02:12:44:A6:CB:79:5D:2F:65:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA171576F8A86745F849A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d707865e-992c-3f63-be7c-23dc9a4a180f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:17:15:76:f8:a8:67:45:f8:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b70a0fba-e007-40a8-9944-043aa365c4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a1:d4:e6:55:12:55:ea:b5:8c:7d:b9:25:f3: bf:20:72:c9:ac:45:93:ac:19:bd:f8:ce:91:3e:b1: f5:de:e7:70:5f:ca:5c:b9:a5:9a:31:32:f9:b3:f0: 89:2e:da:6a:e4:02:fc:e5:cd:09:19:82:88:fc:aa: 37:dd:eb:a5:44:9c:3d:9b:60:c8:5b:a5:02:e3:28: a0:6a:fb:fb:37:70:73:ce:6c:58:f9:68:c9:33:1d: 6a:93:e3:74:2c:87:c2:00:23:99:6a:0d:4f:e3:87: d0:68:db:fe:e6:f0:73:4e:14:9b:48:73:55:8a:45: ce:51:0c:da:90:4d:6a:80:7a:36:43:e0:ac:f9:be: 30:7a:52:9c:aa:92:c6:fb:88:c9:a4:aa:e6:2d:c2: 9a:44:18:0d:44:f3:84:93:a4:b7:d9:66:d5:ab:39: cd:a8:da:e1:03:30:ce:be:43:b2:0f:79:ce:da:ee: b4:f9:af:8d:73:a5:bc:be:72:50:10:4a:d4:16:7b: 30:ff:95:3a:3f:23:85:b1:dd:7b:08:38:a4:d3:dc: ea:98:93:e6:17:85:c2:29:bf:c8:0d:56:bd:96:ee: fb:ce:a8:0d:3e:20:c6:af:f9:4d:6e:c4:04:c2:cb: 49:fb:0e:e1:76:36:2f:d0:6e:5d:92:d7:f5:06:19: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EB:2C:94:0D:C5:A9:E9:DA:EF:02:12:44:A6:CB:79:5D:2F:65:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d707865e-992c-3f63-be7c-23dc9a4a180f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8d:50:8d:4b:ac:42:9b:13:4a:a1:54:28:6b:a1:d7:b0:dd: ab:61:92:2c:ad:da:f4:93:40:15:3a:0a:21:c4:93:1a:e2:ae: 7b:06:d0:23:0c:c2:51:d3:2d:90:28:13:8c:07:c0:f3:52:b4: 95:27:69:09:f1:10:13:72:f0:66:95:9d:74:aa:bb:35:13:a7: 89:ec:0f:3a:67:19:db:df:df:22:f6:b3:3b:39:8b:59:59:1b: 33:c0:47:6f:34:ee:b7:11:3d:9e:aa:56:97:62:0a:54:e4:93: e7:e6:0b:fa:40:3e:f1:d6:48:ac:96:94:89:04:a1:6b:f7:e5: 4f:c8:ba:d5:04:aa:91:bb:17:dc:85:ad:e0:69:04:d7:98:ce: 69:1a:1e:98:74:70:04:48:9a:f2:c7:dd:fe:44:77:66:2b:be: 12:6d:11:e5:6e:8b:2a:50:c7:c2:e0:27:98:ab:de:db:ff:03: fe:e3:e0:94:af:a1:1b:57:6f:c9:30:3d:73:6e:61:2e:e1:a9: 22:05:ae:e9:05:bf:72:79:fd:46:98:95:e6:d4:2f:1d:c3:70: bb:ed:6d:87:4f:52:8a:50:e7:39:34:7d:42:fe:31:3e:1e:82: 63:6a:53:a6:78:83:9c:5f:a1:a3:ef:12:34:94:77:2f:ee:a2: cf:9f:ea:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhcVdvioZ0X4SaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjcwYTBmYmEtZTAwNy00MGE4LTk5NDQtMDQzYWEzNjVjNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaHU5lUSVeq1jH25JfO/IHLJrEWTrBm9+M6R PrH13udwX8pcuaWaMTL5s/CJLtpq5AL85c0JGYKI/Ko33eulRJw9m2DIW6UC4yig avv7N3BzzmxY+WjJMx1qk+N0LIfCACOZag1P44fQaNv+5vBzThSbSHNVikXOUQza kE1qgHo2Q+Cs+b4welKcqpLG+4jJpKrmLcKaRBgNRPOEk6S32WbVqznNqNrhAzDO vkOyD3nO2u60+a+Nc6W8vnJQEErUFnsw/5U6PyOFsd17CDik09zqmJPmF4XCKb/I DVa9lu77zqgNPiDGr/lNbsQEwstJ+w7hdjYv0G5dktf1Bhlr5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3rLJQNxanp2u8CEkSmy3ldL2XLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDcwNzg2NWUtOTkyYy0z ZjYzLWJlN2MtMjNkYzlhNGExODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6NUI1LrEKbE0qhVChrodew3athkiyt2vSTQBU6CiHEkxrirnsG0CMM wlHTLZAoE4wHwPNStJUnaQnxEBNy8GaVnXSquzUTp4nsDzpnGdvf3yL2szs5i1lZ GzPAR2807rcRPZ6qVpdiClTkk+fmC/pAPvHWSKyWlIkEoWv35U/IutUEqpG7F9yF reBpBNeYzmkaHph0cARImvLH3f5Ed2YrvhJtEeVuiypQx8LgJ5ir3tv/A/7j4JSv oRtXb8kwPXNuYS7hqSIFrukFv3J5/UaYlebULx3DcLvtbYdPUopQ5zk0fUL+MT4e gmNqU6Z4g5xfoaPvEjSUdy/uos+f6pQ= -----END CERTIFICATE-----Generated at Fri May 9 08:33:32 2025 by rpki-client