$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa File: 2d526aab-3817-3369-8704-f5e3258bccd6.roa (raw, json) Hash identifier: S9PvQVx3BB1//kjJPB05sL53GpXvP4xOszT1O6kROCE= Subject key identifier: 2F:01:E5:C4:BB:56:B2:AF:02:5F:21:AC:C5:5D:66:F9:C0:49:9A:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A3632DD225197456AD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a3:63:2d:d2:25:19:74:56:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a26f70fe-217d-4cf8-baf1-c5f1723c000e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:b2:4f:3c:2c:ae:80:31:89:84:fd:cf:69: 5c:d5:16:e7:82:98:0e:35:01:86:8d:09:35:c5:af: 9f:67:80:c4:54:2b:f0:dd:3c:5a:d4:5e:65:38:83: 1a:f9:58:a0:ab:a1:13:0b:51:a0:4a:5f:5c:2f:51: 13:ed:da:c5:c1:4f:50:3c:85:44:57:08:18:34:92: b8:bf:65:3f:38:da:2f:d0:98:47:85:50:d4:8a:b5: 9c:60:6a:4a:4e:95:17:0f:f9:84:a4:51:49:eb:5f: f1:45:cc:4d:0e:aa:7c:f1:74:cd:fc:7d:38:4e:88: 41:b2:6d:02:62:c3:4d:6c:b8:d5:7c:a8:81:42:98: ba:d2:2b:00:ae:fd:d6:59:25:b7:b9:f6:53:56:42: 17:9f:fa:64:54:e8:70:13:1f:bd:e2:05:75:39:b6: 9b:53:55:86:33:3d:b9:85:5e:d5:91:c9:80:03:4f: 08:c7:53:fe:53:58:a2:b4:b0:84:f0:f1:a5:da:03: 68:27:d1:30:96:d5:26:ba:d5:80:74:ab:ca:ad:a9: 10:62:29:8f:a2:9f:f8:64:fc:93:cd:d3:45:f3:4f: ef:e6:c5:d8:4c:22:96:83:30:3f:53:20:ce:06:b7: 5c:06:77:c1:f2:3f:70:64:4c:e8:19:d9:e4:d4:50: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:01:E5:C4:BB:56:B2:AF:02:5F:21:AC:C5:5D:66:F9:C0:49:9A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d6:9a:32:c2:39:7d:ba:99:82:2e:18:0d:4b:44:40:f4:e8: fb:c5:72:5b:0b:39:2e:34:9b:9f:b9:ca:2f:1a:97:7a:3c:fc: 5b:d0:57:5f:69:12:ad:58:a7:9b:f6:99:2b:40:49:f4:ed:4d: 5d:7d:88:1f:26:a6:ea:ed:f5:c9:23:2f:da:dc:94:b1:5e:dd: a5:11:5d:8f:33:6e:43:5a:ba:94:f8:f9:cd:b2:32:50:c1:35: 52:2b:c6:27:34:73:01:b7:bf:a2:6b:ab:3c:76:a5:74:93:77: d4:f9:5e:12:fd:f7:e2:b9:eb:b7:84:e9:70:bb:6c:c3:ad:32: 74:28:c2:96:ae:7a:f9:9b:70:6a:38:2b:82:c5:3f:6a:3c:2c: bc:69:8f:de:38:1b:63:fd:ff:bc:85:20:e2:92:c6:5d:3d:78: cf:88:dd:90:e8:2b:23:a0:52:6d:4d:18:ea:16:69:40:46:04: 7a:81:ff:b2:14:9f:ad:1c:2c:0f:1c:00:64:5d:5b:9f:b4:61: 3e:bb:04:7d:21:d2:8a:f7:13:c8:51:96:d5:c9:7f:06:9a:62: 30:95:c6:17:b1:20:36:2b:f4:2f:63:88:d0:b9:ce:e2:f1:8b: 3b:3b:0d:7d:45:8e:25:43:68:4a:dd:53:f0:cd:e7:ea:13:13: 49:19:82:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKNjLdIlGXRWrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTI2ZjcwZmUtMjE3ZC00Y2Y4LWJhZjEtYzVmMTcyM2MwMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOyTzwsroAxiYT9z2lc1RbngpgONQGGjQk1 xa+fZ4DEVCvw3Txa1F5lOIMa+Vigq6ETC1GgSl9cL1ET7drFwU9QPIVEVwgYNJK4 v2U/ONov0JhHhVDUirWcYGpKTpUXD/mEpFFJ61/xRcxNDqp88XTN/H04TohBsm0C YsNNbLjVfKiBQpi60isArv3WWSW3ufZTVkIXn/pkVOhwEx+94gV1ObabU1WGMz25 hV7VkcmAA08Ix1P+U1iitLCE8PGl2gNoJ9EwltUmutWAdKvKrakQYimPop/4ZPyT zdNF80/v5sXYTCKWgzA/UyDOBrdcBnfB8j9wZEzoGdnk1FDTMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8B5cS7VrKvAl8hrMVdZvnASZpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ1MjZhYWItMzgxNy0z MzY5LTg3MDQtZjVlMzI1OGJjY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLWmjLCOX26mYIuGA1LRED06PvFclsLOS40m5+5yi8al3o8/FvQV19p Eq1Yp5v2mStASfTtTV19iB8mpurt9ckjL9rclLFe3aURXY8zbkNaupT4+c2yMlDB NVIrxic0cwG3v6Jrqzx2pXSTd9T5XhL99+K567eE6XC7bMOtMnQowpauevmbcGo4 K4LFP2o8LLxpj944G2P9/7yFIOKSxl09eM+I3ZDoKyOgUm1NGOoWaUBGBHqB/7IU n60cLA8cAGRdW5+0YT67BH0h0or3E8hRltXJfwaaYjCVxhexIDYr9C9jiNC5zuLx izs7DX1FjiVDaErdU/DN5+oTE0kZgkI= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:28 2025 by rpki-client