$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa File: 325ce877-ce13-37a2-ac60-db90fc5927ff.roa (raw, json) Hash identifier: d0p1YJGphbxkjh658I1BMKZaLdj19GXFrbEwsyVV+bc= Subject key identifier: F1:99:61:77:02:71:86:3F:40:AF:98:ED:13:67:62:F1:78:43:EC:AC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C48FF0C4CF98E23BCA8EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.16.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:8f:f0:c4:cf:98:e2:3b:ca:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=13a88e6e-e52a-44ac-9a3c-0bd77a8fed7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:a3:cf:3f:33:5b:7b:9f:81:38:16:c4:f0: 8e:a6:00:1a:54:70:7e:45:7f:51:9d:33:01:d8:65: d2:15:c4:e0:8e:87:34:25:fd:19:d0:14:fe:b5:95: fd:0c:19:31:bb:c9:23:f1:75:f2:03:97:84:b4:ff: 72:03:82:5c:b5:5e:7d:ea:31:90:5b:e9:59:91:fb: 65:1d:07:6a:57:d9:52:3d:e1:d8:b0:21:d9:16:0e: ca:70:bf:3c:4c:60:70:a6:fe:78:74:d1:27:e1:ad: b2:6d:b2:f4:2a:59:bd:bf:31:a0:da:37:51:a8:ab: 28:c4:15:02:10:12:eb:7e:4b:81:e4:a8:41:83:83: 57:47:74:fb:c0:0e:1d:ff:fb:6a:ce:82:fc:1b:fd: cf:4c:c8:8c:33:18:e6:4d:33:3e:d4:50:f5:25:46: ea:32:eb:b6:3a:e0:be:aa:14:07:e3:82:5a:e3:f2: 4d:15:09:7a:0d:6b:0b:0d:f8:be:6b:3e:e5:47:5d: 39:c4:c0:64:a7:49:4c:f6:17:e0:94:c5:d8:74:85: 90:c9:f1:05:89:27:3c:e5:57:02:07:e7:ae:2d:a9: 6f:1c:f0:13:55:2d:b6:b8:57:b7:b6:bd:86:82:ca: c9:71:fe:60:56:28:4d:9c:11:84:19:8b:fc:24:d9: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:99:61:77:02:71:86:3F:40:AF:98:ED:13:67:62:F1:78:43:EC:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:58:21:f2:11:fc:b6:d8:52:1f:38:87:20:56:6f:6d:7d:62: f4:3b:71:4b:35:e0:0b:6e:84:69:b6:d9:d6:98:ea:cb:fa:ea: 39:9d:fb:db:fe:e5:3c:da:2d:52:29:4e:b8:42:86:60:f7:00: 48:fa:2f:2e:ee:bc:ee:4a:2d:43:e1:4f:85:9d:78:d1:be:b5: e6:8c:f4:2a:74:5b:ca:6e:6d:5f:c7:7e:7e:16:aa:7b:f0:82: 53:df:3b:f2:4e:7e:6a:c5:7c:af:31:f4:b4:5c:32:86:cb:70: 2c:35:a4:2c:be:38:2d:48:26:34:68:84:66:66:11:ec:2d:05: 43:08:dc:42:bc:e3:87:1a:d0:4b:91:a3:9f:94:3e:c1:3c:ff: 9a:86:22:a9:41:d4:f6:b5:b3:8b:ed:6f:a9:73:e5:fa:e4:c5: d3:47:9d:fb:c5:3b:29:60:66:24:a7:37:dd:7f:b3:c5:92:31: 74:d8:a5:45:37:3c:75:54:e9:43:40:12:70:61:1c:b3:68:b5: 32:88:01:f4:d3:03:10:81:f8:d9:25:a6:fa:ae:d2:0e:4c:3e: 68:6e:d4:18:ef:da:01:87:b3:70:69:10:84:9b:29:03:7a:d9: 3f:bb:ee:0f:a9:32:fb:73:1c:69:36:d3:13:fe:6d:41:30:e1: c2:1e:23:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxI/wxM+Y4jvKjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MTNhODhlNmUtZTUyYS00NGFjLTlhM2MtMGJkNzdhOGZlZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQejzz8zW3ufgTgWxPCOpgAaVHB+RX9RnTMB 2GXSFcTgjoc0Jf0Z0BT+tZX9DBkxu8kj8XXyA5eEtP9yA4JctV596jGQW+lZkftl HQdqV9lSPeHYsCHZFg7KcL88TGBwpv54dNEn4a2ybbL0Klm9vzGg2jdRqKsoxBUC EBLrfkuB5KhBg4NXR3T7wA4d//tqzoL8G/3PTMiMMxjmTTM+1FD1JUbqMuu2OuC+ qhQH44Ja4/JNFQl6DWsLDfi+az7lR105xMBkp0lM9hfglMXYdIWQyfEFiSc85VcC B+euLalvHPATVS22uFe3tr2GgsrJcf5gVihNnBGEGYv8JNkBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGZYXcCcYY/QK+Y7RNnYvF4Q+ysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzI1Y2U4NzctY2UxMy0z N2EyLWFjNjAtZGI5MGZjNTkyN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxYIfIR/LbYUh84hyBWb219YvQ7cUs14AtuhGm22daY6sv66jmd+9v+ 5TzaLVIpTrhChmD3AEj6Ly7uvO5KLUPhT4WdeNG+teaM9Cp0W8pubV/Hfn4Wqnvw glPfO/JOfmrFfK8x9LRcMobLcCw1pCy+OC1IJjRohGZmEewtBUMI3EK844ca0EuR o5+UPsE8/5qGIqlB1Pa1s4vtb6lz5frkxdNHnfvFOylgZiSnN91/s8WSMXTYpUU3 PHVU6UNAEnBhHLNotTKIAfTTAxCB+Nklpvqu0g5MPmhu1Bjv2gGHs3BpEISbKQN6 2T+77g+pMvtzHGk20xP+bUEw4cIeI6Q= -----END CERTIFICATE-----Generated at Mon Apr 28 14:31:40 2025 by rpki-client