$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa File: 76b9fae5-463a-3488-ad50-00b232211f44.roa (raw, json) Hash identifier: yItCoPuZFuhH644d/8rmmQY4mvFZAXB8wxs6Yz0zL2o= Subject key identifier: 2E:CF:87:77:24:4C:12:07:E8:FE:5C:44:A6:1B:E2:EB:CC:5B:49:8D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA128F08AC1403F6A15500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:12:8f:08:ac:14:03:f6:a1:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e73396cc-f04d-4704-91d4-9a15efb66188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:2c:1c:a0:3b:72:2e:f6:20:d0:47:f0:59: 42:6b:52:11:5f:31:97:29:bb:8c:dd:fb:f4:7d:83: 87:a2:8f:52:05:53:67:ce:0c:21:e8:b1:76:16:c0: 0a:a3:f7:f5:83:24:96:55:34:a8:1e:f8:f7:da:c0: e9:6d:d1:86:74:26:65:cd:26:5a:21:6d:0c:81:f3: 15:f8:40:31:bd:8f:d1:98:13:c8:ba:95:eb:05:e3: ed:0b:cc:c9:7b:95:3e:35:3e:83:b5:47:f1:60:e9: bc:d6:fb:50:80:6b:76:ca:fb:af:48:75:fd:31:c0: 94:17:3b:c0:20:85:49:ee:4c:8a:73:63:f9:c4:aa: 51:3e:a6:a9:dc:1c:1e:54:cb:73:83:ae:72:39:e1: 23:e7:4f:d1:8d:88:00:f0:fc:5c:3e:a7:8a:6c:54: 80:fe:9f:c6:34:5c:0f:51:48:1a:72:90:a0:00:0d: 68:4e:71:5c:d4:13:ea:0e:a5:fb:0c:da:00:e6:49: 66:b7:0f:c6:fe:7a:9c:96:d8:cd:46:52:18:fe:ed: 3f:7c:40:b2:85:4d:a6:10:d0:02:48:81:93:63:9e: 0b:31:e4:29:07:4f:05:53:e7:9f:f9:29:de:f6:ec: c0:a2:da:ff:de:09:cc:6c:0e:e2:72:33:11:4a:5a: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:87:77:24:4C:12:07:E8:FE:5C:44:A6:1B:E2:EB:CC:5B:49:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e9:57:cb:5e:57:ef:01:5f:cf:97:43:61:4f:aa:bb:6c:25: 2a:e3:86:6b:b8:40:c5:68:91:73:a0:1e:88:40:2e:38:d9:20: 51:62:85:0d:72:91:b3:7e:23:4a:8c:e8:90:6a:4a:d2:30:f7: 69:db:41:13:c6:e4:71:2d:94:e1:bf:65:8a:cf:5f:f9:0f:84: fb:4c:a4:54:f7:42:92:dd:e8:b2:d4:fd:84:00:d5:4e:79:07: 9e:eb:f8:35:da:87:2b:a2:02:33:fa:08:c6:0d:83:c0:8f:c6: 26:02:e2:2d:e4:ac:e4:3b:51:30:af:f0:97:6d:37:40:69:7a: 4f:0f:e6:97:fd:ef:c2:ce:e2:fa:dd:d0:1a:91:fa:f3:26:46: a0:f3:fd:fc:c5:b5:aa:a7:3a:0d:83:84:2e:a6:d8:2f:3d:2f: 21:97:a8:90:71:8a:c0:9b:5b:0e:8c:8c:a4:92:3e:fb:8d:06: 0c:9d:ee:e0:80:b6:46:32:4d:cf:56:35:c4:5e:3b:1c:11:bb: 08:f4:f2:2b:d5:09:8b:93:08:ed:51:af:7b:36:97:0e:9e:a2: e0:ac:a4:3d:ff:b4:b4:f2:8b:2c:d2:dc:dd:7f:4d:68:1a:61: b7:1b:00:e6:0d:42:d8:5b:ce:b9:85:d0:b4:3a:42:d0:f5:77: 25:6e:86:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhKPCKwUA/ahVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTczMzk2Y2MtZjA0ZC00NzA0LTkxZDQtOWExNWVmYjY2MTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslEsHKA7ci72INBH8FlCa1IRXzGXKbuM3fv0 fYOHoo9SBVNnzgwh6LF2FsAKo/f1gySWVTSoHvj32sDpbdGGdCZlzSZaIW0MgfMV +EAxvY/RmBPIupXrBePtC8zJe5U+NT6DtUfxYOm81vtQgGt2yvuvSHX9McCUFzvA IIVJ7kyKc2P5xKpRPqap3BweVMtzg65yOeEj50/RjYgA8PxcPqeKbFSA/p/GNFwP UUgacpCgAA1oTnFc1BPqDqX7DNoA5klmtw/G/nqcltjNRlIY/u0/fECyhU2mENAC SIGTY54LMeQpB08FU+ef+Sne9uzAotr/3gnMbA7icjMRSloQLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7Ph3ckTBIH6P5cRKYb4uvMW0mNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzZiOWZhZTUtNDYzYS0z NDg4LWFkNTAtMDBiMjMyMjExZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXpV8teV+8BX8+XQ2FPqrtsJSrjhmu4QMVokXOgHohALjjZIFFihQ1y kbN+I0qM6JBqStIw92nbQRPG5HEtlOG/ZYrPX/kPhPtMpFT3QpLd6LLU/YQA1U55 B57r+DXahyuiAjP6CMYNg8CPxiYC4i3krOQ7UTCv8JdtN0Bpek8P5pf978LO4vrd 0BqR+vMmRqDz/fzFtaqnOg2DhC6m2C89LyGXqJBxisCbWw6MjKSSPvuNBgyd7uCA tkYyTc9WNcReOxwRuwj08ivVCYuTCO1Rr3s2lw6eouCspD3/tLTyiyzS3N1/TWga YbcbAOYNQthbzrmF0LQ6QtD1dyVuhhk= -----END CERTIFICATE-----Generated at Sat Apr 26 21:00:27 2025 by rpki-client