$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa File: 0063bf2e-d940-336a-8c0a-4ccda641701e.roa (raw, json) Hash identifier: PtOL5uMFNgcrzqDMJE9u4vpuzQohA1CH5fZ6wFfhwdo= Subject key identifier: 2D:74:9C:8B:6E:06:D5:E0:DD:01:9D:14:96:2D:FC:79:56:68:3B:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD3918AB2AA46D6C244100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa Signing time: Thu 24 Apr 2025 11:52:28 +0000 ROA not before: Thu 24 Apr 2025 11:52:28 +0000 ROA not after: Wed 23 Jul 2025 11:52:28 +0000 asID: 19905 IP address blocks: 173.28.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:39:18:ab:2a:a4:6d:6c:24:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:52:28 2025 GMT Not After : Jul 23 11:52:28 2025 GMT Subject: CN=bb2787b1-fe13-46f1-9e3f-76aa7aa81e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:ee:58:33:09:66:40:0e:55:ea:e7:07:59: 8f:45:f6:4a:99:0b:96:64:3e:35:ac:06:02:ee:5f: d0:cd:0f:d8:00:6c:87:ea:59:66:8a:72:f6:6b:2f: e1:e4:39:48:fc:d5:69:37:96:38:aa:a4:e3:02:e4: c6:43:ee:83:72:41:9c:b6:f9:80:e9:d1:1d:56:06: c4:99:ec:dc:fa:39:9e:16:97:50:e8:ae:06:9f:88: 3f:44:96:fb:ba:c8:16:69:42:a9:cb:4c:6b:78:77: fe:de:ae:4b:e0:2e:50:08:aa:c2:35:6f:e4:00:e2: 32:66:76:06:e3:50:eb:29:de:25:6b:69:10:2d:35: 1e:fa:e8:fb:f1:ac:b1:21:a6:42:25:ac:db:36:4a: 87:10:12:bc:da:ca:df:81:10:28:8e:0b:a8:96:e4: 7a:c6:46:e5:34:29:41:4a:7d:06:e8:bc:81:c4:9f: f6:bf:49:f4:2f:2b:7e:d6:b7:d0:76:cb:ec:e8:e7: 66:17:3e:d2:96:c7:2f:85:0a:bb:4e:01:fb:6a:91: dc:b6:73:1f:95:90:37:bb:2d:e2:3c:dc:5a:e5:ad: 39:97:15:84:08:cc:f7:c9:d5:fb:b8:50:a2:cb:61: 4a:3d:d6:aa:b4:78:04:9f:8f:09:31:ff:35:e7:9d: 4b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:74:9C:8B:6E:06:D5:E0:DD:01:9D:14:96:2D:FC:79:56:68:3B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b4:5d:ae:94:e6:b1:f2:10:14:6a:ed:3e:26:3f:49:b5:04: 5f:0d:7f:76:a0:53:d2:a1:d7:96:7a:7d:85:02:c8:44:5f:71: 81:f6:67:c2:78:33:e4:73:a8:98:97:6c:b6:46:73:10:f2:3f: 53:be:8a:d0:ec:41:38:fd:74:1a:79:06:87:4b:75:be:31:41: 01:b9:1e:01:63:7c:b9:94:6d:4d:4d:de:bf:f0:65:9c:4d:ee: 2f:db:c2:d7:9d:eb:fd:4f:ee:fb:71:94:f3:81:1e:7f:d2:58: 10:bd:c4:c0:b0:10:90:c7:6e:dc:69:b5:30:25:f5:9e:a3:fb: dc:37:4b:7a:9f:cb:9e:f4:f1:48:b9:20:03:ef:b3:40:7c:f8: 2c:44:87:5c:00:de:98:7a:48:43:8b:ae:67:f8:91:99:16:46: de:e0:1c:b5:7b:fa:91:a7:2d:d2:b0:f5:4f:ac:23:39:38:5f: c9:d6:70:2b:fc:ee:b1:64:8f:3e:d2:21:e4:f7:5a:bd:31:cb: 49:62:ee:6e:8c:94:98:bb:14:e7:e1:08:e9:4a:5e:d9:47:d4: 87:9b:af:0d:66:77:2d:aa:48:65:00:c5:32:7e:1c:12:0d:e8: 94:84:2f:02:e2:09:82:51:6f:e9:e6:14:02:3a:99:8b:bd:27: 98:e6:9b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzTkYqyqkbWwkQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTIyOFoXDTI1MDcyMzExNTIyOFowLzEtMCsGA1UEAxMk YmIyNzg3YjEtZmUxMy00NmYxLTllM2YtNzZhYTdhYTgxZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVzuWDMJZkAOVernB1mPRfZKmQuWZD41rAYC 7l/QzQ/YAGyH6llminL2ay/h5DlI/NVpN5Y4qqTjAuTGQ+6DckGctvmA6dEdVgbE mezc+jmeFpdQ6K4Gn4g/RJb7usgWaUKpy0xreHf+3q5L4C5QCKrCNW/kAOIyZnYG 41DrKd4la2kQLTUe+uj78ayxIaZCJazbNkqHEBK82srfgRAojguoluR6xkblNClB Sn0G6LyBxJ/2v0n0Lyt+1rfQdsvs6OdmFz7SlscvhQq7TgH7apHctnMflZA3uy3i PNxa5a05lxWECMz3ydX7uFCiy2FKPdaqtHgEn48JMf81551LhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC10nItuBtXg3QGdFJYt/HlWaDt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDA2M2JmMmUtZDk0MC0z MzZhLThjMGEtNGNjZGE2NDE3MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi0Xa6U5rHyEBRq7T4mP0m1BF8Nf3agU9Kh15Z6fYUCyERfcYH2Z8J4 M+RzqJiXbLZGcxDyP1O+itDsQTj9dBp5BodLdb4xQQG5HgFjfLmUbU1N3r/wZZxN 7i/bwted6/1P7vtxlPOBHn/SWBC9xMCwEJDHbtxptTAl9Z6j+9w3S3qfy5708Ui5 IAPvs0B8+CxEh1wA3ph6SEOLrmf4kZkWRt7gHLV7+pGnLdKw9U+sIzk4X8nWcCv8 7rFkjz7SIeT3Wr0xy0li7m6MlJi7FOfhCOlKXtlH1Iebrw1mdy2qSGUAxTJ+HBIN 6JSELwLiCYJRb+nmFAI6mYu9J5jmm8g= -----END CERTIFICATE-----Generated at Wed May 7 19:18:29 2025 by rpki-client