$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa File: c9c42e37-0387-35e2-b596-fa8472f67cf0.roa (raw, json) Hash identifier: gfkYJsDI7oI1TsGnNsOahQUXTfmy8yXSGMSfnMwC2tY= Subject key identifier: A9:45:2F:FF:3E:1F:CB:A4:19:17:82:53:7F:B3:B8:1D:F7:ED:A8:D3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849BF3F5D51E93BFA5A4FE4BD60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.28.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:5d:51:e9:3b:fa:5a:4f:e4:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=02d92697-7b1c-4c32-ae20-f6dd0e111d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:94:86:5f:6e:e3:f7:c7:8a:6a:be:1e:0d:dc: ec:96:33:25:a4:e4:fc:b9:27:bf:cc:29:54:16:99: 60:f0:be:37:fd:12:c6:15:71:57:ba:a6:76:aa:d9: 41:23:b5:79:76:61:2c:0b:29:eb:1d:21:e3:7b:3a: 66:11:64:ee:99:cf:05:37:b7:58:6f:36:d7:03:01: 15:fe:56:82:92:29:4d:a1:8f:13:2c:ca:c6:59:cf: f7:54:7a:e8:14:52:3a:ba:81:01:b4:cb:fb:51:7d: 22:aa:09:4d:3a:48:7c:70:2c:23:e2:15:c4:97:79: 55:df:94:67:a8:3c:ea:c6:18:d3:19:0b:9a:af:a5: f7:f4:56:44:21:6d:cd:ad:3a:73:01:84:77:fa:9a: 4b:42:0c:9f:c5:43:92:43:c5:71:bb:5d:cf:0e:69: b9:26:9b:a3:e8:84:01:88:0c:87:cd:35:80:6c:6a: 18:01:4b:91:2b:fa:05:82:88:a3:f2:4d:c0:33:94: 2d:ec:aa:8e:54:cb:67:6e:05:4a:f4:e1:bf:0b:db: 48:83:55:90:82:47:11:e6:0e:e0:dc:b1:e5:22:3f: 37:e4:0b:ea:f8:3b:cf:c7:ad:84:43:d2:45:6d:a7: 8f:bc:15:c7:3e:0c:fa:b8:41:db:e7:67:04:e5:a7: e5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:45:2F:FF:3E:1F:CB:A4:19:17:82:53:7F:B3:B8:1D:F7:ED:A8:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:28:2b:60:06:56:8c:99:24:cb:f0:f6:8d:43:34:9a:a3:fd: 89:a5:87:37:b0:12:24:53:26:b0:80:2e:d2:81:d3:1c:4c:18: 19:8e:8f:2a:53:d3:6b:31:67:06:32:84:7d:4e:5a:91:f8:e0: f9:cd:4f:fa:a3:24:b9:bb:ae:de:d0:ca:01:87:4f:bf:d6:cf: 0a:96:ae:03:09:98:0e:c3:af:18:4f:1d:ed:46:bd:b6:c1:98: e2:45:1d:79:91:18:ea:fb:26:57:92:c3:5b:84:46:f7:ad:4d: f0:c8:00:91:da:cb:84:8e:36:06:fe:48:95:62:c5:ea:96:4a: 34:4d:d0:9d:e1:9c:b6:e4:d3:9c:89:e9:08:bf:2c:36:66:ac: cf:79:82:79:dc:b5:b0:63:c7:17:fc:32:87:b2:74:50:85:1b: 46:9c:61:0b:2e:dc:4e:ab:f2:58:ae:8f:0c:32:62:ed:15:3f: 86:11:7f:73:6c:aa:90:7b:81:0a:d7:a1:9a:4c:66:d4:51:89: a6:1c:d4:cd:7d:f0:35:15:be:bc:4a:af:fd:2e:04:1a:6c:61: 80:34:d1:95:5c:45:f5:40:77:39:f4:89:c4:db:4a:9b:e8:da: 68:25:31:ba:1e:84:7b:07:24:35:ea:ab:45:58:85:60:97:0e: e7:e2:b8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P11R6Tv6Wk/kvWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MDJkOTI2OTctN2IxYy00YzMyLWFlMjAtZjZkZDBlMTExZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZSGX27j98eKar4eDdzsljMlpOT8uSe/zClU Fplg8L43/RLGFXFXuqZ2qtlBI7V5dmEsCynrHSHjezpmEWTumc8FN7dYbzbXAwEV /laCkilNoY8TLMrGWc/3VHroFFI6uoEBtMv7UX0iqglNOkh8cCwj4hXEl3lV35Rn qDzqxhjTGQuar6X39FZEIW3NrTpzAYR3+ppLQgyfxUOSQ8Vxu13PDmm5Jpuj6IQB iAyHzTWAbGoYAUuRK/oFgoij8k3AM5Qt7KqOVMtnbgVK9OG/C9tIg1WQgkcR5g7g 3LHlIj835Avq+DvPx62EQ9JFbaePvBXHPgz6uEHb52cE5afllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlFL/8+H8ukGReCU3+zuB337ajTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzljNDJlMzctMDM4Ny0z NWUyLWI1OTYtZmE4NDcyZjY3Y2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUoK2AGVoyZJMvw9o1DNJqj/YmlhzewEiRTJrCALtKB0xxMGBmOjypT 02sxZwYyhH1OWpH44PnNT/qjJLm7rt7QygGHT7/WzwqWrgMJmA7DrxhPHe1GvbbB mOJFHXmRGOr7JleSw1uERvetTfDIAJHay4SONgb+SJVixeqWSjRN0J3hnLbk05yJ 6Qi/LDZmrM95gnnctbBjxxf8MoeydFCFG0acYQsu3E6r8liujwwyYu0VP4YRf3Ns qpB7gQrXoZpMZtRRiaYc1M198DUVvrxKr/0uBBpsYYA00ZVcRfVAdzn0icTbSpvo 2mglMboehHsHJDXqq0VYhWCXDufiuNY= -----END CERTIFICATE-----Generated at Fri May 9 03:42:07 2025 by rpki-client