$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/455c9c47-3ed0-3ad3-b973-01f79ebde32d.roa File: 455c9c47-3ed0-3ad3-b973-01f79ebde32d.roa (raw, json) Hash identifier: WUccdhdXVdnBeI+/MP9P4Oa7Rm8QUwQ7UaSHO9SKoE8= Subject key identifier: 66:C2:3F:83:5E:4E:C3:92:6C:67:4C:BD:72:81:B2:C8:FF:C5:CF:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499C19932C5FC3097E2C761080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/455c9c47-3ed0-3ad3-b973-01f79ebde32d.roa Signing time: Tue 22 Apr 2025 10:51:27 +0000 ROA not before: Tue 22 Apr 2025 10:51:27 +0000 ROA not after: Mon 21 Jul 2025 10:51:27 +0000 asID: 19905 IP address blocks: 173.28.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:19:93:2c:5f:c3:09:7e:2c:76:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 10:51:27 2025 GMT Not After : Jul 21 10:51:27 2025 GMT Subject: CN=d6e9cfa0-4756-4e0e-9de9-fba4539c8c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:ff:3f:35:29:b9:90:57:b0:18:05:1f:57: 9e:73:cc:e2:98:12:53:2b:df:a9:66:57:93:36:24: ee:81:50:7e:2f:47:3d:a6:56:b2:39:78:41:d0:26: 62:b2:8c:f7:bb:b7:3d:f5:17:67:ee:ec:41:30:19: a1:a3:7c:d2:ab:e4:01:9e:a3:74:c9:19:e6:60:20: c3:3a:86:54:84:d8:44:28:1f:fc:1f:a5:3a:4f:95: cf:91:d2:23:5a:cb:74:c7:88:45:6a:0e:7b:71:9a: d5:77:3f:4e:0a:c5:83:e8:49:7b:e7:5d:c3:34:35: 47:fd:f2:40:ae:7e:26:53:88:a6:d7:a0:9e:ea:e7: d2:3d:be:81:f0:e6:e4:79:c5:64:5f:bd:2d:bb:ad: b1:b2:fe:43:0f:f6:59:30:4a:28:8d:5a:ec:0b:49: 72:84:e9:27:20:90:d8:a3:50:43:45:1e:ce:10:d3: 55:d0:37:5c:ee:ad:c1:b9:8c:4e:2b:a0:39:d8:58: 6c:4e:b8:44:e7:9a:7f:28:c7:01:72:68:48:e9:52: 81:95:db:96:4d:85:13:7d:d2:e2:6b:3e:43:77:8c: 66:7e:2f:14:0b:a4:69:90:e0:e9:d6:53:51:d5:ba: fd:5f:97:ea:a7:06:ba:06:fa:e9:3e:50:52:1d:86: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:3F:83:5E:4E:C3:92:6C:67:4C:BD:72:81:B2:C8:FF:C5:CF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/455c9c47-3ed0-3ad3-b973-01f79ebde32d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:57:b2:e8:a5:00:cf:d7:3e:28:92:69:6c:2b:42:90:b4:bf: cb:07:be:7b:9a:18:dc:67:41:f4:27:e9:a3:ed:93:ca:50:fc: d7:7e:c2:f0:3b:4c:7b:dd:88:2a:04:c7:3b:3b:2d:83:c3:4a: 8d:e7:c1:7a:3a:6c:3c:aa:f4:29:61:e2:41:88:6d:61:a2:81: 08:d7:03:c0:7e:76:cc:76:30:a9:d0:24:ed:90:13:bc:92:7a: 7e:dc:7d:b0:42:86:97:b4:d3:fe:e7:5c:f6:ad:93:fa:7d:26: 9d:4f:8b:a5:c5:7e:f6:f9:ac:a3:01:71:c7:88:9c:36:ab:67: 80:bb:8d:9f:b1:cd:b1:71:a0:88:43:c5:c2:36:b6:41:53:bc: 01:3f:db:3c:8f:d8:37:99:4f:be:0c:b7:61:5f:56:50:8b:39: f1:a4:90:43:c8:0b:de:57:8f:87:85:be:90:38:68:39:c7:cc: 4b:f7:a5:4e:8d:b7:d8:a4:06:8e:bd:9c:87:2d:06:c1:35:b0: 82:a8:ae:12:f0:3d:a8:39:09:ff:7f:8d:c3:c0:4c:c7:73:6a: a2:3e:d2:09:86:6a:31:db:db:5d:02:0d:a7:cd:6d:a3:cc:90: e1:c8:c8:b0:8b:3a:94:fa:38:e2:41:4d:cd:ba:1c:da:84:2f: 19:6a:0b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcGZMsX8MJfix2EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjEwNTEyN1oXDTI1MDcyMTEwNTEyN1owLzEtMCsGA1UEAxMk ZDZlOWNmYTAtNDc1Ni00ZTBlLTlkZTktZmJhNDUzOWM4YzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRP/PzUpuZBXsBgFH1eec8zimBJTK9+pZleT NiTugVB+L0c9playOXhB0CZisoz3u7c99Rdn7uxBMBmho3zSq+QBnqN0yRnmYCDD OoZUhNhEKB/8H6U6T5XPkdIjWst0x4hFag57cZrVdz9OCsWD6El7513DNDVH/fJA rn4mU4im16Ce6ufSPb6B8ObkecVkX70tu62xsv5DD/ZZMEoojVrsC0lyhOknIJDY o1BDRR7OENNV0Ddc7q3BuYxOK6A52FhsTrhE55p/KMcBcmhI6VKBlduWTYUTfdLi az5Dd4xmfi8UC6RpkODp1lNR1br9X5fqpwa6BvrpPlBSHYYrMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbCP4NeTsOSbGdMvXKBssj/xc+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDU1YzljNDctM2VkMC0z YWQzLWI5NzMtMDFmNzllYmRlMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJXsuilAM/XPiiSaWwrQpC0v8sHvnuaGNxnQfQn6aPtk8pQ/Nd+wvA7 THvdiCoExzs7LYPDSo3nwXo6bDyq9Clh4kGIbWGigQjXA8B+dsx2MKnQJO2QE7yS en7cfbBChpe00/7nXPatk/p9Jp1Pi6XFfvb5rKMBcceInDarZ4C7jZ+xzbFxoIhD xcI2tkFTvAE/2zyP2DeZT74Mt2FfVlCLOfGkkEPIC95Xj4eFvpA4aDnHzEv3pU6N t9ikBo69nIctBsE1sIKorhLwPag5Cf9/jcPATMdzaqI+0gmGajHb210CDafNbaPM kOHIyLCLOpT6OOJBTc26HNqELxlqC1Y= -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:21 2025 by rpki-client