$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8294f3-c9bd-31ba-8987-0c38d4062800.roa File: 2a8294f3-c9bd-31ba-8987-0c38d4062800.roa (raw, json) Hash identifier: jrYxccDjfk5uUiGucy8ZriX32Zo4NNZ5OMHFpA+1Cf0= Subject key identifier: 66:6F:B5:4B:B9:E2:A6:84:17:19:14:1A:91:53:E8:94:86:E5:7E:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849DCF91B16C553BFFD951DCEC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8294f3-c9bd-31ba-8987-0c38d4062800.roa Signing time: Thu 15 May 2025 16:33:35 +0000 ROA not before: Thu 15 May 2025 16:33:35 +0000 ROA not after: Wed 13 Aug 2025 16:33:35 +0000 asID: 30036 IP address blocks: 173.28.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:f9:1b:16:c5:53:bf:fd:95:1d:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 15 16:33:35 2025 GMT Not After : Aug 13 16:33:35 2025 GMT Subject: CN=78f59cd3-fc94-4213-8cc7-8ba7b1b3bbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5a:0a:78:bb:03:b7:6e:1e:93:c6:81:ee:bc: d7:bb:38:5c:ad:58:0c:e1:b4:b1:87:2e:22:dc:36: ff:45:a4:5c:b6:90:6c:34:be:8e:e0:36:a6:4b:94: f5:a0:ae:78:9f:83:3d:d5:4e:2e:4f:88:0b:51:50: 44:b0:b3:79:fa:7b:59:be:63:e0:d5:b1:20:81:4f: 40:97:13:ce:5b:57:55:66:bf:e8:c7:fb:25:50:c1: 56:d0:48:84:58:b2:41:11:cd:52:a1:b1:88:4c:00: 61:09:ac:9c:1a:07:f1:d1:36:dd:00:3c:a1:4c:fd: 09:b4:6d:8e:83:7a:04:2d:a4:3c:bf:ed:de:4f:ff: 95:43:21:87:fa:35:be:43:ca:8c:2d:62:29:63:66: 4d:52:e5:30:c9:d6:34:7d:a8:0b:42:0a:f9:ab:6e: 65:bb:00:1e:98:49:e4:ab:db:e7:b5:07:f5:6b:85: f3:65:a6:6c:72:19:19:69:e4:84:8a:88:7f:e4:ad: 2d:3d:f5:0b:9f:13:ec:d3:36:1d:0d:ca:ef:1d:1e: ab:c6:b1:44:55:62:ef:76:69:7b:0f:88:16:50:7e: 14:11:62:29:15:3f:ad:a7:db:08:17:1b:d8:7e:d8: 62:3d:46:e1:c4:fb:00:29:74:52:d1:14:15:6a:10: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6F:B5:4B:B9:E2:A6:84:17:19:14:1A:91:53:E8:94:86:E5:7E:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8294f3-c9bd-31ba-8987-0c38d4062800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:75:f3:2d:4d:90:49:48:45:81:52:ac:e3:d0:b5:ac:97:cb: 65:02:00:7a:fc:0e:32:17:2d:7c:c5:d9:26:f4:a6:22:ba:0a: 69:a5:ab:2f:1d:06:5c:1f:f9:19:cc:82:21:2e:63:3d:63:98: fc:b4:9a:86:dc:d0:04:67:e5:ea:6d:07:7e:93:bd:d0:96:bd: cf:33:11:1f:26:1e:44:18:ad:7a:e6:e0:1c:22:d7:29:f3:a4: d5:2b:25:1d:d4:1f:29:a7:98:c4:bb:39:76:2d:0b:24:44:51: 51:2b:49:8e:fc:38:99:0d:fa:de:0c:4c:ff:fe:f0:0e:12:09: fc:20:ff:a9:6a:d4:6b:02:9f:cb:ba:a2:bf:3f:d8:8e:b1:e7: 0e:4a:9b:5c:0f:b6:a3:8c:94:3b:75:05:6b:8f:e6:67:88:92: 28:aa:3e:df:fa:e5:0e:77:a3:c4:b8:c9:1c:70:b5:6f:b9:82: 19:cb:d9:9c:2f:63:f3:55:bf:65:89:e5:81:df:b8:c8:e1:be: f7:f5:f2:9d:4f:7b:23:65:e2:c3:9d:5a:ce:2c:97:da:77:51: 3d:54:aa:ed:f2:e5:d1:a0:38:f8:5c:47:4f:ae:72:88:90:27: f7:26:56:97:6a:82:b7:80:b0:ad:e7:59:b3:21:0d:aa:ba:5d: de:ad:76:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnc+RsWxVO//ZUdzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUxNTE2MzMzNVoXDTI1MDgxMzE2MzMzNVowLzEtMCsGA1UEAxMk NzhmNTljZDMtZmM5NC00MjEzLThjYzctOGJhN2IxYjNiYmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFoKeLsDt24ek8aB7rzXuzhcrVgM4bSxhy4i 3Db/RaRctpBsNL6O4DamS5T1oK54n4M91U4uT4gLUVBEsLN5+ntZvmPg1bEggU9A lxPOW1dVZr/ox/slUMFW0EiEWLJBEc1SobGITABhCaycGgfx0TbdADyhTP0JtG2O g3oELaQ8v+3eT/+VQyGH+jW+Q8qMLWIpY2ZNUuUwydY0fagLQgr5q25luwAemEnk q9vntQf1a4XzZaZschkZaeSEioh/5K0tPfULnxPs0zYdDcrvHR6rxrFEVWLvdml7 D4gWUH4UEWIpFT+tp9sIFxvYfthiPUbhxPsAKXRS0RQVahDqXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZvtUu54qaEFxkUGpFT6JSG5X6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmE4Mjk0ZjMtYzliZC0z MWJhLTg5ODctMGMzOGQ0MDYyODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB18y1NkElIRYFSrOPQtayXy2UCAHr8DjIXLXzF2Sb0piK6Cmmlqy8d Blwf+RnMgiEuYz1jmPy0mobc0ARn5eptB36TvdCWvc8zER8mHkQYrXrm4Bwi1ynz pNUrJR3UHymnmMS7OXYtCyREUVErSY78OJkN+t4MTP/+8A4SCfwg/6lq1GsCn8u6 or8/2I6x5w5Km1wPtqOMlDt1BWuP5meIkiiqPt/65Q53o8S4yRxwtW+5ghnL2Zwv Y/NVv2WJ5YHfuMjhvvf18p1PeyNl4sOdWs4sl9p3UT1Uqu3y5dGgOPhcR0+ucoiQ J/cmVpdqgreAsK3nWbMhDaq6Xd6tdkI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:47:44 2025 by rpki-client