$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99e122ba-d0b3-32f9-9039-978a1685579a.roa File: 99e122ba-d0b3-32f9-9039-978a1685579a.roa (raw, json) Hash identifier: PI65w7bHnze6T6hyWLArkCsgM5jQdRGDnbsclO7NTok= Subject key identifier: CB:66:87:EE:95:ED:54:0B:C4:C6:9D:F7:52:7C:6D:6C:67:D0:AC:BC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49742D5A40E309B14B600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99e122ba-d0b3-32f9-9039-978a1685579a.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:97:42:d5:a4:0e:30:9b:14:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=f4d4be79-78c4-4314-8441-1887af9815fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:c6:a2:6d:be:b3:55:a2:ca:2b:fc:77:fa: dc:96:f3:4f:61:a9:97:32:b6:ec:9c:2b:9a:50:c1: ed:2c:4e:61:fe:2e:31:27:7e:f1:d5:13:68:33:32: 09:da:64:fd:92:9f:af:64:b5:cd:33:df:ef:1b:05: f1:78:1f:ec:6c:dc:3f:e2:83:3f:64:83:15:5a:2f: 82:fd:11:86:92:8e:87:40:d6:2a:4a:ce:7b:4d:14: a7:f5:7b:57:bf:44:6a:5b:1c:e3:24:d6:77:e7:8e: 6b:b3:1d:a4:97:da:a0:34:42:bf:0f:8d:43:97:45: ba:06:e6:d1:80:78:7f:26:56:54:0f:1b:9a:60:61: 68:0e:39:92:95:e6:83:51:b7:c0:22:b3:e9:86:75: fd:11:ef:79:67:1a:b9:bf:94:a2:69:f3:0c:52:61: e2:58:6a:65:2f:84:96:d6:2e:28:64:00:74:f9:91: 5b:5a:82:43:f4:06:8b:fe:f9:71:08:e4:07:34:3f: d2:50:19:c1:1b:f7:f9:aa:c2:8b:b7:6d:bb:8f:53: a4:e9:1d:05:ad:e2:6f:a9:02:3b:37:79:ab:29:0a: 8b:c5:0b:51:d8:8a:d0:ca:0e:e4:50:09:7e:db:78: d5:16:5f:31:12:23:5f:3a:e6:90:be:b3:3f:c9:26: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:66:87:EE:95:ED:54:0B:C4:C6:9D:F7:52:7C:6D:6C:67:D0:AC:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99e122ba-d0b3-32f9-9039-978a1685579a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:23:28:7e:2e:74:00:97:b9:14:45:1c:09:aa:b2:bd:3b:45: f9:29:6f:57:3b:66:3b:a2:fd:8e:9e:00:66:3b:2f:99:94:63: b7:d9:db:74:50:ea:a0:ad:3b:8c:95:8f:5c:d8:21:53:f8:05: 40:a1:a2:da:9c:43:8f:a5:1e:63:d1:2a:74:4a:95:ee:76:40: df:92:f3:a4:64:b5:54:ed:66:ff:ca:d2:ac:62:e2:2d:8d:44: 5c:86:3b:ec:33:f8:50:77:29:54:fa:d0:79:70:02:da:99:1a: dc:25:5f:4c:09:1f:ba:e6:45:22:26:e0:9b:64:5e:f5:01:02: ce:58:af:36:ac:3c:9d:15:fb:1b:1d:68:92:ae:a3:47:97:0f: 18:02:15:39:5a:3e:ce:6d:d8:26:9f:48:67:96:61:72:30:49: 06:8f:18:c0:72:6a:05:87:97:9b:39:aa:bb:e0:70:0b:3a:fe: 1d:66:47:8f:03:a2:85:9a:ab:aa:c6:21:66:2e:92:4f:62:92: d5:d1:3e:68:0d:c8:df:1a:55:88:2e:53:5a:00:cd:31:43:61: a1:6e:59:81:2e:4f:fe:5a:48:48:db:50:3e:d8:8b:bc:0e:bb: 47:3d:93:92:70:56:48:ae:e1:4e:4e:fb:e1:d2:dc:d7:96:91: 37:a6:1f:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJdC1aQOMJsUtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjRkNGJlNzktNzhjNC00MzE0LTg0NDEtMTg4N2FmOTgxNWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYbGom2+s1Wiyiv8d/rclvNPYamXMrbsnCua UMHtLE5h/i4xJ37x1RNoMzIJ2mT9kp+vZLXNM9/vGwXxeB/sbNw/4oM/ZIMVWi+C /RGGko6HQNYqSs57TRSn9XtXv0RqWxzjJNZ3545rsx2kl9qgNEK/D41Dl0W6BubR gHh/JlZUDxuaYGFoDjmSleaDUbfAIrPphnX9Ee95Zxq5v5SiafMMUmHiWGplL4SW 1i4oZAB0+ZFbWoJD9AaL/vlxCOQHND/SUBnBG/f5qsKLt227j1Ok6R0FreJvqQI7 N3mrKQqLxQtR2IrQyg7kUAl+23jVFl8xEiNfOuaQvrM/ySZxHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtmh+6V7VQLxMad91J8bWxn0Ky8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTllMTIyYmEtZDBiMy0z MmY5LTkwMzktOTc4YTE2ODU1NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUjKH4udACXuRRFHAmqsr07Rfkpb1c7Zjui/Y6eAGY7L5mUY7fZ23RQ 6qCtO4yVj1zYIVP4BUChotqcQ4+lHmPRKnRKle52QN+S86RktVTtZv/K0qxi4i2N RFyGO+wz+FB3KVT60HlwAtqZGtwlX0wJH7rmRSIm4JtkXvUBAs5YrzasPJ0V+xsd aJKuo0eXDxgCFTlaPs5t2CafSGeWYXIwSQaPGMByagWHl5s5qrvgcAs6/h1mR48D ooWaq6rGIWYukk9iktXRPmgNyN8aVYguU1oAzTFDYaFuWYEuT/5aSEjbUD7Yi7wO u0c9k5JwVkiu4U5O++HS3NeWkTemH4s= -----END CERTIFICATE-----Generated at Sun Jun 15 15:11:17 2025 by rpki-client