$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0a1b200-6f2b-30fa-a29c-e573f4c903e4.roa File: c0a1b200-6f2b-30fa-a29c-e573f4c903e4.roa (raw, json) Hash identifier: FlCk0jfm4emfSiD+Oi4/vtkLXY/zQ8FhfRYcvEvKeSQ= Subject key identifier: 3F:F6:DD:D2:CC:DB:93:E8:70:0E:C5:58:1E:A0:45:19:AC:A1:BE:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F33105F9E6DD5F99FA660 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0a1b200-6f2b-30fa-a29c-e573f4c903e4.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.28.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:33:10:5f:9e:6d:d5:f9:9f:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=eadeb340-4511-4e0e-ba29-c18b33449337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:d0:56:3d:92:ee:10:72:41:51:d9:ba:c8: 12:24:a0:5e:a7:7a:06:0b:d4:a7:9f:3c:e4:b7:2a: dc:0d:ca:e9:55:9d:9d:fe:4a:6e:4b:2d:2b:f6:fe: ee:98:db:00:52:3a:bd:84:8e:01:bd:04:78:ba:58: ac:fa:d5:9d:e0:d8:fa:e4:91:2d:60:31:be:c4:40: d7:40:20:fe:5a:e2:2b:11:73:d1:1e:c3:a8:02:5e: f4:9c:c1:e8:c3:88:1e:fd:dd:4f:25:eb:74:c0:5c: 5d:8a:26:3f:37:09:c5:bc:13:02:7a:2e:60:42:00: 48:d7:b7:8b:1f:cf:34:41:df:d5:f3:fe:a8:05:ee: 5c:ff:7b:cf:61:24:a9:4b:79:1c:c7:23:50:db:02: 37:28:22:23:9f:96:05:9e:87:65:be:33:c5:73:00: c1:3b:60:df:81:7f:ad:a6:11:c4:8d:ea:2d:19:fa: f1:1f:09:9f:d4:71:f2:91:e5:ae:ec:ff:74:b5:7e: 45:c4:3f:a7:b5:a9:a2:93:74:b6:5f:c6:f4:ca:fa: 82:d9:09:b8:1d:ed:81:d0:14:6d:02:c0:ac:67:ed: 27:8a:80:8a:c4:77:de:7e:c4:c5:ba:3a:6d:75:61: 32:7c:85:35:c9:42:ae:a5:a0:17:bf:e0:f2:49:2e: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F6:DD:D2:CC:DB:93:E8:70:0E:C5:58:1E:A0:45:19:AC:A1:BE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0a1b200-6f2b-30fa-a29c-e573f4c903e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4c:12:18:f9:a8:bb:ba:8a:9c:53:68:80:eb:68:ef:bf:8a: 1a:9b:83:76:25:ba:24:b9:6a:c5:24:4e:21:46:98:0d:c5:d6: 73:c2:c0:f5:d4:b5:ec:28:bc:b8:cd:74:b4:18:b0:41:ae:99: ce:eb:11:39:b0:7d:90:7d:11:be:0a:61:d1:63:7b:62:3e:3e: 00:01:79:af:10:98:46:cc:f2:5b:1b:ce:4a:8a:a6:3a:a9:3e: 60:14:a8:1f:a9:3e:f0:2b:43:35:79:2d:fb:29:87:87:46:51: fe:b0:25:fc:ef:0e:ae:d3:8c:14:03:a2:f7:1f:85:9a:2b:2c: a7:53:d2:c1:47:b9:b7:5e:f4:78:a0:ea:d1:00:c7:33:e6:aa: e8:75:91:6b:58:38:02:ac:a2:14:58:8d:24:5f:f3:04:fe:91: 0d:fa:1d:d3:2f:96:cd:f4:61:b4:15:df:f4:bb:f7:bd:5f:a9: 20:88:88:df:da:72:09:19:e2:d5:66:73:4b:20:dd:59:6b:ef: 00:08:a7:4f:31:67:1b:98:96:2d:61:9e:2a:1b:8d:f4:e9:66: 99:54:90:9c:9f:61:a9:1b:a9:0c:46:1b:dc:00:51:e3:3d:f4: fb:6f:71:e1:79:e8:af:1b:13:ba:a5:7d:78:27:8b:c6:f1:e9: 2f:04:7a:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzMQX55t1fmfpmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZWFkZWIzNDAtNDUxMS00ZTBlLWJhMjktYzE4YjMzNDQ5MzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznXQVj2S7hByQVHZusgSJKBep3oGC9Snnzzk tyrcDcrpVZ2d/kpuSy0r9v7umNsAUjq9hI4BvQR4ulis+tWd4Nj65JEtYDG+xEDX QCD+WuIrEXPRHsOoAl70nMHow4ge/d1PJet0wFxdiiY/NwnFvBMCei5gQgBI17eL H880Qd/V8/6oBe5c/3vPYSSpS3kcxyNQ2wI3KCIjn5YFnodlvjPFcwDBO2DfgX+t phHEjeotGfrxHwmf1HHykeWu7P90tX5FxD+ntamik3S2X8b0yvqC2Qm4He2B0BRt AsCsZ+0nioCKxHfefsTFujptdWEyfIU1yUKupaAXv+DySS45YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/23dLM25PocA7FWB6gRRmsob51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzBhMWIyMDAtNmYyYi0z MGZhLWEyOWMtZTU3M2Y0YzkwM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVMEhj5qLu6ipxTaIDraO+/ihqbg3YluiS5asUkTiFGmA3F1nPCwPXU tewovLjNdLQYsEGumc7rETmwfZB9Eb4KYdFje2I+PgABea8QmEbM8lsbzkqKpjqp PmAUqB+pPvArQzV5Lfsph4dGUf6wJfzvDq7TjBQDovcfhZorLKdT0sFHubde9Hig 6tEAxzPmquh1kWtYOAKsohRYjSRf8wT+kQ36HdMvls30YbQV3/S7971fqSCIiN/a cgkZ4tVmc0sg3Vlr7wAIp08xZxuYli1hniobjfTpZplUkJyfYakbqQxGG9wAUeM9 9PtvceF56K8bE7qlfXgni8bx6S8Eevc= -----END CERTIFICATE-----Generated at Sat Apr 26 20:47:41 2025 by rpki-client