$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa File: 0a230c6b-2917-388b-a676-14d9d9ea00e2.roa (raw, json) Hash identifier: kmKBDS3z9+hR2ekchSLtfnCyKqfKh/52UY/aykF2ViY= Subject key identifier: 61:E5:80:7C:44:A5:E1:5D:67:4A:56:95:55:84:EF:49:A3:61:22:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A9C96A8D1E79BFCBED40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a9:c9:6a:8d:1e:79:bf:cb:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d74a5918-e903-4661-8120-c081a1423ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:94:8a:a0:bc:af:3d:b1:00:5a:f0:12:3a:2a: 4a:be:6b:6c:e9:d8:77:9e:a7:d6:bc:e8:c7:d4:0d: 06:d0:d8:52:d2:d8:e4:93:fa:b7:f8:85:04:82:fc: 66:96:d1:fa:7b:62:71:06:12:7c:46:9e:d1:5f:96: 0a:55:22:92:7d:a1:c3:8b:33:de:59:74:2d:00:5c: 13:54:40:62:c7:b7:91:ed:b7:03:a5:06:71:bd:2b: 53:b5:6f:04:01:fd:49:a8:93:11:08:ec:6a:21:66: 95:9e:54:f8:e5:b7:d7:0c:1b:90:3e:84:ef:39:aa: 31:42:fe:9e:1d:d2:e2:18:6d:ae:4b:64:35:40:cd: a3:f4:4c:e2:48:b4:e9:98:f5:70:04:5b:d9:44:da: 6c:dc:45:21:0f:aa:92:cd:39:a1:08:98:78:dd:ad: 2c:08:a7:4a:28:74:02:bb:71:81:39:b3:f0:70:9b: e9:51:6e:72:1a:2a:e2:de:c2:37:18:b7:62:41:11: 1c:d7:10:81:01:87:06:33:89:d4:dd:e6:e7:a7:dd: 45:77:b2:90:50:0f:06:46:76:08:7b:f6:18:7e:6d: 6c:2a:4c:30:5d:21:72:56:10:99:6a:ea:39:c7:c1: ee:e4:bd:05:d0:b6:fb:75:d8:a7:1a:10:c6:fb:eb: ab:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E5:80:7C:44:A5:E1:5D:67:4A:56:95:55:84:EF:49:A3:61:22:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6b:19:09:73:98:d1:ae:a9:ef:07:53:31:22:2c:93:0b:ea: a7:5e:c1:ab:9d:81:ca:4b:a4:e8:e0:aa:0b:d2:e2:4d:60:e5: b7:3f:1f:02:d2:98:ad:0b:2b:f3:87:f7:b3:3c:87:ad:28:2d: bd:b6:12:ae:c2:a1:37:76:a0:94:5f:01:3c:81:1b:f7:d6:06: 05:e8:2c:12:f5:69:ef:92:93:20:e6:cb:a4:8f:07:78:ba:13: 51:2f:a5:2e:ef:d9:c5:5a:cf:90:e2:bb:1b:3f:34:41:2c:44: 6e:b3:9c:1c:49:6e:db:85:9b:e5:d2:78:4e:3f:b9:05:79:11: 8d:a1:e2:08:2d:d4:d9:59:e7:f5:83:d4:e8:bf:ab:7a:01:e7: 15:28:b2:db:7a:30:2e:6e:1e:f6:5f:e7:73:70:67:3f:c6:84: 20:d9:c3:a6:e6:0f:24:a0:a2:21:88:a7:8b:6c:e5:42:34:48: 28:32:19:75:69:21:c8:7d:7b:b6:bf:16:c2:86:cd:9c:b6:75: 73:1c:ce:b4:80:a0:05:ce:15:16:f5:34:21:00:fa:23:87:33: 20:98:4b:98:14:b3:50:13:42:26:25:07:21:02:44:49:c9:20: f9:0c:1c:26:2d:a3:01:34:c0:35:96:9a:cf:98:70:ca:01:a0: 18:39:71:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKnJao0eeb/L7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDc0YTU5MTgtZTkwMy00NjYxLTgxMjAtYzA4MWExNDIzZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZSKoLyvPbEAWvASOipKvmts6dh3nqfWvOjH 1A0G0NhS0tjkk/q3+IUEgvxmltH6e2JxBhJ8Rp7RX5YKVSKSfaHDizPeWXQtAFwT VEBix7eR7bcDpQZxvStTtW8EAf1JqJMRCOxqIWaVnlT45bfXDBuQPoTvOaoxQv6e HdLiGG2uS2Q1QM2j9EziSLTpmPVwBFvZRNps3EUhD6qSzTmhCJh43a0sCKdKKHQC u3GBObPwcJvpUW5yGiri3sI3GLdiQREc1xCBAYcGM4nU3ebnp91Fd7KQUA8GRnYI e/YYfm1sKkwwXSFyVhCZauo5x8Hu5L0F0Lb7ddinGhDG++uruQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHlgHxEpeFdZ0pWlVWE70mjYSLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGEyMzBjNmItMjkxNy0z ODhiLWE2NzYtMTRkOWQ5ZWEwMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5rGQlzmNGuqe8HUzEiLJML6qdewaudgcpLpOjgqgvS4k1g5bc/HwLS mK0LK/OH97M8h60oLb22Eq7CoTd2oJRfATyBG/fWBgXoLBL1ae+SkyDmy6SPB3i6 E1EvpS7v2cVaz5Diuxs/NEEsRG6znBxJbtuFm+XSeE4/uQV5EY2h4ggt1NlZ5/WD 1Oi/q3oB5xUostt6MC5uHvZf53NwZz/GhCDZw6bmDySgoiGIp4ts5UI0SCgyGXVp Ich9e7a/FsKGzZy2dXMczrSAoAXOFRb1NCEA+iOHMyCYS5gUs1ATQiYlByECREnJ IPkMHCYtowE0wDWWms+YcMoBoBg5cbs= -----END CERTIFICATE-----Generated at Sun Apr 27 00:05:35 2025 by rpki-client