$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa File: 4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa (raw, json) Hash identifier: h0L1HY7wFPkIQOuiu6/ufMZqaniS/18FQGxI/Ig2Q4w= Subject key identifier: 74:53:DF:34:81:71:CA:CB:CA:10:B4:91:A6:20:1A:34:D4:D4:0C:71 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF505AA73A1308C22FE4C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:50:5a:a7:3a:13:08:c2:2f:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=fec44915-72e7-40cf-8ebd-76bd54714d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:04:9a:f3:fa:4d:fc:17:99:98:ce:7a:4f: 99:f2:4e:fd:91:07:0a:9d:80:80:40:12:51:a9:e0: 5f:dc:83:52:e6:1e:38:45:ce:f9:a6:fa:02:2c:69: 49:cd:b6:92:c7:d3:de:ff:6b:b9:68:e2:89:13:6e: 34:3c:dc:8e:af:dc:7b:d2:0c:74:5f:8d:65:b5:23: 0d:1b:16:2e:11:ed:b8:fe:20:2e:6e:3f:8b:b3:c3: d4:b7:08:f3:11:62:41:68:b1:7e:70:fd:64:6a:4d: a6:7b:ba:58:ab:81:39:cb:be:f2:d0:4f:3d:b0:40: 34:f9:74:3d:79:a3:ff:27:0d:07:ee:21:38:f1:c2: 42:fc:49:27:1b:79:c2:94:3f:9e:e7:0b:fc:46:56: 5f:4b:38:d0:3c:88:7a:5d:cc:82:4d:b3:da:40:1d: 89:55:52:84:f3:1f:55:11:da:84:e9:af:91:a5:57: 12:d5:17:d2:48:bb:b7:f1:ef:00:f4:ec:20:80:8d: 91:4a:84:bf:ab:11:3e:a4:a3:51:5c:fb:d1:10:99: 77:bc:f5:0f:35:b1:4f:47:64:66:87:54:2f:32:09: a6:46:e7:2b:ec:e6:3d:26:78:1d:93:d7:20:fa:97: 28:71:32:08:01:a7:e3:bc:90:ac:4f:65:46:e4:79: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:DF:34:81:71:CA:CB:CA:10:B4:91:A6:20:1A:34:D4:D4:0C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:54:b0:6f:42:be:59:7a:0f:f1:45:37:e3:cf:5d:8a:13:b8: 47:26:31:f8:b1:99:84:49:da:d1:36:a7:d9:1a:2e:e4:cf:6f: 40:72:c9:44:2d:25:96:3c:8e:a0:fd:8f:54:b9:d9:6f:95:9f: fd:4f:c5:0b:dd:56:6c:08:45:cf:a0:87:d9:3a:6b:4b:6c:84: 7d:5c:32:c1:f8:64:84:47:ce:a0:ba:d9:bd:60:e6:6d:15:f1: e0:03:64:86:d4:5f:91:22:f5:35:b3:db:85:16:50:46:36:9e: 83:07:b7:67:db:a8:91:be:b0:05:f1:11:ec:f5:12:97:75:c9: 84:9b:08:1d:06:4f:c4:bb:06:d3:37:b9:f1:d4:bb:eb:6a:98: a0:87:fd:22:36:71:bc:e3:41:b1:68:03:ec:0a:29:5f:3c:65: be:7f:9b:7d:5e:1f:dc:59:6c:76:37:75:92:54:25:63:de:3b: 1c:51:20:6f:77:5f:ad:e2:98:52:12:b8:ee:3c:dd:0d:aa:eb: 38:fa:77:b6:b7:98:4c:6a:6c:2c:7f:55:f3:a0:e4:38:ba:21: b1:c5:2d:ed:c3:5c:0c:f1:87:51:df:d5:0e:5d:18:3f:de:a6: 4d:84:e7:97:8b:b9:a8:ff:a5:55:34:b1:ea:a5:dd:bf:b6:15: 83:fe:af:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71BapzoTCMIv5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmVjNDQ5MTUtNzJlNy00MGNmLThlYmQtNzZiZDU0NzE0ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAIEmvP6TfwXmZjOek+Z8k79kQcKnYCAQBJR qeBf3INS5h44Rc75pvoCLGlJzbaSx9Pe/2u5aOKJE240PNyOr9x70gx0X41ltSMN GxYuEe24/iAubj+Ls8PUtwjzEWJBaLF+cP1kak2me7pYq4E5y77y0E89sEA0+XQ9 eaP/Jw0H7iE48cJC/EknG3nClD+e5wv8RlZfSzjQPIh6XcyCTbPaQB2JVVKE8x9V EdqE6a+RpVcS1RfSSLu38e8A9OwggI2RSoS/qxE+pKNRXPvREJl3vPUPNbFPR2Rm h1QvMgmmRucr7OY9Jngdk9cg+pcocTIIAafjvJCsT2VG5HmWpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRT3zSBccrLyhC0kaYgGjTU1AxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGE5MzFlYjMtYTBjYy0z MTVjLWI2NmYtM2VlMTVjMjY4OGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtUsG9Cvll6D/FFN+PPXYoTuEcmMfixmYRJ2tE2p9kaLuTPb0ByyUQt JZY8jqD9j1S52W+Vn/1PxQvdVmwIRc+gh9k6a0tshH1cMsH4ZIRHzqC62b1g5m0V 8eADZIbUX5Ei9TWz24UWUEY2noMHt2fbqJG+sAXxEez1Epd1yYSbCB0GT8S7BtM3 ufHUu+tqmKCH/SI2cbzjQbFoA+wKKV88Zb5/m31eH9xZbHY3dZJUJWPeOxxRIG93 X63imFISuO483Q2q6zj6d7a3mExqbCx/VfOg5Di6IbHFLe3DXAzxh1Hf1Q5dGD/e pk2E55eLuaj/pVU0seql3b+2FYP+ryc= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:26 2025 by rpki-client