$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b4223f1-2a40-3978-8937-4cccfefac0ae.roa File: 5b4223f1-2a40-3978-8937-4cccfefac0ae.roa (raw, json) Hash identifier: hEnyZncB+ajwRRIDQJA0oiwvpDq6JjPaACqvEA3ybu8= Subject key identifier: 08:0D:40:B8:46:1C:31:96:20:12:2F:CF:E8:5A:C2:D0:38:E4:3D:1F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849DF4CAD1DE5F53432A41F0918 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b4223f1-2a40-3978-8937-4cccfefac0ae.roa Signing time: Fri 16 May 2025 12:33:35 +0000 ROA not before: Fri 16 May 2025 12:33:35 +0000 ROA not after: Thu 14 Aug 2025 12:33:35 +0000 asID: 30036 IP address blocks: 173.28.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:4c:ad:1d:e5:f5:34:32:a4:1f:09:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 16 12:33:35 2025 GMT Not After : Aug 14 12:33:35 2025 GMT Subject: CN=8719fe6f-185a-4686-b745-63426c5cec16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:02:a5:c8:30:09:59:67:ea:b9:bb:17:97:cd: 58:49:d0:87:8f:7b:5c:0c:2a:61:45:fb:db:af:32: 57:8d:21:3d:2c:53:fd:a2:84:4b:d3:fb:c7:4f:8d: e0:e1:0a:b6:a8:2c:79:b4:32:fd:eb:b1:65:81:32: 27:d9:1a:e6:09:7c:69:80:19:ed:9b:51:23:75:fd: 6d:10:60:18:63:09:6e:cd:eb:1c:6f:cf:d1:08:8e: e1:e5:ea:f5:6c:9d:12:85:9d:c9:bf:39:f2:64:69: 67:b6:9a:6f:0b:99:41:ea:b5:ee:0f:ad:4c:16:bf: 36:bb:4d:6d:34:a4:a7:3b:46:75:95:8c:81:4c:63: 11:86:e5:27:7d:61:eb:2e:e6:43:30:70:69:87:96: cd:96:eb:b7:32:8f:b9:49:0b:43:cb:6c:a9:a3:29: 12:1e:0b:07:ab:aa:9c:3f:02:10:62:e6:5e:e1:a7: ca:8a:11:d0:79:71:a9:33:89:b7:e7:67:81:4b:e2: 59:6d:ba:96:82:0d:d3:1b:d7:d2:b6:ee:fc:c1:85: 77:c5:62:90:fb:04:c0:93:42:a8:a0:27:e2:5b:6e: ac:e0:43:ac:ee:97:b5:c4:27:14:df:a4:37:ac:0c: 24:d7:a6:4a:d7:80:90:13:5d:69:c7:12:4b:c9:9a: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0D:40:B8:46:1C:31:96:20:12:2F:CF:E8:5A:C2:D0:38:E4:3D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b4223f1-2a40-3978-8937-4cccfefac0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:23:f5:46:19:37:d0:b5:d8:57:d2:d2:65:b3:21:60:e2:2c: ae:4f:cc:b0:4e:3d:6f:b6:1b:70:a3:6b:75:d4:67:a3:88:d6: d3:1e:3a:98:16:41:87:d4:07:27:f7:02:47:7e:21:15:43:c4: f8:9e:c1:3a:46:5f:75:bb:d6:6b:46:51:3a:2e:08:1d:27:dc: f6:17:94:18:1e:16:fa:b9:3c:99:7f:a5:04:53:34:dd:24:14: b9:98:9c:d3:f3:12:2c:b8:b8:eb:6d:2c:01:d2:41:b9:64:d5: 7e:a1:d7:31:e3:0d:3f:7c:ce:d3:7a:86:c2:39:e4:60:45:1f: e9:25:0a:f5:c0:90:c3:de:89:f4:68:2e:e2:16:6e:c0:d3:f5: 23:77:90:bd:c3:21:1c:e9:16:03:dc:5e:bb:12:31:0d:46:21: 66:53:fd:c3:06:f1:e7:ff:5f:31:4f:ac:03:40:2a:c5:53:ce: e0:06:95:b4:64:a9:d6:99:fc:a2:20:44:79:92:27:4a:1c:63: 45:ee:84:9b:93:ff:b8:f5:4b:43:92:7f:02:11:e9:c7:a4:73: 65:e9:e0:5f:48:f3:57:c3:62:01:e7:1b:01:b9:6e:ba:a7:c9: 05:56:23:6b:1f:e1:41:af:8d:7c:35:12:fb:66:03:4a:ba:f8: 05:f8:c5:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfTK0d5fU0MqQfCRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUxNjEyMzMzNVoXDTI1MDgxNDEyMzMzNVowLzEtMCsGA1UEAxMk ODcxOWZlNmYtMTg1YS00Njg2LWI3NDUtNjM0MjZjNWNlYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gKlyDAJWWfqubsXl81YSdCHj3tcDCphRfvb rzJXjSE9LFP9ooRL0/vHT43g4Qq2qCx5tDL967FlgTIn2RrmCXxpgBntm1Ejdf1t EGAYYwluzescb8/RCI7h5er1bJ0ShZ3JvznyZGlntppvC5lB6rXuD61MFr82u01t NKSnO0Z1lYyBTGMRhuUnfWHrLuZDMHBph5bNluu3Mo+5SQtDy2ypoykSHgsHq6qc PwIQYuZe4afKihHQeXGpM4m352eBS+JZbbqWgg3TG9fStu78wYV3xWKQ+wTAk0Ko oCfiW26s4EOs7pe1xCcU36Q3rAwk16ZK14CQE11pxxJLyZr/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgNQLhGHDGWIBIvz+hawtA45D0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWI0MjIzZjEtMmE0MC0z OTc4LTg5MzctNGNjY2ZlZmFjMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRy/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUj9UYZN9C12FfS0mWzIWDiLK5PzLBOPW+2G3Cja3XUZ6OI1tMeOpgW QYfUByf3Akd+IRVDxPiewTpGX3W71mtGUTouCB0n3PYXlBgeFvq5PJl/pQRTNN0k FLmYnNPzEiy4uOttLAHSQblk1X6h1zHjDT98ztN6hsI55GBFH+klCvXAkMPeifRo LuIWbsDT9SN3kL3DIRzpFgPcXrsSMQ1GIWZT/cMG8ef/XzFPrANAKsVTzuAGlbRk qdaZ/KIgRHmSJ0ocY0XuhJuT/7j1S0OSfwIR6cekc2Xp4F9I81fDYgHnGwG5brqn yQVWI2sf4UGvjXw1EvtmA0q6+AX4xSo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:42:39 2025 by rpki-client