$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa File: 095d4b72-4463-396f-adff-a4a67b26bc1e.roa (raw, json) Hash identifier: MsTOOymwX0pfH0DsLssoMTUCg6qVlOkmMzdxly2cIQo= Subject key identifier: 14:A8:27:33:B9:0E:70:82:54:38:C8:EB:9E:4D:20:B1:FF:45:2D:1A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B060F726A9FDF9655360 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b0:60:f7:26:a9:fd:f9:65:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=54a49f12-e919-475a-a362-73a9733ec3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:6f:60:4e:db:0e:62:90:52:42:32:88:2f: bd:83:8c:54:81:b7:ab:9c:16:e6:59:d9:67:58:59: 8c:59:34:d6:b1:92:a6:df:71:e6:8d:88:78:0b:f6: 7f:82:b4:13:35:9c:6e:ba:55:bc:04:50:0f:53:c1: 60:58:db:70:35:b9:12:65:a0:ed:0b:9e:08:fc:8b: 2e:20:34:0c:58:62:8f:63:a2:1a:2f:e1:63:c7:01: 09:7b:6a:8b:bc:37:48:33:e7:c7:75:5b:d0:2c:e7: 1c:20:b3:2a:78:14:90:c6:29:f6:d5:94:83:08:0e: a3:b7:cf:9a:f6:a5:ad:ef:09:cc:3c:00:4a:b5:03: 0d:48:25:13:a5:17:a3:78:4e:70:40:78:0d:94:ca: 96:f8:4d:9c:8d:88:19:bc:15:c1:2b:1a:6b:3b:e7: 53:cd:9c:78:ee:d9:4b:9b:f3:14:ff:6e:c5:6e:8b: ce:00:33:df:d4:63:3c:9e:2b:8c:67:9f:54:95:6e: 97:18:de:b6:4b:37:bb:4d:d7:ab:54:d8:26:0b:91: a1:7c:39:a5:ae:f2:f1:ef:6c:4a:4a:74:14:5e:b3: 3c:b3:e6:b0:21:63:c4:02:fd:e9:ea:0f:be:4b:ec: e5:0a:10:a0:1c:34:94:69:29:91:62:50:6d:a5:d7: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A8:27:33:B9:0E:70:82:54:38:C8:EB:9E:4D:20:B1:FF:45:2D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6b:86:a0:fe:49:6a:e5:9c:6a:67:99:f5:cc:12:4b:26:34: e0:c8:95:7b:98:e3:4b:7c:44:9e:5a:ae:1d:9f:6b:23:26:95: 87:35:13:18:4f:52:c3:21:92:05:d8:48:e3:65:cc:8d:c2:4b: 55:47:1c:03:e4:ea:83:fb:7a:80:34:4f:db:60:4e:d9:17:a7: e3:0e:9b:3a:8f:f6:44:78:00:72:10:7b:6d:06:1f:27:e3:8f: 35:4c:c5:62:fb:75:6f:59:d2:15:69:d3:74:80:2b:47:7f:78: 71:db:f4:f8:3e:39:be:56:a1:8f:02:1c:9e:e0:78:75:62:3d: a7:a6:48:05:a6:d7:65:76:55:99:51:50:6e:48:4e:6c:91:6d: 60:7c:7e:9a:df:99:eb:d5:29:4e:65:63:d5:ff:a8:8f:99:cb: 20:79:f4:04:ee:c1:b5:b7:bf:fa:46:f4:23:b4:be:75:c7:de: 08:d8:6e:41:3c:a3:56:43:87:e8:3a:67:ae:8b:4b:f5:fa:03: 0f:9c:68:51:b3:13:5d:dc:84:28:02:bb:a8:8b:a9:30:86:7f: f6:42:28:54:02:5e:98:fe:e2:ce:20:f6:8e:36:6d:1d:de:29: c3:90:ba:44:87:93:35:70:ce:f3:f1:0d:53:70:70:fd:9a:74: 80:ab:b9:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLBg9yap/fllU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTRhNDlmMTItZTkxOS00NzVhLWEzNjItNzNhOTczM2VjM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8VvYE7bDmKQUkIyiC+9g4xUgbernBbmWdln WFmMWTTWsZKm33HmjYh4C/Z/grQTNZxuulW8BFAPU8FgWNtwNbkSZaDtC54I/Isu IDQMWGKPY6IaL+FjxwEJe2qLvDdIM+fHdVvQLOccILMqeBSQxin21ZSDCA6jt8+a 9qWt7wnMPABKtQMNSCUTpRejeE5wQHgNlMqW+E2cjYgZvBXBKxprO+dTzZx47tlL m/MU/27FbovOADPf1GM8niuMZ59UlW6XGN62Sze7TderVNgmC5GhfDmlrvLx72xK SnQUXrM8s+awIWPEAv3p6g++S+zlChCgHDSUaSmRYlBtpdfIxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSoJzO5DnCCVDjI655NILH/RS0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDk1ZDRiNzItNDQ2My0z OTZmLWFkZmYtYTRhNjdiMjZiYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRrhqD+SWrlnGpnmfXMEksmNODIlXuY40t8RJ5arh2fayMmlYc1ExhP UsMhkgXYSONlzI3CS1VHHAPk6oP7eoA0T9tgTtkXp+MOmzqP9kR4AHIQe20GHyfj jzVMxWL7dW9Z0hVp03SAK0d/eHHb9Pg+Ob5WoY8CHJ7geHViPaemSAWm12V2VZlR UG5ITmyRbWB8fprfmevVKU5lY9X/qI+ZyyB59ATuwbW3v/pG9CO0vnXH3gjYbkE8 o1ZDh+g6Z66LS/X6Aw+caFGzE13chCgCu6iLqTCGf/ZCKFQCXpj+4s4g9o42bR3e KcOQukSHkzVwzvPxDVNwcP2adICrua8= -----END CERTIFICATE-----Generated at Fri May 9 06:06:14 2025 by rpki-client