$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa File: 127cab6c-cfe0-3d58-af0b-af059f2f8361.roa (raw, json) Hash identifier: 1U5RCMNICfOQmRBmDIdSZLoWcZeTXsxr0b3mBDkqn2M= Subject key identifier: 12:E0:57:D6:FD:04:6E:B6:27:92:E1:E2:F8:E5:E8:55:D3:91:74:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849E2250AC5968CCFC346AB36E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 30036 IP address blocks: 173.28.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:0a:c5:96:8c:cf:c3:46:ab:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=9051593d-ddd8-4f60-8ca4-2df5a8757e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:1d:96:a1:94:50:f1:dd:43:7c:b3:47:ce: 71:1a:1c:bc:b6:b9:b6:10:df:e4:e2:fa:9a:38:42: 9d:5b:d4:79:d7:c1:71:dd:be:c5:10:5b:36:36:7f: eb:31:c3:1c:05:6f:e6:c4:0f:1b:34:18:62:d5:05: 38:dd:b6:25:72:a9:f5:7b:33:69:52:e6:8b:b4:2e: aa:ea:53:53:52:86:65:5e:33:d6:52:4b:2d:fa:8c: 70:fd:eb:60:5c:9b:da:fa:a6:9b:2c:63:a8:a4:c0: eb:cf:09:22:81:21:92:3d:69:65:d3:5a:73:5a:d1: 98:ad:49:9c:d5:f7:6b:4d:5c:0e:9d:b0:49:0a:e5: 7c:2e:b3:1a:5a:2a:a0:06:5d:2d:26:d0:43:37:74: 07:ec:47:a4:01:94:48:ca:d8:90:6c:c9:92:99:ca: f9:fb:74:2d:bc:b9:df:94:42:5f:7a:0f:1b:61:3b: 90:da:be:df:8e:20:3a:2f:d5:eb:7e:82:0d:59:d5: e3:4c:1a:c6:c0:d4:64:9b:a7:4b:a1:da:37:f2:bd: fb:61:12:62:d6:af:8e:4f:c7:d0:d5:07:fb:27:78: f0:4d:af:32:a5:96:64:ca:8c:33:48:6f:0b:4f:fd: 24:2e:15:a3:3c:63:ad:82:51:83:22:e2:6e:ce:17: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:57:D6:FD:04:6E:B6:27:92:E1:E2:F8:E5:E8:55:D3:91:74:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1d:ea:8d:00:f3:22:80:5a:a9:6d:22:9a:fc:ef:87:d7:7e: 09:a0:3c:6f:37:65:05:6b:44:84:c6:e6:75:8e:27:88:ac:c9: 71:f4:60:9e:1b:ef:50:d4:e1:d6:a9:06:b2:e5:8a:90:ba:49: 05:e9:77:68:79:1d:44:a7:65:e1:e6:f0:0b:17:83:f2:6e:da: 73:11:df:91:7c:21:9c:b0:ec:a7:2d:a1:c9:49:cc:7d:35:da: 48:a1:55:73:6a:2f:7e:a8:cb:02:27:f1:41:89:b9:7f:01:ca: e9:1d:08:1a:03:23:14:b9:cb:46:d5:49:79:68:84:ee:66:4b: 02:35:d4:ea:df:48:63:1d:30:f3:42:a2:42:e8:47:81:bf:6c: 27:17:e3:54:32:2e:3e:d2:4c:ae:cf:35:64:f2:b8:45:94:ce: b0:1b:53:f0:c0:11:40:fe:ed:8c:74:94:85:96:20:30:2b:60: 5f:44:45:f6:67:2d:9e:c8:53:cc:e8:76:bb:6e:a2:35:d1:4a: 72:20:05:3a:76:f6:e2:ee:3a:51:89:7f:ca:57:d0:5a:6e:eb: f3:66:bc:50:b9:2b:86:c4:b7:83:f1:63:7a:ed:b8:d9:63:d3: bc:ef:80:9e:a4:4d:36:f7:8f:70:8e:75:3c:99:26:ee:00:c5: c7:8d:16:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJQrFlozPw0arNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk OTA1MTU5M2QtZGRkOC00ZjYwLThjYTQtMmRmNWE4NzU3ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCcdlqGUUPHdQ3yzR85xGhy8trm2EN/k4vqa OEKdW9R518Fx3b7FEFs2Nn/rMcMcBW/mxA8bNBhi1QU43bYlcqn1ezNpUuaLtC6q 6lNTUoZlXjPWUkst+oxw/etgXJva+qabLGOopMDrzwkigSGSPWll01pzWtGYrUmc 1fdrTVwOnbBJCuV8LrMaWiqgBl0tJtBDN3QH7EekAZRIytiQbMmSmcr5+3QtvLnf lEJfeg8bYTuQ2r7fjiA6L9XrfoINWdXjTBrGwNRkm6dLodo38r37YRJi1q+OT8fQ 1Qf7J3jwTa8ypZZkyowzSG8LT/0kLhWjPGOtglGDIuJuzhf+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLgV9b9BG62J5Lh4vjl6FXTkXQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTI3Y2FiNmMtY2ZlMC0z ZDU4LWFmMGItYWYwNTlmMmY4MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFod6o0A8yKAWqltIpr874fXfgmgPG83ZQVrRITG5nWOJ4isyXH0YJ4b 71DU4dapBrLlipC6SQXpd2h5HUSnZeHm8AsXg/Ju2nMR35F8IZyw7KctoclJzH01 2kihVXNqL36oywIn8UGJuX8ByukdCBoDIxS5y0bVSXlohO5mSwI11OrfSGMdMPNC okLoR4G/bCcX41QyLj7STK7PNWTyuEWUzrAbU/DAEUD+7Yx0lIWWIDArYF9ERfZn LZ7IU8zodrtuojXRSnIgBTp29uLuOlGJf8pX0Fpu6/NmvFC5K4bEt4PxY3rtuNlj 07zvgJ6kTTb3j3COdTyZJu4AxceNFro= -----END CERTIFICATE-----Generated at Sun Jun 15 21:20:48 2025 by rpki-client