$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa File: 3a66e457-9702-3b54-b4dd-dc18e3258958.roa (raw, json) Hash identifier: yitGeP01a36zZe3U9TNpp4lnZRYGsulSt4Kf4rby2D8= Subject key identifier: 19:76:F2:3A:FC:DA:CF:45:11:FB:9A:9C:8E:1A:40:87:28:2A:1E:42 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA46156F378255EB1D3C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:46:15:6f:37:82:55:eb:1d:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a64b9764-a3da-447f-a186-6f5b64aaabe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:b2:03:5c:86:1e:d6:83:e2:f1:6f:8c:9d: 30:f4:64:0d:b9:fe:e6:3c:fb:40:c2:9c:24:02:cf: 2f:69:9f:b7:40:36:07:fb:ad:27:5e:7c:3b:a0:5f: 10:b3:2a:4c:37:69:9c:4e:3f:44:a7:72:8a:ea:e6: d9:92:07:76:de:e8:ac:85:f6:1d:ae:23:fd:e2:e8: 4a:53:58:a8:f0:65:6b:93:9c:d2:bf:84:c2:d2:f0: 3f:7d:4a:af:b3:3b:3b:52:13:4d:3e:4c:c9:a7:43: 24:e9:f7:66:59:6b:fb:13:7d:57:13:1e:d5:46:e1: 6c:b1:6e:c9:93:4c:36:e9:58:17:19:76:ef:88:6c: 0d:15:cd:c9:08:23:b2:53:7b:66:b2:d5:07:c2:37: f9:a2:e1:2a:0f:70:df:87:f5:da:ae:0e:05:02:57: 32:ae:27:af:14:ab:26:dd:d8:fe:fb:9c:4c:ac:77: 8b:d3:18:3c:37:b0:b1:4c:13:4e:50:8c:b7:fb:36: 06:bf:ab:42:af:19:9d:f4:af:08:8a:f2:01:f8:ec: ee:e7:ad:d9:86:ab:d4:39:b0:f8:a8:b6:e8:d6:ca: 97:71:ec:09:33:3f:df:26:61:28:b2:a9:4c:28:d9: e5:1c:7b:4c:ea:f4:35:50:d0:31:2e:60:a4:a1:eb: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:76:F2:3A:FC:DA:CF:45:11:FB:9A:9C:8E:1A:40:87:28:2A:1E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:20:c7:cf:4a:6e:5a:a9:28:01:0f:fc:0c:c4:83:8e:2b:9d: 99:57:4c:bb:0b:09:95:33:ed:a2:8a:e5:20:0a:c4:ed:fe:13: 1d:56:84:f0:ef:fb:a6:ba:27:bb:f2:0f:1c:83:78:33:a7:9b: 81:93:5d:78:f2:20:72:40:9a:da:01:f0:d7:70:d4:a3:b4:7c: cf:e2:b0:cd:66:c6:be:46:dc:a6:34:8f:4c:be:05:22:25:5f: ef:5b:e6:ae:01:9e:9b:d6:10:db:87:de:4e:89:a4:b5:dd:a3: 6c:9f:07:52:a7:22:05:36:25:39:9c:4a:8e:29:e1:23:b8:36: 1c:ea:69:11:e0:39:ca:61:f8:ea:bf:07:54:d8:76:fd:6e:22: c0:ad:e9:d2:54:c9:9c:69:e8:bd:06:d6:ec:86:5d:91:9f:84: 32:57:82:aa:1a:a6:82:48:1b:7a:31:a8:70:4f:e6:2f:0b:0e: 28:01:40:ce:97:d4:55:12:7e:26:30:0c:cb:9c:e1:8c:77:6e: b3:04:ac:d3:42:2e:ed:f3:81:6a:61:6a:f8:9d:6c:1b:9e:c3: cd:bb:7c:f7:e4:b9:06:ed:64:4f:ec:f2:e0:a0:ea:1c:19:84: 95:9c:1b:73:a8:b3:ab:7f:54:f3:ba:80:1f:3e:46:42:83:d7: ff:ff:99:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukYVbzeCVesdPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTY0Yjk3NjQtYTNkYS00NDdmLWExODYtNmY1YjY0YWFhYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4yyA1yGHtaD4vFvjJ0w9GQNuf7mPPtAwpwk As8vaZ+3QDYH+60nXnw7oF8QsypMN2mcTj9Ep3KK6ubZkgd23uishfYdriP94uhK U1io8GVrk5zSv4TC0vA/fUqvszs7UhNNPkzJp0Mk6fdmWWv7E31XEx7VRuFssW7J k0w26VgXGXbviGwNFc3JCCOyU3tmstUHwjf5ouEqD3Dfh/Xarg4FAlcyrievFKsm 3dj++5xMrHeL0xg8N7CxTBNOUIy3+zYGv6tCrxmd9K8IivIB+Ozu563ZhqvUObD4 qLbo1sqXcewJMz/fJmEosqlMKNnlHHtM6vQ1UNAxLmCkoet0RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl28jr82s9FEfuanI4aQIcoKh5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2E2NmU0NTctOTcwMi0z YjU0LWI0ZGQtZGMxOGUzMjU4OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUgx89KblqpKAEP/AzEg44rnZlXTLsLCZUz7aKK5SAKxO3+Ex1WhPDv +6a6J7vyDxyDeDOnm4GTXXjyIHJAmtoB8Ndw1KO0fM/isM1mxr5G3KY0j0y+BSIl X+9b5q4BnpvWENuH3k6JpLXdo2yfB1KnIgU2JTmcSo4p4SO4NhzqaRHgOcph+Oq/ B1TYdv1uIsCt6dJUyZxp6L0G1uyGXZGfhDJXgqoapoJIG3oxqHBP5i8LDigBQM6X 1FUSfiYwDMuc4Yx3brMErNNCLu3zgWphavidbBuew827fPfkuQbtZE/s8uCg6hwZ hJWcG3Oos6t/VPO6gB8+RkKD1///mag= -----END CERTIFICATE-----Generated at Fri May 9 15:26:30 2025 by rpki-client