$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa File: 1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa (raw, json) Hash identifier: HE0/XOXSvX80ii3vQalj20dggFoJChMUaALi77vSX44= Subject key identifier: FF:0A:03:58:42:AD:8F:44:D6:21:88:AF:2D:86:F8:F8:FE:CD:69:2A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3C6F9CCA4B577E5E9280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3c:6f:9c:ca:4b:57:7e:5e:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=654eb9f2-eeb9-43d5-ab2d-b175029cadf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:36:e6:cf:39:24:c5:fb:0a:26:d3:4d:33:c0: d3:e9:c4:a5:ca:0e:df:f9:d4:f3:53:3c:d2:2d:af: b3:ae:ac:31:45:78:1d:6f:ff:be:a5:b7:3d:3b:d0: f9:8e:17:ac:30:c4:a6:0c:9e:45:f8:ee:97:41:da: ad:3d:01:24:f0:35:57:89:d6:85:9f:a6:5e:f2:33: 2b:1b:90:e1:5d:ea:8e:3a:e2:fd:90:00:2d:c7:55: 4d:d8:97:cd:d7:3f:0f:cc:04:56:83:b8:37:23:22: 18:8e:c7:e5:3a:04:8e:bc:ec:6f:d3:ec:32:9d:ed: 8d:1c:0b:a6:35:68:02:e7:d4:a5:4e:c8:9c:11:f4: 6e:56:91:0e:4a:72:13:a1:8c:e1:19:97:c1:63:4d: 03:0d:94:2e:b1:56:d4:55:d8:7f:c2:7b:a8:c0:ad: 80:62:04:81:90:f0:0c:07:a7:da:0b:08:91:7a:a2: 6d:46:8d:e6:73:89:b1:bc:83:1e:e4:5e:3a:d8:a2: f4:ff:27:07:04:88:0e:cd:93:85:77:f6:47:cb:b2: e3:a2:6d:ca:cc:d3:c9:34:bf:10:6c:ad:c6:b9:13: ad:ce:06:75:b2:77:e6:3b:bf:d7:6c:fb:2f:46:8f: 78:38:da:e8:7a:41:e2:2a:9e:7e:4c:33:d9:e2:7e: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:03:58:42:AD:8F:44:D6:21:88:AF:2D:86:F8:F8:FE:CD:69:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:26:10:ae:a2:09:8d:ab:66:89:5f:a2:ab:67:e5:9d:3a:43: af:1c:c4:cc:89:f0:da:8f:66:6e:80:09:8d:f2:b5:a9:c8:f3: 58:19:5b:b9:f6:2b:ee:78:2a:ea:8a:7f:90:2d:17:df:3e:c7: 46:84:22:d0:8f:a6:b9:af:fe:1b:80:53:7f:50:2e:3c:e1:6c: b6:5a:98:5c:ea:89:18:a3:2c:93:3f:c3:7e:8b:db:7d:e4:f7: b8:0a:e5:fe:7f:b7:9d:81:73:dc:bb:e0:86:f4:43:73:a9:8d: 8d:d5:3f:51:a0:12:39:88:96:58:5a:71:28:cb:ff:3a:2f:5b: e1:42:2e:1d:3b:ad:4d:a6:e0:41:2e:01:1e:84:9b:83:18:92: 5b:67:fe:2d:b1:12:05:82:eb:bf:8f:7f:0f:c7:aa:1c:de:d8: 0e:28:db:2e:36:e6:9f:f1:82:17:30:64:ff:59:ad:45:aa:b1: 0f:3d:1a:40:b9:17:9d:0f:a9:b8:df:f4:f4:fa:83:8a:84:3a: 0e:96:3c:f9:90:54:9e:b9:1a:5e:be:4f:b1:89:fa:90:d3:cc: f5:19:ce:57:6c:f3:ad:e8:38:a7:fc:d0:88:7a:47:82:39:dc: 8b:c3:34:94:d3:53:da:d1:5e:cf:05:41:5d:f6:9f:c1:9e:f4: c4:cb:b4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujxvnMpLV35ekoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjU0ZWI5ZjItZWViOS00M2Q1LWFiMmQtYjE3NTAyOWNhZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDbmzzkkxfsKJtNNM8DT6cSlyg7f+dTzUzzS La+zrqwxRXgdb/++pbc9O9D5jhesMMSmDJ5F+O6XQdqtPQEk8DVXidaFn6Ze8jMr G5DhXeqOOuL9kAAtx1VN2JfN1z8PzARWg7g3IyIYjsflOgSOvOxv0+wyne2NHAum NWgC59SlTsicEfRuVpEOSnIToYzhGZfBY00DDZQusVbUVdh/wnuowK2AYgSBkPAM B6faCwiReqJtRo3mc4mxvIMe5F462KL0/ycHBIgOzZOFd/ZHy7Ljom3KzNPJNL8Q bK3GuROtzgZ1snfmO7/XbPsvRo94ONroekHiKp5+TDPZ4n7YrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8KA1hCrY9E1iGIry2G+Pj+zWkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTM5N2EwZGQtZjI5My0z YWMxLThjOTYtMTZhYzNlNGUyOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYmEK6iCY2rZolfoqtn5Z06Q68cxMyJ8NqPZm6ACY3ytanI81gZW7n2 K+54KuqKf5AtF98+x0aEItCPprmv/huAU39QLjzhbLZamFzqiRijLJM/w36L233k 97gK5f5/t52Bc9y74Ib0Q3OpjY3VP1GgEjmIllhacSjL/zovW+FCLh07rU2m4EEu AR6Em4MYkltn/i2xEgWC67+Pfw/Hqhze2A4o2y425p/xghcwZP9ZrUWqsQ89GkC5 F50Pqbjf9PT6g4qEOg6WPPmQVJ65Gl6+T7GJ+pDTzPUZzlds863oOKf80Ih6R4I5 3IvDNJTTU9rRXs8FQV32n8Ge9MTLtJ4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:26 2025 by rpki-client