$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba28fac6-551c-3ca9-b673-21acf35f9225.roa File: ba28fac6-551c-3ca9-b673-21acf35f9225.roa (raw, json) Hash identifier: MUGZMQ7V4Pup0Act6bBqmwyiyheJ/y+smR7ix+blZXY= Subject key identifier: 62:21:8C:06:63:B1:85:8C:27:4C:8F:39:37:60:1E:5D:57:77:D5:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C4920E5152F5547CDFB100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba28fac6-551c-3ca9-b673-21acf35f9225.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.29.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:92:0e:51:52:f5:54:7c:df:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=46a47061-cf7c-4974-bc72-895b9db703b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:45:18:57:b0:15:3f:a6:d9:6c:eb:a0:9c: 6a:6a:e6:f6:73:d0:61:a2:d7:19:ea:b5:e5:9b:b8: ec:27:0f:93:5b:f4:de:86:d8:62:3e:31:6c:62:50: d7:f3:95:ae:fc:fa:dc:05:35:36:ce:dd:8c:d2:52: 31:2a:d5:dd:4d:b8:6f:be:d4:17:06:6b:7d:85:5c: 28:67:21:ee:6e:20:73:d8:a0:df:3c:f0:5f:3d:f6: 3a:90:a7:02:5b:3b:33:49:df:b0:ec:34:df:5f:58: 98:ef:6c:b2:6f:d0:b4:2c:db:b0:94:12:68:b2:47: e9:9b:8e:2a:3a:a1:c4:a9:47:77:38:50:36:40:71: 1b:fd:e6:39:16:4e:38:33:d6:2f:f0:9e:cb:7e:75: 1e:cf:c6:ab:3e:8f:4a:e6:4a:7c:d7:fc:a1:4a:7d: 7e:89:51:ff:d0:7b:2e:ff:2b:49:f9:66:f8:da:00: 01:cd:3a:2f:28:e2:4a:28:08:0a:ac:8e:64:6c:5e: b3:cd:c3:e8:08:94:aa:7c:ae:82:21:06:b1:65:b0: 83:78:87:b7:ea:97:9c:3d:3e:df:07:c5:40:38:eb: 3f:b1:75:e9:94:fb:be:8e:bd:d0:f0:1a:41:cb:e0: 7b:e0:88:82:dd:62:d6:f3:47:4c:90:f6:7b:53:c5: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:21:8C:06:63:B1:85:8C:27:4C:8F:39:37:60:1E:5D:57:77:D5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba28fac6-551c-3ca9-b673-21acf35f9225.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:08:41:19:60:4d:78:7d:24:8e:64:24:9d:58:2f:98:a1:6e: f3:9d:f0:59:6a:31:29:87:3e:9f:2b:95:61:dd:de:ba:0e:e7: 42:0e:2c:52:83:8e:2a:27:fd:09:83:e1:6a:44:1f:3b:af:41: cb:12:3a:b2:13:8d:fc:9d:e2:77:7c:fb:9c:6b:a6:a3:c4:35: 5d:25:3f:00:aa:cc:47:ac:84:8d:a8:f3:23:20:ef:10:c4:04: d6:84:47:4e:cb:04:73:5b:0a:e1:ac:ee:1f:a7:f2:88:f1:39: 96:7d:b9:27:7a:54:3a:37:24:39:0e:9f:4e:65:db:13:c8:62: de:96:b4:9b:d2:9d:91:db:ed:d7:25:c0:7c:fb:38:2b:75:ac: b8:88:cc:c6:4d:87:d9:d0:a3:d5:85:aa:24:c6:46:52:03:2e: ca:6e:55:73:39:73:69:70:c6:37:35:34:6b:10:cd:1f:10:0b: 57:48:f7:e1:3e:0f:53:99:92:df:06:5f:75:40:e9:d1:2f:63: a1:ce:48:a3:76:8e:0a:14:35:7d:0e:ce:5b:25:38:54:53:e2: f4:15:09:47:78:2d:63:f0:4f:b7:78:68:69:95:7f:10:45:d8: 7a:8c:c6:58:64:93:66:28:81:4b:d4:3e:8b:30:5b:60:0b:81: 22:fe:7b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJIOUVL1VHzfsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NDZhNDcwNjEtY2Y3Yy00OTc0LWJjNzItODk1YjlkYjcwM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4JFGFewFT+m2WzroJxqaub2c9BhotcZ6rXl m7jsJw+TW/TehthiPjFsYlDX85Wu/PrcBTU2zt2M0lIxKtXdTbhvvtQXBmt9hVwo ZyHubiBz2KDfPPBfPfY6kKcCWzszSd+w7DTfX1iY72yyb9C0LNuwlBJoskfpm44q OqHEqUd3OFA2QHEb/eY5Fk44M9Yv8J7LfnUez8arPo9K5kp81/yhSn1+iVH/0Hsu /ytJ+Wb42gABzTovKOJKKAgKrI5kbF6zzcPoCJSqfK6CIQaxZbCDeIe36pecPT7f B8VAOOs/sXXplPu+jr3Q8BpBy+B74IiC3WLW80dMkPZ7U8UE0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIhjAZjsYWMJ0yPOTdgHl1Xd9VAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmEyOGZhYzYtNTUxYy0z Y2E5LWI2NzMtMjFhY2YzNWY5MjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQIQRlgTXh9JI5kJJ1YL5ihbvOd8FlqMSmHPp8rlWHd3roO50IOLFKD jion/QmD4WpEHzuvQcsSOrITjfyd4nd8+5xrpqPENV0lPwCqzEeshI2o8yMg7xDE BNaER07LBHNbCuGs7h+n8ojxOZZ9uSd6VDo3JDkOn05l2xPIYt6WtJvSnZHb7dcl wHz7OCt1rLiIzMZNh9nQo9WFqiTGRlIDLspuVXM5c2lwxjc1NGsQzR8QC1dI9+E+ D1OZkt8GX3VA6dEvY6HOSKN2jgoUNX0OzlslOFRT4vQVCUd4LWPwT7d4aGmVfxBF 2HqMxlhkk2YogUvUPoswW2ALgSL+e+o= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:56 2025 by rpki-client