$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e0254e4-5deb-36d5-9d46-38a0d91bf3b1.roa File: 2e0254e4-5deb-36d5-9d46-38a0d91bf3b1.roa (raw, json) Hash identifier: gzRBHJzx/ptW0at8x3eVp1obRXxz0nCpT75cztEJ9G0= Subject key identifier: 38:4A:8E:11:08:09:E2:8F:BD:39:54:6F:50:04:7F:5D:6B:1B:E7:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B0820D57F012A30E8E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e0254e4-5deb-36d5-9d46-38a0d91bf3b1.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b0:82:0d:57:f0:12:a3:0e:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8c0ed78a-66ab-448c-95e3-fed683461216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:54:90:29:d2:00:c6:7c:08:56:cc:f9:76: 98:ee:1b:0d:d4:c3:2d:40:bd:d4:a5:46:19:cc:7f: 50:4d:53:af:e7:cd:ea:d9:40:51:b9:da:de:63:d1: 6a:dd:4a:18:32:3f:f0:a0:27:61:08:fb:f6:1c:17: 87:d8:9d:b7:f6:fc:d7:ba:c3:fb:34:e0:18:56:40: 10:10:35:a1:c6:66:50:35:fa:43:bf:da:38:f3:6a: c8:5c:19:61:24:c4:36:ac:c1:c8:15:52:d1:01:45: af:b1:a5:80:aa:5a:e0:46:1d:c3:b2:72:de:26:c1: c3:60:6f:8d:66:36:fa:68:a2:5b:8e:1d:cb:a8:03: 51:d6:a1:28:48:11:5f:d1:9d:41:b9:8d:25:6e:89: bc:79:25:64:d7:77:b3:46:1e:31:58:2d:36:14:95: 95:ab:61:e3:5f:1f:a4:92:79:e2:7d:9d:e6:b0:9a: 8b:0a:82:2b:7e:a9:50:81:56:01:42:1b:2c:05:e3: 0e:47:61:c8:30:e2:57:d0:6a:04:f2:a0:1b:fd:b4: dc:2e:52:25:1f:5d:5c:bb:87:48:c4:c6:e8:90:cf: a5:cf:28:f7:4f:f1:45:ef:73:e4:31:1f:6d:4b:35: 46:25:ad:68:fe:7a:18:a2:1a:ef:f0:5e:c3:ed:8c: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4A:8E:11:08:09:E2:8F:BD:39:54:6F:50:04:7F:5D:6B:1B:E7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e0254e4-5deb-36d5-9d46-38a0d91bf3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d3:28:95:6b:3e:f9:b4:87:73:89:b5:af:1a:8b:cb:50:40: cb:a8:88:63:46:4d:b7:5d:4b:0a:6b:47:a0:35:4f:f5:72:8c: ce:1e:94:c0:70:6f:73:9f:31:7f:35:31:b6:85:0a:07:8f:5f: d9:0b:e4:1e:4e:1e:b7:7b:c6:63:32:f9:73:fa:5c:f0:67:8e: be:83:79:7f:41:a7:28:0d:a2:f5:4b:75:19:7b:9a:71:03:58: 29:ee:0b:65:5d:84:f2:65:10:87:bc:b3:f6:f6:ff:7b:f6:63: 6f:5f:21:c3:e0:82:81:a0:e4:b4:0c:39:ea:b3:ab:42:15:84: 02:22:31:27:3c:1d:f7:0b:36:2d:26:cf:e5:80:af:9c:8e:8e: b8:ce:4b:33:c4:a8:77:17:21:ce:1b:7c:7e:dd:0b:f4:87:76: e1:03:50:d0:eb:1b:76:8d:41:f6:6a:fa:81:1d:92:e9:35:9a: 6e:b4:17:4d:fb:c6:19:29:b2:fa:55:9d:85:53:a1:0a:87:5a: 2e:d3:b7:a5:ed:eb:48:fd:5e:e3:a1:d5:c7:57:60:35:87:cd: 05:be:be:36:28:41:8c:45:29:e3:ae:4a:99:8f:33:1f:6c:23: d0:c6:a9:af:2b:07:04:a2:00:0b:74:be:a5:24:ab:d5:4f:df: 49:f1:a1:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLCCDVfwEqMOjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGMwZWQ3OGEtNjZhYi00NDhjLTk1ZTMtZmVkNjgzNDYxMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qJUkCnSAMZ8CFbM+XaY7hsN1MMtQL3UpUYZ zH9QTVOv583q2UBRudreY9Fq3UoYMj/woCdhCPv2HBeH2J239vzXusP7NOAYVkAQ EDWhxmZQNfpDv9o482rIXBlhJMQ2rMHIFVLRAUWvsaWAqlrgRh3DsnLeJsHDYG+N Zjb6aKJbjh3LqANR1qEoSBFf0Z1BuY0lbom8eSVk13ezRh4xWC02FJWVq2HjXx+k knnifZ3msJqLCoIrfqlQgVYBQhssBeMOR2HIMOJX0GoE8qAb/bTcLlIlH11cu4dI xMbokM+lzyj3T/FF73PkMR9tSzVGJa1o/noYohrv8F7D7YxedwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhKjhEICeKPvTlUb1AEf11rG+dhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmUwMjU0ZTQtNWRlYi0z NmQ1LTlkNDYtMzhhMGQ5MWJmM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3TKJVrPvm0h3OJta8ai8tQQMuoiGNGTbddSwprR6A1T/VyjM4elMBw b3OfMX81MbaFCgePX9kL5B5OHrd7xmMy+XP6XPBnjr6DeX9BpygNovVLdRl7mnED WCnuC2VdhPJlEIe8s/b2/3v2Y29fIcPggoGg5LQMOeqzq0IVhAIiMSc8HfcLNi0m z+WAr5yOjrjOSzPEqHcXIc4bfH7dC/SHduEDUNDrG3aNQfZq+oEdkuk1mm60F037 xhkpsvpVnYVToQqHWi7Tt6Xt60j9XuOh1cdXYDWHzQW+vjYoQYxFKeOuSpmPMx9s I9DGqa8rBwSiAAt0vqUkq9VP30nxoWs= -----END CERTIFICATE-----Generated at Fri May 9 13:18:19 2025 by rpki-client