$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa File: 2fc81609-cceb-339e-8bdd-ef413ab52259.roa (raw, json) Hash identifier: tPgxbw5mqpbbnrmsQ/7xgT5CJMDAAmDO77TuwqU6Ihg= Subject key identifier: 0D:AD:89:C5:2F:A8:06:A2:42:BD:48:7E:EE:CE:AB:C4:E8:60:02:A5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA0977351ADCF09F8ADE10 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:09:77:35:1a:dc:f0:9f:8a:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1acf35ee-714a-4c4a-9f71-9c7b4406331d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:84:a2:ce:7b:1d:66:ce:02:b4:c7:48:31:87: ea:07:36:9f:93:b5:46:16:47:92:0b:9e:ce:d8:1c: 49:99:06:35:ac:0a:8f:0b:76:a3:e3:4b:1a:ed:34: 07:14:f6:be:26:fa:e2:47:38:dc:78:84:3c:68:49: 78:b6:58:92:16:bc:b1:2a:0c:86:d5:05:07:55:c0: 0c:ec:c2:5c:8a:77:36:ad:16:8d:78:de:e2:49:c7: a1:51:ed:e3:7f:46:f9:dc:47:9f:a6:42:53:28:55: 76:9c:ce:bc:09:a2:1c:62:93:af:63:bf:33:64:93: 94:35:b7:da:bc:12:ab:cc:ec:31:02:84:cb:1f:46: 81:58:c1:40:10:40:79:2c:ee:67:01:0b:fb:49:e0: 04:b9:41:42:07:9a:b1:13:fd:4b:84:30:a1:c4:d2: fa:cd:d6:09:43:22:68:16:96:6d:30:4f:c5:cd:ae: 0d:21:64:5b:59:cb:29:ae:dd:10:76:94:af:53:32: c2:97:8c:bb:99:bd:17:fa:be:a9:2c:f2:22:46:c3: 71:87:77:94:c2:97:80:0c:2e:1c:c8:1b:a8:8f:93: e4:2f:78:7b:7d:88:6c:b8:fd:36:0b:fd:cb:56:34: 62:dd:c5:54:c4:39:3f:d8:12:f6:d5:66:a5:91:fd: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AD:89:C5:2F:A8:06:A2:42:BD:48:7E:EE:CE:AB:C4:E8:60:02:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7b:ff:95:1d:bd:28:02:27:29:c9:c9:e9:d7:ed:e3:fc:43: 99:94:79:d9:b1:f7:5a:df:bd:71:3c:c5:80:5a:52:9c:ce:8d: a5:1a:ff:9c:a0:74:31:25:08:35:fb:65:2f:dd:43:ab:e3:90: 29:ac:57:b0:a5:a1:57:38:83:c5:c8:9e:bc:45:1b:13:e5:ea: b6:71:ab:84:b4:e9:23:94:2a:be:f0:ff:b6:90:5a:a2:c4:e3: e1:18:5a:35:c7:9b:25:a0:a0:89:e9:c9:44:81:82:76:9f:de: c2:d0:0a:61:41:11:d7:45:e4:94:b1:8f:37:7b:10:20:ad:ad: 94:9d:59:56:38:2e:93:f1:a1:ce:68:ba:17:a4:81:52:f5:cd: e6:77:66:62:9d:ab:18:bc:ea:96:d6:b9:9f:fa:69:6c:76:2d: ca:57:f7:2f:20:52:9e:cc:14:34:aa:ea:84:19:e4:32:d5:9f: 35:88:40:54:d9:de:29:8e:b7:a7:20:2e:dd:7d:05:d1:62:18: 21:26:aa:e0:dc:96:e0:82:97:ab:0c:79:16:71:3b:da:c8:34: d7:a4:9e:3f:00:ae:73:77:e6:7f:32:ff:bc:27:87:6b:af:c0: e1:67:18:aa:a8:d0:13:c7:54:6e:01:e3:82:62:90:d2:29:bd: b1:4c:72:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugl3NRrc8J+K3hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWFjZjM1ZWUtNzE0YS00YzRhLTlmNzEtOWM3YjQ0MDYzMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgISiznsdZs4CtMdIMYfqBzafk7VGFkeSC57O 2BxJmQY1rAqPC3aj40sa7TQHFPa+JvriRzjceIQ8aEl4tliSFryxKgyG1QUHVcAM 7MJcinc2rRaNeN7iScehUe3jf0b53EefpkJTKFV2nM68CaIcYpOvY78zZJOUNbfa vBKrzOwxAoTLH0aBWMFAEEB5LO5nAQv7SeAEuUFCB5qxE/1LhDChxNL6zdYJQyJo FpZtME/Fza4NIWRbWcsprt0QdpSvUzLCl4y7mb0X+r6pLPIiRsNxh3eUwpeADC4c yBuoj5PkL3h7fYhsuP02C/3LVjRi3cVUxDk/2BL21Walkf2KgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2ticUvqAaiQr1Ifu7Oq8ToYAKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZjODE2MDktY2NlYi0z MzllLThiZGQtZWY0MTNhYjUyMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN7/5UdvSgCJynJyenX7eP8Q5mUedmx91rfvXE8xYBaUpzOjaUa/5yg dDElCDX7ZS/dQ6vjkCmsV7CloVc4g8XInrxFGxPl6rZxq4S06SOUKr7w/7aQWqLE 4+EYWjXHmyWgoInpyUSBgnaf3sLQCmFBEddF5JSxjzd7ECCtrZSdWVY4LpPxoc5o uhekgVL1zeZ3ZmKdqxi86pbWuZ/6aWx2LcpX9y8gUp7MFDSq6oQZ5DLVnzWIQFTZ 3imOt6cgLt19BdFiGCEmquDcluCCl6sMeRZxO9rINNeknj8ArnN35n8y/7wnh2uv wOFnGKqo0BPHVG4B44JikNIpvbFMcjw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:58 2025 by rpki-client