$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/394ab799-2e4f-36b7-b5fa-1eae1997de17.roa File: 394ab799-2e4f-36b7-b5fa-1eae1997de17.roa (raw, json) Hash identifier: /45wUg+rZm8i/SeQHwGBmehbPV0i81swE8OtGKkXc9M= Subject key identifier: C4:9F:14:D2:4A:EC:9D:5D:7B:BE:4A:42:92:68:32:93:C2:57:0B:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C4970C9CEF7FF74A986300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/394ab799-2e4f-36b7-b5fa-1eae1997de17.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:97:0c:9c:ef:7f:f7:4a:98:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=88bd7c31-5041-4c97-ab8e-6dbed571fec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ce:b9:0b:ee:dd:74:b3:94:cd:97:8f:44:ba: 74:2c:98:4a:3e:d4:c4:41:27:d2:3b:1a:c7:22:66: 74:77:a1:99:9e:39:23:62:5c:25:42:a2:dd:3b:ed: c3:69:59:2c:dc:4c:f2:34:59:eb:d1:66:88:67:2c: ae:7a:13:3f:52:e6:71:3d:1d:23:7a:f6:13:f5:4b: 9f:3f:e0:5b:a2:b3:1f:58:ee:f1:63:4d:8f:04:ed: 31:35:2f:b6:ce:1c:96:00:6b:26:12:ed:1f:ec:34: cc:96:04:43:d1:ee:e8:93:2f:80:c6:fc:47:5e:3f: ad:4d:65:ad:c9:4a:d6:de:be:6d:5e:fd:ad:c9:cf: f3:50:d9:dd:93:a3:7a:48:7d:eb:10:02:18:a9:1d: a9:d9:6a:c7:ea:2c:79:76:46:27:52:eb:aa:d8:9f: f8:65:fb:3b:46:83:51:f6:96:c6:eb:c9:16:e0:52: 14:bb:7f:a0:eb:0b:49:47:dd:83:8e:2d:43:a6:f9: 97:fb:13:c2:6d:70:e4:5c:42:9b:0c:24:08:24:b2: 13:d1:f3:8b:0a:e2:e0:bd:ca:81:6a:26:1d:71:ec: a7:6c:cb:a3:0e:94:28:e8:5e:7d:16:6d:a7:bf:98: 0a:90:b4:8a:32:d4:d7:d2:bc:f7:3c:33:5b:62:a3: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9F:14:D2:4A:EC:9D:5D:7B:BE:4A:42:92:68:32:93:C2:57:0B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/394ab799-2e4f-36b7-b5fa-1eae1997de17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ef:0c:97:35:d9:67:91:09:5f:bc:ad:54:86:44:c4:e6:0d: 32:fc:5a:84:d8:d7:c1:25:68:df:d1:20:6b:e6:8b:2b:0a:10: 12:ce:19:75:db:3a:36:b7:14:f5:59:5c:f9:4a:96:c9:93:9b: a2:3a:ec:06:98:6a:fe:5b:ba:95:19:91:da:50:da:37:05:ed: 89:54:39:d5:d0:52:13:16:41:ef:e3:83:63:9c:86:f4:c6:38: b8:74:ff:ee:41:03:9c:48:6e:2e:7c:de:8a:aa:08:c9:af:70: fa:12:c3:97:cb:f8:81:cb:43:b6:7f:ba:29:27:fc:46:82:ba: 42:ca:59:e5:43:3c:07:4f:6e:a6:68:18:a5:b9:ac:30:21:b1: 6b:27:66:e1:3b:81:93:7e:05:05:91:c7:4e:ec:ed:aa:c2:0f: f1:59:c3:84:b5:d2:b6:52:cf:c5:71:5f:8c:08:a9:73:f7:ac: 04:cf:2b:bd:c0:a2:b1:e2:83:8e:a5:02:bf:27:b5:02:d8:e7: 94:2a:20:a1:3a:ea:55:7f:97:8a:1f:bf:5d:ea:69:1f:49:18: 1e:17:41:1a:5e:42:13:19:7f:4e:f2:03:d0:03:ef:fa:91:39: 6b:11:67:a0:2c:72:f7:93:5d:c4:d6:de:29:b2:04:c2:65:e9: 75:87:ae:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJcMnO9/90qYYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ODhiZDdjMzEtNTA0MS00Yzk3LWFiOGUtNmRiZWQ1NzFmZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9M65C+7ddLOUzZePRLp0LJhKPtTEQSfSOxrH ImZ0d6GZnjkjYlwlQqLdO+3DaVks3EzyNFnr0WaIZyyuehM/UuZxPR0jevYT9Uuf P+BborMfWO7xY02PBO0xNS+2zhyWAGsmEu0f7DTMlgRD0e7oky+AxvxHXj+tTWWt yUrW3r5tXv2tyc/zUNndk6N6SH3rEAIYqR2p2WrH6ix5dkYnUuuq2J/4Zfs7RoNR 9pbG68kW4FIUu3+g6wtJR92Dji1DpvmX+xPCbXDkXEKbDCQIJLIT0fOLCuLgvcqB aiYdceynbMujDpQo6F59Fm2nv5gKkLSKMtTX0rz3PDNbYqP8KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSfFNJK7J1de75KQpJoMpPCVwuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzk0YWI3OTktMmU0Zi0z NmI3LWI1ZmEtMWVhZTE5OTdkZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADvDJc12WeRCV+8rVSGRMTmDTL8WoTY18ElaN/RIGvmiysKEBLOGXXb Oja3FPVZXPlKlsmTm6I67AaYav5bupUZkdpQ2jcF7YlUOdXQUhMWQe/jg2OchvTG OLh0/+5BA5xIbi583oqqCMmvcPoSw5fL+IHLQ7Z/uikn/EaCukLKWeVDPAdPbqZo GKW5rDAhsWsnZuE7gZN+BQWRx07s7arCD/FZw4S10rZSz8VxX4wIqXP3rATPK73A orHig46lAr8ntQLY55QqIKE66lV/l4ofv13qaR9JGB4XQRpeQhMZf07yA9AD7/qR OWsRZ6AscveTXcTW3imyBMJl6XWHrsM= -----END CERTIFICATE-----Generated at Fri May 9 08:59:51 2025 by rpki-client