$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa File: 85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa (raw, json) Hash identifier: 7rpZwYWR/Ho+NW+Y/7uOVGlyunDPORtzh5L4DDs+1vI= Subject key identifier: 15:77:95:46:7E:99:20:86:0B:82:D9:47:15:02:1D:FB:C9:A6:80:7E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2B9DB63529CAB8868980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2b:9d:b6:35:29:ca:b8:86:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bb45c081-6b51-4978-b325-4c4b5403c8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:c0:31:e8:a9:7e:df:dd:1f:41:0f:d8:4a: 56:e3:d0:af:9e:e2:77:d3:53:06:a6:d1:09:74:c5: 9d:d4:43:4e:1d:6c:00:53:2d:f9:46:3f:ad:c1:eb: 99:05:e5:dd:39:6e:2c:04:d0:06:eb:42:33:f5:7a: c4:ff:b7:f0:60:6a:f6:62:02:56:6a:8b:9b:5c:7e: 00:c1:67:59:f7:47:87:7f:2f:2c:97:c3:84:41:31: 90:04:b3:1b:c2:4a:48:a0:1d:c1:10:65:cc:8d:66: de:4b:78:65:d1:18:ce:70:76:fd:fe:7c:e6:84:dc: ee:83:5f:3f:31:d3:f7:6c:e0:ed:73:36:73:09:c1: 8b:ea:7c:14:d0:e4:8e:08:32:ce:50:d9:37:d5:58: 3c:e6:09:4f:1a:f9:9e:1a:2d:d1:68:6c:46:d9:c9: 08:ea:dd:03:29:9f:3f:16:81:8e:dc:07:99:9b:e1: bb:c6:28:e0:2e:bc:98:2b:56:7f:b9:c6:98:8f:f1: 4b:3b:02:cf:9c:9b:6d:db:6f:bf:65:9f:fd:de:2f: a6:2f:ef:6d:75:fc:40:34:bb:4e:a3:48:ac:fc:88: 27:7d:f0:9a:11:12:b4:7f:76:8d:57:4c:1e:e9:7a: d4:3e:5e:90:72:4c:05:3a:b0:bb:f8:17:ee:14:83: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:77:95:46:7E:99:20:86:0B:82:D9:47:15:02:1D:FB:C9:A6:80:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:52:48:01:bc:90:1d:dd:44:f3:b3:00:99:11:43:36:a2:b3: a9:02:25:11:af:59:eb:0d:aa:72:65:cd:3f:ec:77:30:ee:f1: 32:7c:b8:31:98:a1:0e:ce:df:84:07:08:6a:c9:ab:d4:41:3f: c2:4e:72:9c:92:60:10:46:fd:99:ca:cd:28:ab:a4:1a:06:c5: b3:25:91:d6:63:5c:8d:44:51:22:3d:00:16:1c:5d:46:29:e0: 14:f6:f6:8e:d9:6f:48:94:d9:15:50:ab:df:61:22:6c:5a:25: 37:e3:fc:19:fe:fc:43:0d:2f:89:82:ff:d4:0d:08:0a:8e:95: ca:90:26:55:f6:3a:86:2f:ef:3e:d3:68:71:a6:e6:f0:a3:9c: 6e:1e:50:0c:0b:81:40:fa:f0:85:4f:29:1a:c0:3b:33:dd:d5: ea:87:1a:40:0b:20:16:7a:21:b3:44:65:a6:7e:7e:cc:fe:c4: c4:62:a0:dc:69:ad:ae:70:93:f4:c7:58:2a:87:e9:d6:41:7a: e3:e0:a1:63:97:03:1d:8c:a5:31:e6:7e:b9:45:13:5d:7c:38: d9:9a:5c:43:f0:d2:87:ed:72:47:03:12:d4:6a:c2:5f:58:bf: 00:7e:46:91:4f:a3:3c:88:42:ca:a3:6b:68:db:69:35:ae:bf: 12:b4:c2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuiudtjUpyriGiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmI0NWMwODEtNmI1MS00OTc4LWIzMjUtNGM0YjU0MDNjOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttTAMeipft/dH0EP2EpW49CvnuJ301MGptEJ dMWd1ENOHWwAUy35Rj+tweuZBeXdOW4sBNAG60Iz9XrE/7fwYGr2YgJWaoubXH4A wWdZ90eHfy8sl8OEQTGQBLMbwkpIoB3BEGXMjWbeS3hl0RjOcHb9/nzmhNzug18/ MdP3bODtczZzCcGL6nwU0OSOCDLOUNk31Vg85glPGvmeGi3RaGxG2ckI6t0DKZ8/ FoGO3AeZm+G7xijgLryYK1Z/ucaYj/FLOwLPnJtt22+/ZZ/93i+mL+9tdfxANLtO o0is/IgnffCaERK0f3aNV0we6XrUPl6QckwFOrC7+BfuFIO/MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV3lUZ+mSCGC4LZRxUCHfvJpoB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVlNmRiMjItZmM1MC0z ZjAxLWIxMDAtZGY4YWUxZThmNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhSSAG8kB3dRPOzAJkRQzais6kCJRGvWesNqnJlzT/sdzDu8TJ8uDGY oQ7O34QHCGrJq9RBP8JOcpySYBBG/ZnKzSirpBoGxbMlkdZjXI1EUSI9ABYcXUYp 4BT29o7Zb0iU2RVQq99hImxaJTfj/Bn+/EMNL4mC/9QNCAqOlcqQJlX2OoYv7z7T aHGm5vCjnG4eUAwLgUD68IVPKRrAOzPd1eqHGkALIBZ6IbNEZaZ+fsz+xMRioNxp ra5wk/THWCqH6dZBeuPgoWOXAx2MpTHmfrlFE118ONmaXEPw0oftckcDEtRqwl9Y vwB+RpFPozyIQsqja2jbaTWuvxK0woM= -----END CERTIFICATE-----Generated at Fri May 9 08:42:33 2025 by rpki-client