$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa File: 28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa (raw, json) Hash identifier: sJf/3ysQmPd7U3ft9s4gxeoNfK0oClWCqGDaCbrPZVU= Subject key identifier: 25:31:66:53:84:A5:4D:3A:A1:32:C0:1E:D8:3E:24:FF:E7:EF:0D:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F2F200F75D3E322802490 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.20.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:2f:20:0f:75:d3:e3:22:80:24:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=95f612b8-32b0-443e-8b8c-98c68805b4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:e6:83:2d:b0:73:21:2a:df:01:90:0e:fc: 4b:ac:41:cf:0c:50:0c:f2:85:ee:12:18:64:ce:5a: f2:a0:a8:55:73:5f:57:76:59:7f:8a:0b:29:60:45: 6e:75:20:d8:80:f0:6d:ea:7e:f1:78:34:d3:fb:57: 50:e4:33:a8:51:3e:e4:39:8a:91:4f:e3:68:a6:94: 2f:65:07:00:fc:41:46:6b:cd:eb:a4:b7:7b:dd:20: 87:cd:cd:6d:65:14:be:0e:68:71:e9:c4:c7:dd:9c: a5:e9:79:10:ca:93:ec:88:9d:9b:68:41:d3:2e:ce: c0:d3:2a:1e:53:35:a2:f3:18:f9:85:c0:b8:a2:55: cc:88:7c:ee:ad:a6:f4:2a:96:0e:e8:71:f4:a9:3f: d7:d9:8d:d0:ac:f2:6e:c5:e2:e5:3b:54:d4:a8:b6: e4:78:25:ab:8f:55:1c:a4:54:d5:f8:b8:db:b1:4f: 08:57:34:c7:77:9b:e4:2f:db:5c:b8:db:bb:35:70: f2:a1:18:91:f0:a0:cf:06:2d:94:64:fa:02:00:76: ab:c2:28:b4:ba:d4:5b:76:7c:3e:bc:bb:ac:e9:73: 9a:bc:00:d1:04:4c:f8:1a:32:c2:70:06:14:5d:fb: 93:b3:38:70:b1:08:4f:2b:ba:57:b1:ca:66:39:72: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:66:53:84:A5:4D:3A:A1:32:C0:1E:D8:3E:24:FF:E7:EF:0D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:95:84:7c:3c:f0:ae:1a:80:52:80:c6:90:3b:57:ef:d1:ad: 7b:66:9e:ed:ae:91:52:0d:7e:d9:30:18:06:9f:32:80:0b:d8: cb:93:1d:37:23:26:eb:99:64:ab:5e:75:52:88:93:31:91:d1: 01:31:b3:47:ba:4e:c2:8d:8c:96:35:ee:fc:c2:5c:a8:d7:53: 8d:88:ad:28:92:20:07:13:6e:aa:1f:2a:02:14:8a:f0:e0:62: 9a:27:1d:ed:91:ef:f6:6d:43:22:24:72:11:9d:a4:8a:0a:92: 61:2c:e3:d1:4d:dc:79:70:a6:e2:d5:a8:a3:7e:ac:04:76:65: bc:cb:f4:c0:b3:ba:d7:a8:48:ff:e4:92:24:6c:1d:05:7c:22: 22:23:fb:97:04:ff:bd:29:7a:96:d9:0b:d4:ea:0c:33:a8:14: 2d:f5:73:36:84:b7:45:06:f9:6b:ac:a7:3c:d6:2f:b5:fa:2a: 71:94:39:50:1b:c5:01:47:c0:39:b4:e2:be:00:8c:1a:c2:76: a5:97:d8:ec:11:30:89:17:91:a4:b2:38:51:28:ee:06:50:ac: c0:90:99:9c:bf:56:f3:d0:e2:db:12:77:ef:0f:27:ed:64:9c: 3f:9d:50:38:9e:04:de:47:a4:37:aa:7e:cb:57:63:a0:2e:63: dd:52:15:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHy8gD3XT4yKAJJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk OTVmNjEyYjgtMzJiMC00NDNlLThiOGMtOThjNjg4MDViNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwHmgy2wcyEq3wGQDvxLrEHPDFAM8oXuEhhk zlryoKhVc19Xdll/igspYEVudSDYgPBt6n7xeDTT+1dQ5DOoUT7kOYqRT+NoppQv ZQcA/EFGa83rpLd73SCHzc1tZRS+Dmhx6cTH3Zyl6XkQypPsiJ2baEHTLs7A0yoe UzWi8xj5hcC4olXMiHzurab0KpYO6HH0qT/X2Y3QrPJuxeLlO1TUqLbkeCWrj1Uc pFTV+LjbsU8IVzTHd5vkL9tcuNu7NXDyoRiR8KDPBi2UZPoCAHarwii0utRbdnw+ vLus6XOavADRBEz4GjLCcAYUXfuTszhwsQhPK7pXscpmOXIfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUxZlOEpU06oTLAHtg+JP/n7w1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjhlN2QyNjgtMjZiZC0z YmI4LWIxYzMtODFmYTI3MThhMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKVhHw88K4agFKAxpA7V+/RrXtmnu2ukVINftkwGAafMoAL2MuTHTcj JuuZZKtedVKIkzGR0QExs0e6TsKNjJY17vzCXKjXU42IrSiSIAcTbqofKgIUivDg YponHe2R7/ZtQyIkchGdpIoKkmEs49FN3HlwpuLVqKN+rAR2ZbzL9MCzuteoSP/k kiRsHQV8IiIj+5cE/70pepbZC9TqDDOoFC31czaEt0UG+WuspzzWL7X6KnGUOVAb xQFHwDm04r4AjBrCdqWX2OwRMIkXkaSyOFEo7gZQrMCQmZy/VvPQ4tsSd+8PJ+1k nD+dUDieBN5HpDeqfstXY6AuY91SFQY= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:58 2025 by rpki-client