$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03cbbe4a-7e50-3685-9e10-e26f8155eab6.roa File: 03cbbe4a-7e50-3685-9e10-e26f8155eab6.roa (raw, json) Hash identifier: R+Oa1TR/u8Ayhqh5HZU85HR3S25HXYbhlwOz1S8hCQk= Subject key identifier: 8A:17:67:C6:E9:17:32:51:E2:93:49:AC:57:8D:4C:4F:BB:43:F3:06 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BCDB99CD295C94AF3B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03cbbe4a-7e50-3685-9e10-e26f8155eab6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bc:db:99:cd:29:5c:94:af:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d34e48c2-22d4-48fd-8cc7-5946d8363b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:c5:59:41:ab:2b:d7:ef:22:78:64:d1:d4: 1c:22:29:8a:ae:cc:1b:fd:38:d5:4e:1b:7c:b3:a9: e3:e3:46:6d:42:00:a2:cf:72:41:8c:ab:9f:9d:d9: 1a:f8:0b:2c:e8:09:8e:3a:8d:ff:d0:ef:d9:43:14: eb:41:69:9b:f1:35:63:82:7e:87:10:39:32:50:5f: 3a:b8:b6:3f:6b:35:4c:8e:62:a1:8a:b0:60:c2:ba: 67:b7:6d:bd:7b:e4:4f:83:f0:a5:11:c4:5d:8a:f0: 85:68:27:cd:46:25:7f:b1:68:a8:18:c3:35:76:2f: db:6e:69:7e:1a:2a:e0:60:8a:47:58:4e:ed:4a:2f: cf:21:02:c7:f3:39:55:06:af:6e:71:69:8d:90:4e: 67:40:c9:dc:0d:34:01:65:ae:5d:fe:a2:ea:e4:79: b8:f3:6f:13:4c:af:3c:0b:b1:76:2f:7e:bb:09:3c: 02:18:e2:78:f9:6a:5b:7c:e1:f4:28:63:cd:7f:bf: de:2b:8b:20:92:3d:f6:2d:37:85:df:67:c7:b0:d9: 41:7a:ed:e1:00:af:03:c0:73:64:05:f5:3c:d1:f0: 5c:81:d3:45:c0:f6:fe:43:ce:f0:b1:d7:20:15:0b: e6:a9:9b:9c:65:f6:94:28:c6:51:b1:56:10:c1:7d: 6e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:17:67:C6:E9:17:32:51:E2:93:49:AC:57:8D:4C:4F:BB:43:F3:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03cbbe4a-7e50-3685-9e10-e26f8155eab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d3:63:e9:66:14:07:69:f7:d1:c9:e3:4c:1f:cb:52:20:71: ab:ce:85:e4:30:b0:8b:9c:56:8f:a6:ba:d7:21:cf:3f:a7:bf: 08:83:b7:df:6e:b9:78:32:6b:15:13:b4:f2:25:9b:49:23:44: a8:c2:26:ec:e6:94:69:29:bd:85:3b:d2:4b:28:d1:d1:a4:16: cf:a1:69:90:97:7c:18:1d:36:db:a0:f0:bd:d5:aa:a2:91:64: 30:47:cb:7e:1e:79:f5:0c:c5:59:e2:64:06:4f:21:31:ab:33: 33:dd:50:9f:85:7d:82:de:f7:2c:bc:19:66:a8:19:b7:a7:7c: 24:86:21:10:86:be:cc:89:7c:ba:98:8d:7b:a2:a1:e4:19:ad: 1f:31:18:16:73:6f:fe:63:f6:39:0d:9e:8d:32:9d:58:b9:b3: a8:25:fc:5a:c0:bf:53:4c:81:4b:b2:1a:8c:0f:c7:2a:a2:d6: 95:76:16:69:00:7d:64:7b:c6:a6:34:c6:e3:82:ef:18:a3:5d: 77:3a:79:2c:49:dc:fe:66:83:a2:3f:7c:8f:0d:c5:fa:77:70: 4f:ea:3a:de:24:d6:ee:bc:4b:f0:31:23:08:a0:b0:2e:7b:07: 7b:34:44:22:d6:de:c6:46:84:96:1f:c8:e0:e0:aa:81:0e:ef: 5b:e6:31:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLzbmc0pXJSvO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDM0ZTQ4YzItMjJkNC00OGZkLThjYzctNTk0NmQ4MzYzYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sPFWUGrK9fvInhk0dQcIimKrswb/TjVTht8 s6nj40ZtQgCiz3JBjKufndka+Ass6AmOOo3/0O/ZQxTrQWmb8TVjgn6HEDkyUF86 uLY/azVMjmKhirBgwrpnt229e+RPg/ClEcRdivCFaCfNRiV/sWioGMM1di/bbml+ GirgYIpHWE7tSi/PIQLH8zlVBq9ucWmNkE5nQMncDTQBZa5d/qLq5Hm4828TTK88 C7F2L367CTwCGOJ4+WpbfOH0KGPNf7/eK4sgkj32LTeF32fHsNlBeu3hAK8DwHNk BfU80fBcgdNFwPb+Q87wsdcgFQvmqZucZfaUKMZRsVYQwX1u9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoXZ8bpFzJR4pNJrFeNTE+7Q/MGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDNjYmJlNGEtN2U1MC0z Njg1LTllMTAtZTI2ZjgxNTVlYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPTY+lmFAdp99HJ40wfy1IgcavOheQwsIucVo+mutchzz+nvwiDt99u uXgyaxUTtPIlm0kjRKjCJuzmlGkpvYU70kso0dGkFs+haZCXfBgdNtug8L3VqqKR ZDBHy34eefUMxVniZAZPITGrMzPdUJ+FfYLe9yy8GWaoGbenfCSGIRCGvsyJfLqY jXuioeQZrR8xGBZzb/5j9jkNno0ynVi5s6gl/FrAv1NMgUuyGowPxyqi1pV2FmkA fWR7xqY0xuOC7xijXXc6eSxJ3P5mg6I/fI8Nxfp3cE/qOt4k1u68S/AxIwigsC57 B3s0RCLW3sZGhJYfyODgqoEO71vmMT8= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:46 2025 by rpki-client