$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa File: 9d9be207-a67e-35f2-b44f-60bfe095dea2.roa (raw, json) Hash identifier: e8NmJZH27HSWrd/M3A3xQJafDfyG4MPomn6pCUOlE28= Subject key identifier: 57:7E:9B:CC:26:D5:BF:3D:B7:AC:27:A7:17:B1:38:0C:2B:86:CE:82 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA35DF10D05C210F882000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:35:df:10:d0:5c:21:0f:88:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=db968adc-0929-4bd7-b566-ec98d86f319b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:29:03:c6:4e:db:63:c0:46:32:4c:d6:15:8e: 7b:2b:18:98:96:53:fb:ed:32:c0:1b:ec:3c:c7:a1: 8c:10:44:c5:89:cb:b8:4d:09:a5:64:3e:ef:40:60: df:d1:ec:ab:5f:3a:62:a5:7c:6d:c7:a0:23:02:de: da:68:d5:80:58:43:57:2f:32:1d:21:15:dd:05:fb: 85:b2:9b:98:bf:eb:55:cd:16:e9:db:a9:76:94:8a: de:fe:e4:be:33:08:1f:cb:a1:d6:64:3f:36:23:2c: 5d:e6:b1:aa:91:12:a5:c7:cc:9c:63:c3:f2:ae:d7: ca:03:63:59:25:94:7f:9a:f4:a6:1b:ed:1e:4e:5a: b4:17:f4:f7:ef:74:04:6c:28:1d:e5:01:36:15:c2: 55:09:2c:87:34:11:fc:f9:1c:26:28:b8:4f:d3:1f: c3:d7:a9:e1:ad:2e:cd:a5:8d:34:86:e6:0f:e1:f7: 3d:9d:37:13:ab:13:28:e2:f4:35:56:d5:95:24:27: ef:46:3f:43:1a:ae:c4:cc:51:f1:e9:16:c0:fa:dd: b2:a4:d7:77:54:ac:cb:67:8c:1a:80:30:a0:b8:c8: ee:c5:d2:d9:22:00:83:de:0c:17:24:1e:1c:b7:24: 85:a3:ff:5c:76:fb:20:f3:73:91:fd:2d:f5:c4:55: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7E:9B:CC:26:D5:BF:3D:B7:AC:27:A7:17:B1:38:0C:2B:86:CE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:60:4a:f1:c2:e5:9a:a8:99:5e:1e:62:5e:e9:fe:79:b1:03: 09:39:b6:d5:1a:4a:da:e8:1a:4e:b9:1a:30:b0:12:cc:99:91: 48:f6:a6:cf:90:a0:0f:64:0b:01:c1:44:c3:dc:fa:18:fd:c0: 04:67:a2:23:26:00:01:f0:ee:3b:f6:74:e8:27:9d:e0:1c:37: 59:b2:8b:e8:09:b7:3f:2f:38:e4:06:8e:95:e6:7d:40:59:b5: e4:cb:50:eb:44:33:ee:b7:20:89:c2:1c:5b:16:59:9f:13:0f: 7b:5a:43:81:84:5c:1b:3b:d4:f9:70:12:7a:93:c1:0f:e5:22: 91:b6:21:e5:b4:8f:41:50:4d:19:b0:66:f2:7f:0a:e3:a6:1d: e3:2a:73:1f:ba:d0:74:8a:41:51:db:10:33:2c:ac:1b:3d:15: 90:ea:00:7c:74:06:8c:38:0b:d8:8e:6d:a9:3c:ed:e7:0c:ff: 2f:1e:ef:c9:60:39:a3:74:3b:b7:ed:f4:6a:87:39:0f:cf:0f: 61:bd:37:04:a8:5f:ff:f2:df:ef:29:79:75:75:44:68:bc:52: 80:a8:26:04:7e:65:28:1b:31:37:af:d6:7a:e4:e2:df:12:92: a0:cf:79:db:60:e3:1e:2a:10:8f:28:95:36:0d:81:ba:58:87: 0f:00:d5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujXfENBcIQ+IIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGI5NjhhZGMtMDkyOS00YmQ3LWI1NjYtZWM5OGQ4NmYzMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnikDxk7bY8BGMkzWFY57KxiYllP77TLAG+w8 x6GMEETFicu4TQmlZD7vQGDf0eyrXzpipXxtx6AjAt7aaNWAWENXLzIdIRXdBfuF spuYv+tVzRbp26l2lIre/uS+Mwgfy6HWZD82Iyxd5rGqkRKlx8ycY8PyrtfKA2NZ JZR/mvSmG+0eTlq0F/T373QEbCgd5QE2FcJVCSyHNBH8+RwmKLhP0x/D16nhrS7N pY00huYP4fc9nTcTqxMo4vQ1VtWVJCfvRj9DGq7EzFHx6RbA+t2ypNd3VKzLZ4wa gDCguMjuxdLZIgCD3gwXJB4ctySFo/9cdvsg83OR/S31xFVPtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd+m8wm1b89t6wnpxexOAwrhs6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWQ5YmUyMDctYTY3ZS0z NWYyLWI0NGYtNjBiZmUwOTVkZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxgSvHC5ZqomV4eYl7p/nmxAwk5ttUaStroGk65GjCwEsyZkUj2ps+Q oA9kCwHBRMPc+hj9wARnoiMmAAHw7jv2dOgnneAcN1myi+gJtz8vOOQGjpXmfUBZ teTLUOtEM+63IInCHFsWWZ8TD3taQ4GEXBs71PlwEnqTwQ/lIpG2IeW0j0FQTRmw ZvJ/CuOmHeMqcx+60HSKQVHbEDMsrBs9FZDqAHx0Bow4C9iObak87ecM/y8e78lg OaN0O7ft9GqHOQ/PD2G9NwSoX//y3+8peXV1RGi8UoCoJgR+ZSgbMTev1nrk4t8S kqDPedtg4x4qEI8olTYNgbpYhw8A1SI= -----END CERTIFICATE-----Generated at Fri May 9 04:01:27 2025 by rpki-client