$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a78b094-6202-3990-9cfa-3391e73f5d0e.roa File: 7a78b094-6202-3990-9cfa-3391e73f5d0e.roa (raw, json) Hash identifier: eDJU+8dmiz516jr/jOqlsgpZQq5Cdrj4vIYeICqyFJk= Subject key identifier: 37:A4:08:BB:83:E8:46:E9:D4:10:6D:5F:9E:1E:DA:7E:E8:86:3A:B1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F2ECAFABBFF59ED498080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a78b094-6202-3990-9cfa-3391e73f5d0e.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.28.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:2e:ca:fa:bb:ff:59:ed:49:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=7c2eb228-e08a-45fa-9912-350b2c4b8d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f7:7a:d6:6a:6b:56:51:5c:3c:f4:82:b1:80: ea:21:ec:b7:48:3e:b5:28:e0:7c:9d:3b:8d:67:a4: 66:87:20:5a:11:ad:67:02:72:f3:ed:6a:5a:0c:c9: 4a:0f:17:b1:be:38:d2:36:4b:a9:60:7d:84:28:44: e5:19:3d:9c:ff:1c:95:01:64:d8:c7:e8:55:2b:c7: 8c:3f:26:43:d9:15:8e:18:ac:3b:fe:15:24:36:d5: f1:5f:94:90:d9:7f:98:17:0c:9a:2d:f8:2a:c4:05: db:fa:8f:78:0f:36:56:a9:f6:b1:09:c5:5e:f0:68: 13:92:d7:11:18:ad:cb:94:8a:1e:cd:c0:44:f3:f9: 0d:f5:ee:49:34:4f:ed:20:37:64:2a:a8:6b:a0:ab: 7d:2e:78:24:c2:84:32:1c:fc:02:f8:b2:01:3b:d9: f6:7c:ad:eb:0f:ea:eb:cf:30:09:fb:ae:78:20:3b: 6c:55:bf:ca:d4:42:79:7e:d6:c2:e2:dc:59:a4:db: eb:df:3d:88:fa:93:7d:e5:cc:d8:b7:27:34:88:3a: f8:d6:09:8c:cf:32:48:fa:e3:c7:be:e8:13:50:c7: ea:9d:72:e8:94:b4:49:49:b6:43:14:66:74:69:4e: 8d:c0:4a:6f:3a:48:2c:a5:70:9b:30:52:7c:96:ae: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A4:08:BB:83:E8:46:E9:D4:10:6D:5F:9E:1E:DA:7E:E8:86:3A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a78b094-6202-3990-9cfa-3391e73f5d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:15:b7:d1:2c:d8:2d:6e:67:3b:a4:57:5c:74:56:c1:92:2e: bc:44:10:6e:ff:34:de:33:87:a9:3f:06:56:82:74:fd:6a:22: bc:0e:06:d6:75:8d:49:5e:44:31:86:fc:10:40:85:e2:48:16: 3c:df:13:95:9f:94:35:de:38:32:7c:c2:fb:89:30:ab:5a:55: 8f:6e:de:cc:7e:93:18:9d:ec:05:57:4d:de:8e:81:8d:d1:50: 65:a2:b9:cd:74:1f:8f:14:08:c8:91:8a:c6:74:3c:1f:d5:17: 47:21:eb:be:98:b7:5f:4c:ce:6d:b0:20:c1:05:ff:db:50:99: ab:b7:c1:d1:cd:f1:9e:6b:4a:7e:4c:8f:bd:5c:14:2c:58:f9: 4d:d7:aa:ef:87:8f:26:3d:3e:f3:1c:f2:2e:0b:90:3a:97:6d: 42:e2:84:d5:10:9b:2c:a9:ce:4b:77:7b:d1:7a:fe:a0:35:67: f1:24:2e:75:72:54:40:ee:bc:c8:86:e8:6a:43:c4:3a:66:5a: ba:22:90:14:54:df:ff:68:25:8f:01:92:8c:39:2b:f0:de:09: be:d0:8a:55:8d:63:15:28:b1:69:ac:b5:50:33:92:6d:17:71: ad:a7:a5:2c:eb:cf:4d:94:33:eb:e8:20:0f:ce:43:07:af:4f: 47:0c:16:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHy7K+rv/We1JgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk N2MyZWIyMjgtZTA4YS00NWZhLTk5MTItMzUwYjJjNGI4ZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPd61mprVlFcPPSCsYDqIey3SD61KOB8nTuN Z6RmhyBaEa1nAnLz7WpaDMlKDxexvjjSNkupYH2EKETlGT2c/xyVAWTYx+hVK8eM PyZD2RWOGKw7/hUkNtXxX5SQ2X+YFwyaLfgqxAXb+o94DzZWqfaxCcVe8GgTktcR GK3LlIoezcBE8/kN9e5JNE/tIDdkKqhroKt9LngkwoQyHPwC+LIBO9n2fK3rD+rr zzAJ+654IDtsVb/K1EJ5ftbC4txZpNvr3z2I+pN95czYtyc0iDr41gmMzzJI+uPH vugTUMfqnXLolLRJSbZDFGZ0aU6NwEpvOkgspXCbMFJ8lq7cOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDekCLuD6Ebp1BBtX54e2n7ohjqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2E3OGIwOTQtNjIwMi0z OTkwLTljZmEtMzM5MWU3M2Y1ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEVt9Es2C1uZzukV1x0VsGSLrxEEG7/NN4zh6k/BlaCdP1qIrwOBtZ1 jUleRDGG/BBAheJIFjzfE5WflDXeODJ8wvuJMKtaVY9u3sx+kxid7AVXTd6OgY3R UGWiuc10H48UCMiRisZ0PB/VF0ch676Yt19Mzm2wIMEF/9tQmau3wdHN8Z5rSn5M j71cFCxY+U3Xqu+HjyY9PvMc8i4LkDqXbULihNUQmyypzkt3e9F6/qA1Z/EkLnVy VEDuvMiG6GpDxDpmWroikBRU3/9oJY8Bkow5K/DeCb7QilWNYxUosWmstVAzkm0X ca2npSzrz02UM+voIA/OQwevT0cMFrk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:06 2025 by rpki-client