$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa File: bfe8432c-0a39-369f-abd1-923404f53a2f.roa (raw, json) Hash identifier: Le4V4FpuZcQDvdUG6QBA2Lb0IdnROYQX/1xUhXUhxEM= Subject key identifier: 1D:CD:57:1C:2F:71:42:CF:2D:FF:93:CB:1D:26:6C:FB:91:17:A3:8C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA462D3E656899F6C77740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:46:2d:3e:65:68:99:f6:c7:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f13dcc0f-ed7c-4372-a8ee-f5badaff8938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:58:bd:6c:65:dd:cd:d1:bf:03:07:aa:a8: 72:ce:37:50:ac:bd:53:83:3e:3e:4d:3c:76:7c:00: 64:f7:95:4c:a2:0b:6c:fc:3d:5a:89:ba:c5:5c:f9: 5f:e5:e7:51:f1:a7:bc:1f:4f:e6:8d:3e:d3:ae:24: 03:0f:1a:7b:cc:ec:dc:79:00:10:fe:c7:05:d0:33: 4e:cd:b2:f9:f1:ed:4d:d2:f3:11:84:05:8e:5b:33: 32:5a:9d:4e:74:2d:49:76:cd:09:14:78:d5:44:9a: d1:a9:de:bf:03:e3:59:9a:0f:8e:26:7f:05:18:83: 83:f6:15:84:df:67:7c:1f:ad:24:34:58:f3:34:51: d9:ab:17:49:c9:e1:fc:df:d2:83:0e:c7:35:62:75: 1a:ad:49:30:86:6e:a6:61:7a:2b:27:7f:5d:54:dc: 07:f3:1e:ea:51:6c:e6:4c:ef:bf:19:14:20:2e:1b: bc:03:db:25:9b:4c:8e:52:e8:26:70:a0:26:80:3a: 7e:06:92:81:ac:47:e9:ce:3b:90:e4:42:7b:d4:b1: 3d:da:3b:a1:25:0f:9d:ab:4d:e6:b8:37:1c:22:1a: 0b:b1:15:32:b2:70:95:ba:2b:3e:7a:82:fe:80:17: 4c:f6:81:b6:35:b1:cc:32:d5:4b:7a:25:44:99:f8: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CD:57:1C:2F:71:42:CF:2D:FF:93:CB:1D:26:6C:FB:91:17:A3:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9a:ca:17:7a:87:6d:53:54:09:da:89:79:f1:d3:87:2b:69: 8c:3d:b6:aa:ab:df:77:8b:e5:3f:ee:87:56:4a:85:38:22:dc: ec:ff:42:66:66:04:94:56:8f:5d:6a:5c:c7:04:80:19:60:46: 98:0b:26:a1:95:04:31:9f:c3:8c:d4:ce:e6:ed:fc:2c:36:f3: 49:9b:d9:34:f6:94:50:df:05:41:18:e8:f1:eb:75:ff:83:91: c5:42:d4:29:95:61:6c:74:92:80:20:96:e5:33:1a:b7:d1:6a: 08:26:4e:c3:a1:38:77:10:89:b0:4d:f9:da:5f:0f:ad:0a:2e: d4:94:e8:33:91:2c:39:3a:6d:a9:0f:ec:14:82:c3:fd:b5:68: 6f:30:1b:39:3d:56:8d:87:4e:b3:e5:12:51:a5:87:35:3b:b4: fb:6c:66:48:88:1c:21:9c:5f:6d:90:82:6d:c2:f4:7d:07:6a: 8d:a2:46:50:53:8b:0e:12:cc:c6:f3:72:24:09:ba:59:19:ad: 32:73:ca:bd:8a:2b:40:b7:51:ed:d8:52:30:af:42:d6:59:eb: 81:6c:35:99:f9:38:dd:83:28:23:b4:83:33:97:02:e9:26:d9: 56:7d:70:93:9b:bb:a6:01:fd:2d:fa:04:91:df:fe:37:c6:eb: d5:42:73:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukYtPmVomfbHd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjEzZGNjMGYtZWQ3Yy00MzcyLWE4ZWUtZjViYWRhZmY4OTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4hYvWxl3c3RvwMHqqhyzjdQrL1Tgz4+TTx2 fABk95VMogts/D1aibrFXPlf5edR8ae8H0/mjT7TriQDDxp7zOzceQAQ/scF0DNO zbL58e1N0vMRhAWOWzMyWp1OdC1Jds0JFHjVRJrRqd6/A+NZmg+OJn8FGIOD9hWE 32d8H60kNFjzNFHZqxdJyeH839KDDsc1YnUarUkwhm6mYXorJ39dVNwH8x7qUWzm TO+/GRQgLhu8A9slm0yOUugmcKAmgDp+BpKBrEfpzjuQ5EJ71LE92juhJQ+dq03m uDccIhoLsRUysnCVuis+eoL+gBdM9oG2NbHMMtVLeiVEmfjiywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3NVxwvcULPLf+Tyx0mbPuRF6OMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlODQzMmMtMGEzOS0z NjlmLWFiZDEtOTIzNDA0ZjUzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCayhd6h21TVAnaiXnx04craYw9tqqr33eL5T/uh1ZKhTgi3Oz/QmZm BJRWj11qXMcEgBlgRpgLJqGVBDGfw4zUzubt/Cw280mb2TT2lFDfBUEY6PHrdf+D kcVC1CmVYWx0koAgluUzGrfRaggmTsOhOHcQibBN+dpfD60KLtSU6DORLDk6bakP 7BSCw/21aG8wGzk9Vo2HTrPlElGlhzU7tPtsZkiIHCGcX22Qgm3C9H0Hao2iRlBT iw4SzMbzciQJulkZrTJzyr2KK0C3Ue3YUjCvQtZZ64FsNZn5ON2DKCO0gzOXAukm 2VZ9cJObu6YB/S36BJHf/jfG69VCc1o= -----END CERTIFICATE-----Generated at Mon Jun 16 01:48:41 2025 by rpki-client