$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa File: cb25a333-11c3-3035-a32b-9d722b26f788.roa (raw, json) Hash identifier: ajjABselkN2CDhAFGPWbVlYPLP2vFNEdM5BEf/cBWaY= Subject key identifier: E3:24:B0:47:4E:20:E6:BF:A3:23:D6:32:F0:47:F4:19:83:00:A8:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF5C647CC786DA96E55200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:5c:64:7c:c7:86:da:96:e5:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=f5b536a4-d208-430b-9484-57ca2774849d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:a7:3f:7f:de:13:4a:88:53:a1:cd:4f:66: 10:25:39:e3:27:a1:0f:13:1b:46:37:18:33:62:c1: e5:00:68:9d:7e:f9:67:2d:29:f4:a1:96:93:26:94: 1c:08:f1:9e:46:d2:77:59:ac:ed:28:23:14:b9:44: f8:d5:c7:d2:fb:d6:ce:5f:88:f9:41:d8:28:bf:17: a6:8f:b1:85:84:c1:1a:10:0f:71:4f:16:b8:59:33: cd:b5:d1:63:8f:e1:02:ca:4f:3b:f4:af:9d:a0:d6: 1c:6f:9d:e3:49:fa:86:8f:a1:fc:1c:c5:7e:08:7b: 23:85:6c:82:fa:4d:d1:65:b6:13:a0:a8:10:af:fd: f0:93:f1:21:42:0a:ff:2f:ea:70:40:39:43:7e:2b: 16:27:1b:75:df:dc:a7:81:84:f6:e8:6f:55:01:b0: 70:c3:1c:65:12:ee:80:8e:aa:18:7e:00:3c:fb:ed: d0:42:c9:5d:4e:9b:f8:91:b5:a8:25:9d:f5:d3:d8: d3:c1:7e:8d:15:e5:95:d6:d4:c5:02:7b:92:57:e3: 27:63:43:22:81:b0:3a:e6:f1:d7:46:21:40:7b:07: 3d:4c:c4:12:bd:07:aa:f1:a8:10:fd:6d:41:5b:39: cb:7b:fc:bc:ec:37:16:57:b7:06:70:e8:5f:91:69: c2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:24:B0:47:4E:20:E6:BF:A3:23:D6:32:F0:47:F4:19:83:00:A8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6b:14:a6:ab:fd:09:93:a9:3c:55:da:40:45:6e:07:e1:06: aa:07:57:27:78:7f:bc:3f:89:b9:50:1d:3e:00:14:b3:d4:03: 49:e7:f3:3d:56:d7:d0:99:72:45:29:a9:87:4d:f5:12:12:6f: 55:49:17:58:d2:88:7b:48:a7:28:46:ec:59:53:ea:de:97:43: 11:4e:a2:d3:6f:9a:00:c1:6f:4d:23:13:ff:f4:0c:98:4d:53: a6:9f:99:7c:bf:0b:9f:be:44:e0:f4:38:ca:22:83:73:1c:cb: 3b:bb:35:e5:f3:92:c1:a8:b5:9c:47:43:f9:72:62:45:1f:4e: ce:c5:24:1e:94:b4:2c:3c:21:fd:95:bb:60:85:55:91:b7:5b: 46:9c:25:81:2f:9f:80:12:d1:a9:b8:e5:b0:ea:80:0f:5c:ab: 9d:61:82:15:a9:87:a4:ce:b5:5d:59:86:f4:c7:14:58:0a:41: a3:35:44:9c:ae:5a:8a:5b:21:06:81:a1:b6:36:4c:65:2d:1d: 66:c8:a4:cd:60:9e:27:9d:e3:d9:2f:ca:fc:c2:45:3a:ee:db: 5d:76:c2:1c:14:cd:88:07:b7:5d:05:6c:b1:0f:0b:54:f7:17: a3:44:85:16:11:d6:dd:52:67:eb:d0:fd:79:9d:93:0f:83:17: 16:b1:d9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71xkfMeG2pblUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjViNTM2YTQtZDIwOC00MzBiLTk0ODQtNTdjYTI3NzQ4NDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj56nP3/eE0qIU6HNT2YQJTnjJ6EPExtGNxgz YsHlAGidfvlnLSn0oZaTJpQcCPGeRtJ3WaztKCMUuUT41cfS+9bOX4j5Qdgovxem j7GFhMEaEA9xTxa4WTPNtdFjj+ECyk879K+doNYcb53jSfqGj6H8HMV+CHsjhWyC +k3RZbYToKgQr/3wk/EhQgr/L+pwQDlDfisWJxt139yngYT26G9VAbBwwxxlEu6A jqoYfgA8++3QQsldTpv4kbWoJZ3109jTwX6NFeWV1tTFAnuSV+MnY0MigbA65vHX RiFAewc9TMQSvQeq8agQ/W1BWznLe/y87DcWV7cGcOhfkWnCwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMksEdOIOa/oyPWMvBH9BmDAKiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2IyNWEzMzMtMTFjMy0z MDM1LWEzMmItOWQ3MjJiMjZmNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtrFKar/QmTqTxV2kBFbgfhBqoHVyd4f7w/iblQHT4AFLPUA0nn8z1W 19CZckUpqYdN9RISb1VJF1jSiHtIpyhG7FlT6t6XQxFOotNvmgDBb00jE//0DJhN U6afmXy/C5++ROD0OMoig3Mcyzu7NeXzksGotZxHQ/lyYkUfTs7FJB6UtCw8If2V u2CFVZG3W0acJYEvn4AS0am45bDqgA9cq51hghWph6TOtV1ZhvTHFFgKQaM1RJyu WopbIQaBobY2TGUtHWbIpM1gnied49kvyvzCRTru2112whwUzYgHt10FbLEPC1T3 F6NEhRYR1t1SZ+vQ/Xmdkw+DFxax2Wk= -----END CERTIFICATE-----Generated at Thu May 8 23:14:18 2025 by rpki-client