$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b7b3779-1c8c-366b-91a9-82ac08ebf677.roa File: 1b7b3779-1c8c-366b-91a9-82ac08ebf677.roa (raw, json) Hash identifier: 2Nrij3wdRJrQv5Z13Vh4g+Z/nuXU1JSPYSYSbFHtjxg= Subject key identifier: 0A:8B:42:18:82:C1:21:9A:5D:CC:0E:82:03:4A:BC:82:28:3A:40:C9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA0985E208B3895995E280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b7b3779-1c8c-366b-91a9-82ac08ebf677.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:09:85:e2:08:b3:89:59:95:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d120c39f-5ba9-4d82-9547-1ad8a40a94df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:bf:de:25:3e:07:57:65:39:05:db:c6:f8: 72:a8:41:a9:9a:3f:1c:11:db:56:f5:7c:f7:1b:8f: 2e:77:1f:be:67:e9:12:2f:55:19:c7:0b:f0:75:b5: 67:f2:b8:03:a0:f2:57:da:05:19:0d:4d:c4:3a:3d: 91:30:a0:c8:12:7b:77:61:4a:fd:f5:c0:9b:a9:5a: 7e:42:53:a7:a6:89:58:98:7d:84:f1:3f:4d:43:9c: 97:4c:dc:ac:7b:d0:c3:39:db:b8:bc:b3:a8:f6:e3: 72:cf:e6:bc:a5:35:47:74:6a:f7:8c:53:c1:60:8d: 68:c0:71:06:0c:8b:10:dd:8b:95:c6:4f:ad:c8:5b: c7:4f:fb:03:da:57:ad:39:a4:a0:12:ed:03:15:3f: e0:f5:87:0f:03:e5:76:d1:16:27:0c:06:47:fe:c6: 07:33:42:ec:44:c4:5d:36:de:9b:f7:87:d0:46:07: 05:4c:50:8d:3d:f9:dc:b3:5d:c8:f4:96:df:3b:59: 1f:5d:8a:2d:30:e4:d6:f8:b4:97:d9:21:46:2d:21: d6:79:c6:0c:31:51:02:c0:47:95:fa:f2:8b:c2:5c: 90:4f:b5:7d:12:4c:20:a0:d6:f1:3c:3e:c8:2c:2e: 4b:55:f2:62:0c:31:36:a7:d8:6e:8c:2e:ef:c4:dc: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8B:42:18:82:C1:21:9A:5D:CC:0E:82:03:4A:BC:82:28:3A:40:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b7b3779-1c8c-366b-91a9-82ac08ebf677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:06:6a:f7:d5:59:f8:47:4b:73:ff:c2:c1:89:1c:e7:ec:aa: 7d:e8:83:63:b1:22:39:0d:c3:06:40:9d:70:60:cf:73:1e:8c: a4:03:b9:f4:d2:4e:2c:ee:ac:07:c2:8e:82:ca:cf:36:3b:ce: a6:61:97:d2:7e:3e:88:82:d1:89:49:fd:c1:90:4c:00:f7:aa: 04:0d:6d:ce:38:44:e8:e9:04:3a:c1:82:09:1a:91:c7:43:b6: a2:75:60:16:d4:0c:7e:b5:23:ef:a3:9d:7a:12:74:b8:49:07: 1d:ab:1c:97:52:03:74:82:9b:6d:37:42:b2:58:26:8f:91:ec: e8:04:d1:0a:38:d9:2b:5f:40:34:ed:bb:a0:3a:4f:a8:05:ad: 09:66:5d:75:9d:43:0c:72:67:65:32:bd:53:d3:72:bf:1b:84: 23:e4:5a:61:37:05:f1:8d:53:f0:0d:da:93:3a:31:98:fc:5b: fb:f3:68:bf:9e:af:2d:67:85:ed:b9:09:b6:ae:00:fc:d9:f0: a1:75:f2:80:ff:58:44:0e:3d:21:d9:2c:c5:d0:d2:f7:ff:f4: 1b:32:10:29:91:3c:30:36:98:b8:07:fd:00:94:1f:2e:e5:b1: b6:32:41:17:d2:c0:81:c7:09:a0:17:83:e6:bb:a1:2d:8d:95: e5:8c:ea:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugmF4giziVmV4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDEyMGMzOWYtNWJhOS00ZDgyLTk1NDctMWFkOGE0MGE5NGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAG/3iU+B1dlOQXbxvhyqEGpmj8cEdtW9Xz3 G48udx++Z+kSL1UZxwvwdbVn8rgDoPJX2gUZDU3EOj2RMKDIEnt3YUr99cCbqVp+ QlOnpolYmH2E8T9NQ5yXTNyse9DDOdu4vLOo9uNyz+a8pTVHdGr3jFPBYI1owHEG DIsQ3YuVxk+tyFvHT/sD2letOaSgEu0DFT/g9YcPA+V20RYnDAZH/sYHM0LsRMRd Nt6b94fQRgcFTFCNPfncs13I9JbfO1kfXYotMOTW+LSX2SFGLSHWecYMMVECwEeV +vKLwlyQT7V9EkwgoNbxPD7ILC5LVfJiDDE2p9hujC7vxNwHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqLQhiCwSGaXcwOggNKvIIoOkDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWI3YjM3NzktMWM4Yy0z NjZiLTkxYTktODJhYzA4ZWJmNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYGavfVWfhHS3P/wsGJHOfsqn3og2OxIjkNwwZAnXBgz3MejKQDufTS TizurAfCjoLKzzY7zqZhl9J+PoiC0YlJ/cGQTAD3qgQNbc44ROjpBDrBggkakcdD tqJ1YBbUDH61I++jnXoSdLhJBx2rHJdSA3SCm203QrJYJo+R7OgE0Qo42StfQDTt u6A6T6gFrQlmXXWdQwxyZ2UyvVPTcr8bhCPkWmE3BfGNU/AN2pM6MZj8W/vzaL+e ry1nhe25CbauAPzZ8KF18oD/WEQOPSHZLMXQ0vf/9BsyECmRPDA2mLgH/QCUHy7l sbYyQRfSwIHHCaAXg+a7oS2NleWM6rk= -----END CERTIFICATE-----Generated at Fri May 9 11:34:48 2025 by rpki-client