$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6904a255-a90a-3d28-85e2-981e81446f76.roa File: 6904a255-a90a-3d28-85e2-981e81446f76.roa (raw, json) Hash identifier: E+DY/44SmoyUha3gbZ+Z/QxoQD93FLHQC+OTN8wH2XY= Subject key identifier: 09:82:CB:EE:A1:55:08:72:61:75:81:55:08:A3:D6:09:5F:39:54:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F33316EE3B2C6C947971A Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6904a255-a90a-3d28-85e2-981e81446f76.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.28.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:33:31:6e:e3:b2:c6:c9:47:97:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=563b760d-e62e-406e-8181-e4ddfe39b019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:5b:bb:da:ab:32:22:e3:f4:3c:8b:8f:0c: 16:65:00:d0:ff:85:3b:42:69:c6:77:45:d0:84:69: dd:af:73:0d:4f:9c:01:0b:92:6a:ad:78:c0:2b:d7: e8:0a:2f:f8:75:83:75:43:d0:65:7a:b0:da:9a:8e: c2:9f:aa:84:f1:cd:aa:93:c5:a5:71:c2:cb:dc:72: 0a:a1:80:c3:cb:d9:e6:12:bf:ba:0a:d2:ef:0e:7e: b3:0c:e0:61:fe:82:22:c9:96:80:70:d8:90:e0:b4: c2:1c:9d:7a:0d:6e:e4:7a:47:81:c1:9e:c4:67:45: d4:6a:09:97:6f:c1:9b:61:73:d0:de:4a:68:e8:67: f6:e0:d9:57:72:e9:6f:8f:8b:68:8d:21:63:57:16: 40:c2:60:20:80:01:2c:ce:e2:ef:64:9b:4a:d4:80: cd:87:cf:af:6f:56:31:a2:b1:fe:27:cd:42:e9:60: 43:04:81:cc:e7:6c:62:a3:34:85:c7:0d:2e:c6:0d: 6f:02:95:de:73:74:51:33:48:3d:d4:15:b9:c1:cd: 8d:be:4f:78:97:6a:aa:9e:e1:7f:65:f0:12:32:09: 5b:63:94:45:4a:f9:97:8e:e3:ea:58:56:23:e8:fa: ae:e9:15:5b:70:02:65:ff:a2:6d:e9:5f:63:a9:fe: 4d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:82:CB:EE:A1:55:08:72:61:75:81:55:08:A3:D6:09:5F:39:54:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6904a255-a90a-3d28-85e2-981e81446f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:06:bf:7a:8a:c0:90:f7:57:3f:79:b4:04:73:50:51:5d:5b: d8:3b:dd:5c:ab:b1:e5:d9:bd:69:b6:86:48:49:d2:04:9d:e0: 08:59:b1:ce:af:8e:6a:d5:b8:a9:0d:96:07:97:f8:fa:bb:1d: ca:a4:9a:e2:9e:48:ff:83:30:eb:0d:5c:fa:27:d8:51:f9:c0: 3c:ab:b3:9b:0e:db:08:46:ec:31:24:eb:5f:bb:40:dd:8d:1d: ec:dc:ef:a1:a5:ec:0e:f1:74:38:7a:c0:09:1c:01:22:69:e6: 92:23:0d:8e:c8:b8:74:dd:3a:57:c0:e1:e1:94:00:8b:97:d8: 7c:55:f8:bc:67:6b:fd:46:7d:d3:5b:9d:dc:88:5f:5a:e4:ee: 3f:4d:d4:04:d1:c5:ca:7d:c9:6b:11:31:2e:11:4b:f9:01:c9: 1e:5f:04:40:1a:b5:55:1a:e6:f0:47:03:1f:f4:6a:86:3d:18: 2f:e2:84:30:ea:ef:13:b7:25:d6:af:94:68:94:7c:52:e1:68: 99:e7:16:d2:08:54:a6:36:a0:74:f7:54:d1:7d:42:d3:93:0c: e4:75:d5:be:31:ee:12:3c:ef:4c:0a:31:97:c2:81:15:54:db: c6:25:f0:2f:e4:84:80:de:81:5d:68:9c:7e:fb:9b:80:95:87: 47:5d:73:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzMxbuOyxslHlxowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NTYzYjc2MGQtZTYyZS00MDZlLTgxODEtZTRkZGZlMzliMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx1bu9qrMiLj9DyLjwwWZQDQ/4U7QmnGd0XQ hGndr3MNT5wBC5JqrXjAK9foCi/4dYN1Q9BlerDamo7Cn6qE8c2qk8WlccLL3HIK oYDDy9nmEr+6CtLvDn6zDOBh/oIiyZaAcNiQ4LTCHJ16DW7kekeBwZ7EZ0XUagmX b8GbYXPQ3kpo6Gf24NlXculvj4tojSFjVxZAwmAggAEszuLvZJtK1IDNh8+vb1Yx orH+J81C6WBDBIHM52xiozSFxw0uxg1vApXec3RRM0g91BW5wc2Nvk94l2qqnuF/ ZfASMglbY5RFSvmXjuPqWFYj6Pqu6RVbcAJl/6Jt6V9jqf5NqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmCy+6hVQhyYXWBVQij1glfOVSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjkwNGEyNTUtYTkwYS0z ZDI4LTg1ZTItOTgxZTgxNDQ2Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMGv3qKwJD3Vz95tARzUFFdW9g73VyrseXZvWm2hkhJ0gSd4AhZsc6v jmrVuKkNlgeX+Pq7HcqkmuKeSP+DMOsNXPon2FH5wDyrs5sO2whG7DEk61+7QN2N Hezc76Gl7A7xdDh6wAkcASJp5pIjDY7IuHTdOlfA4eGUAIuX2HxV+Lxna/1GfdNb ndyIX1rk7j9N1ATRxcp9yWsRMS4RS/kByR5fBEAatVUa5vBHAx/0aoY9GC/ihDDq 7xO3JdavlGiUfFLhaJnnFtIIVKY2oHT3VNF9QtOTDOR11b4x7hI870wKMZfCgRVU 28Yl8C/khIDegV1onH77m4CVh0ddc5w= -----END CERTIFICATE-----Generated at Sat Apr 26 21:49:05 2025 by rpki-client