$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c4dbf2b-a92e-322b-a34d-dfd08d5cd3e0.roa File: 9c4dbf2b-a92e-322b-a34d-dfd08d5cd3e0.roa (raw, json) Hash identifier: I841TA6i2BLME6cCMy7cpCGhF4Q6MYcGVrlxHaDfNWI= Subject key identifier: 04:F3:E0:E4:42:33:CC:E5:5A:4F:61:72:BC:89:DF:89:01:7E:6D:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3B62BDC6A0A478F9B800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c4dbf2b-a92e-322b-a34d-dfd08d5cd3e0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3b:62:bd:c6:a0:a4:78:f9:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e41a3d57-e9c2-49e9-91dd-9aa945e9c08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:a3:46:eb:e8:76:4e:a7:3c:28:ec:62:c5: 4e:2b:27:30:96:41:cb:d5:04:9b:97:50:ec:a3:3c: a8:1b:2a:45:21:d1:a0:b7:1e:f8:f4:37:0d:d9:55: 45:a3:42:3c:08:34:12:be:3a:cf:6b:69:8f:6d:cc: 86:44:6e:10:8b:13:48:f9:83:2d:73:97:ce:9d:dc: b3:17:74:85:ac:3b:3f:d3:43:19:25:af:97:16:84: f8:b4:9c:51:bb:15:7a:3b:2c:8e:35:99:85:4f:fb: 56:be:1d:9d:9f:cc:62:f8:3d:99:5a:9b:1c:9e:5a: 05:4d:4f:a8:38:2d:de:54:ef:02:bf:b9:67:37:78: 52:90:f5:a9:d4:cb:98:bd:25:82:2f:5a:8e:c7:0b: 82:65:f6:5b:19:75:2a:07:3a:ea:df:80:b1:c5:6d: ca:4d:31:b0:c8:5b:8b:53:3f:49:9b:e0:05:b7:8a: c9:1d:46:79:44:70:21:ea:5a:e6:b6:32:17:f3:71: d9:44:25:9d:49:dd:d2:5d:ef:c6:18:37:8c:00:46: 82:54:a1:12:15:fc:29:ae:c1:2d:36:29:94:b8:b2: b6:63:49:ac:03:80:4c:35:01:3f:d2:2e:72:cb:cc: 44:d4:5a:bb:f7:20:c5:32:f1:3e:e8:39:7a:a9:09: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F3:E0:E4:42:33:CC:E5:5A:4F:61:72:BC:89:DF:89:01:7E:6D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c4dbf2b-a92e-322b-a34d-dfd08d5cd3e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7e:13:4c:30:e2:81:2a:fc:51:8f:bb:f6:c2:60:bf:1e:7a: 16:79:6d:91:89:78:c6:f4:fe:27:90:f3:75:96:8c:f9:1b:c7: 8d:3c:65:fe:29:03:20:49:f1:fc:ca:4c:82:39:f3:71:14:af: e8:30:06:90:a4:d2:6e:73:03:15:38:69:99:67:26:91:5b:b0: 43:cc:05:33:57:67:6b:c0:a1:28:ef:5e:9f:d0:0c:18:79:05: d9:3e:9b:e7:f8:81:e5:db:b5:19:fe:3c:11:17:e9:a8:7e:b7: 16:6c:5e:e4:2b:41:3a:60:c0:f3:43:b4:25:90:35:0d:a6:a3: c4:e8:b0:07:f5:6d:4d:e3:4f:fb:9c:1a:0a:14:52:84:fd:d3: e2:9d:a8:b3:24:a6:5a:2e:41:c7:05:68:5c:c3:fe:35:98:05: 7b:b7:c9:36:9e:8c:ec:03:aa:1e:66:f0:97:af:5a:c3:9f:ae: be:ed:b5:4e:b2:cf:45:32:ec:6a:11:4b:27:e2:9b:cd:1b:9e: 73:59:3c:9d:75:0a:f1:ef:ec:ff:0a:28:01:62:1b:6c:67:58: fa:81:18:66:8d:72:54:f2:59:f6:67:b2:ff:43:71:19:05:04: 37:2a:ae:30:46:79:c8:19:77:59:7e:86:f3:25:37:a4:c6:ee: 80:e0:b5:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujtivcagpHj5uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTQxYTNkNTctZTljMi00OWU5LTkxZGQtOWFhOTQ1ZTljMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql6jRuvodk6nPCjsYsVOKycwlkHL1QSbl1Ds ozyoGypFIdGgtx749DcN2VVFo0I8CDQSvjrPa2mPbcyGRG4QixNI+YMtc5fOndyz F3SFrDs/00MZJa+XFoT4tJxRuxV6OyyONZmFT/tWvh2dn8xi+D2ZWpscnloFTU+o OC3eVO8Cv7lnN3hSkPWp1MuYvSWCL1qOxwuCZfZbGXUqBzrq34CxxW3KTTGwyFuL Uz9Jm+AFt4rJHUZ5RHAh6lrmtjIX83HZRCWdSd3SXe/GGDeMAEaCVKESFfwprsEt NimUuLK2Y0msA4BMNQE/0i5yy8xE1Fq79yDFMvE+6Dl6qQmXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATz4ORCM8zlWk9hcryJ34kBfm1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWM0ZGJmMmItYTkyZS0z MjJiLWEzNGQtZGZkMDhkNWNkM2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrRzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9+E0ww4oEq/FGPu/bCYL8eehZ5bZGJeMb0/ieQ83WWjPkbx408Zf4p AyBJ8fzKTII583EUr+gwBpCk0m5zAxU4aZlnJpFbsEPMBTNXZ2vAoSjvXp/QDBh5 Bdk+m+f4geXbtRn+PBEX6ah+txZsXuQrQTpgwPNDtCWQNQ2mo8TosAf1bU3jT/uc GgoUUoT90+KdqLMkplouQccFaFzD/jWYBXu3yTaejOwDqh5m8JevWsOfrr7ttU6y z0Uy7GoRSyfim80bnnNZPJ11CvHv7P8KKAFiG2xnWPqBGGaNclTyWfZnsv9DcRkF BDcqrjBGecgZd1l+hvMlN6TG7oDgtdg= -----END CERTIFICATE-----Generated at Sat Apr 26 23:40:10 2025 by rpki-client