$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa File: bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa (raw, json) Hash identifier: 3wez+0+u3HZyJz9FFWMaA98vusZo491TPefBSUJkPCg= Subject key identifier: 56:AE:9B:7E:E1:B6:75:27:44:8B:9E:61:F7:80:D3:ED:38:1F:E8:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A6987673764B9D884BC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a6:98:76:73:76:4b:9d:88:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=cf7ab327-804a-4324-b63c-33f92198faeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b7:f1:94:69:1f:00:b4:8e:c9:ce:d8:46:c5: b8:ab:19:45:83:78:d8:32:31:49:a7:35:58:c8:54: 04:ac:84:42:05:ae:c2:dc:c0:5f:23:8b:53:d0:78: 98:3e:e5:38:b6:ce:d4:12:97:c8:29:d4:1a:d8:d5: d1:60:d4:a5:85:41:41:ce:62:0b:0c:a7:fb:a7:94: a3:7f:88:17:3f:5f:19:0c:1b:5a:27:89:a9:07:d2: c7:94:6c:dc:a4:c5:33:87:68:07:b6:31:2e:22:2c: 5c:e6:59:3d:43:ca:ba:9a:e9:59:c2:41:1c:70:68: 4c:7a:ec:38:c6:9c:2d:02:47:eb:34:90:97:b1:52: fe:26:ea:3a:0e:7d:51:12:27:b3:1f:ae:d5:51:aa: 78:35:c9:e2:34:61:a4:c0:b5:16:58:80:68:93:3f: a5:b9:ea:46:fd:2f:3f:02:38:df:33:51:23:83:7d: fc:dd:4e:da:c4:fc:1f:a6:03:01:48:85:99:10:64: 04:b7:eb:14:de:06:c0:09:ff:7e:4c:69:d0:f3:6b: 74:97:a9:53:a1:0d:1c:4d:22:91:97:f1:55:9c:9e: 66:b7:06:47:e5:42:4d:cd:a0:a4:41:e6:c9:5f:b7: c9:bc:5b:68:c8:76:d7:28:1f:ef:28:24:14:60:08: b2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AE:9B:7E:E1:B6:75:27:44:8B:9E:61:F7:80:D3:ED:38:1F:E8:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:07:d8:23:10:8a:6b:ef:1d:09:9f:df:f7:f8:a5:67:5c:08: 25:98:b6:b3:63:0e:1a:79:c6:18:c9:b7:f7:ab:d7:2d:bd:23: 8e:4b:77:64:bd:31:1e:a0:d5:7e:39:43:1c:27:70:5d:25:fd: 13:62:58:21:00:b9:d6:84:9a:77:c5:0a:21:29:53:22:a1:84: 43:1c:f0:3f:13:58:e3:6c:bb:ff:93:c9:b5:4c:6f:99:12:1a: 08:65:77:57:8d:fe:b5:21:94:18:05:90:ba:4c:7c:94:9e:64: 08:2a:01:01:f8:2c:2e:60:73:11:4f:04:6a:20:de:f6:1d:43: 95:2e:d9:ee:0f:f5:15:73:fd:f0:ec:7c:d4:6e:23:fe:89:8f: 1a:a6:dd:3a:b0:26:b3:10:e9:05:26:7d:be:37:32:d4:39:17: 06:9a:c1:4f:25:f6:29:e1:bc:90:d1:10:da:c0:3b:83:63:53: 66:2c:f5:4e:0d:d3:23:ff:1d:4e:8d:71:5f:b2:61:90:08:d7: 94:e3:a6:be:5b:d7:c3:f9:e8:76:68:e6:2c:a8:24:6b:62:8c: 01:6c:e7:7d:6d:a1:2e:3e:ca:a6:32:a4:c8:65:03:58:b3:53: 72:5a:a7:80:e5:fc:97:31:1b:74:be:37:dd:98:f0:f0:5c:5b: bc:62:9a:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKaYdnN2S52IS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2Y3YWIzMjctODA0YS00MzI0LWI2M2MtMzNmOTIxOThmYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLfxlGkfALSOyc7YRsW4qxlFg3jYMjFJpzVY yFQErIRCBa7C3MBfI4tT0HiYPuU4ts7UEpfIKdQa2NXRYNSlhUFBzmILDKf7p5Sj f4gXP18ZDBtaJ4mpB9LHlGzcpMUzh2gHtjEuIixc5lk9Q8q6mulZwkEccGhMeuw4 xpwtAkfrNJCXsVL+Juo6Dn1REiezH67VUap4NcniNGGkwLUWWIBokz+luepG/S8/ AjjfM1Ejg3383U7axPwfpgMBSIWZEGQEt+sU3gbACf9+TGnQ82t0l6lToQ0cTSKR l/FVnJ5mtwZH5UJNzaCkQebJX7fJvFtoyHbXKB/vKCQUYAiynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaum37htnUnRIueYfeA0+04H+hHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmYzZTUzNjAtMzUxOS0z ZWYxLWE1NTEtNDRiMWI3MDdiOGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUH2CMQimvvHQmf3/f4pWdcCCWYtrNjDhp5xhjJt/er1y29I45Ld2S9 MR6g1X45QxwncF0l/RNiWCEAudaEmnfFCiEpUyKhhEMc8D8TWONsu/+TybVMb5kS Gghld1eN/rUhlBgFkLpMfJSeZAgqAQH4LC5gcxFPBGog3vYdQ5Uu2e4P9RVz/fDs fNRuI/6Jjxqm3TqwJrMQ6QUmfb43MtQ5FwaawU8l9inhvJDRENrAO4NjU2Ys9U4N 0yP/HU6NcV+yYZAI15Tjpr5b18P56HZo5iyoJGtijAFs531toS4+yqYypMhlA1iz U3Jap4Dl/JcxG3S+N92Y8PBcW7ximhI= -----END CERTIFICATE-----Generated at Sun Apr 27 16:36:09 2025 by rpki-client