$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3e020a8-a9d1-3307-a211-0f7a19a09b5f.roa File: e3e020a8-a9d1-3307-a211-0f7a19a09b5f.roa (raw, json) Hash identifier: cyf0oO6GeyEs/6fuBhkS+z6ioUMEhLvLoQL9LIutxEo= Subject key identifier: FE:21:20:B8:3B:0D:06:47:8B:B9:C5:BD:ED:2F:83:A1:12:83:A2:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4C139E741EA28F49EE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3e020a8-a9d1-3307-a211-0f7a19a09b5f.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.28.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4c:13:9e:74:1e:a2:8f:49:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=0bbf1bad-bc1e-42bb-9ddf-15716de17d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:e3:71:08:4e:2d:d1:0f:33:c6:b6:8b:f5: b4:a9:88:4d:a5:44:09:19:7b:45:6e:b9:b9:4e:a1: e1:6a:50:31:96:62:aa:76:ed:b2:7d:44:55:7a:49: b9:7a:e5:53:87:61:cf:ec:60:c6:c2:0b:65:32:09: 69:1a:26:31:35:a5:be:68:8a:7c:40:3a:b8:80:44: 2e:d1:e9:62:0c:47:2d:ed:a9:2c:1f:1a:a2:bc:af: e6:08:9e:e1:91:d8:14:06:30:e5:6e:93:1a:9f:23: c5:e8:1e:e8:e7:a0:19:e4:e1:f8:f4:13:ec:be:7b: 40:1d:fd:58:45:0b:c1:e1:07:72:b5:16:38:41:5f: 03:ae:da:2f:17:b8:97:91:62:53:f6:1b:e8:0c:9b: 29:bf:00:f0:4c:45:8c:da:47:d9:96:10:0d:f8:5a: c4:12:b8:56:23:40:9c:ea:09:84:38:9f:2e:f6:bb: c9:bf:17:e7:2a:34:df:2d:0e:a4:a5:b3:30:53:3f: 1b:65:b0:90:e2:9c:1f:55:c0:08:83:35:2b:66:13: 35:8a:89:81:36:2e:60:d5:cb:ee:45:41:00:13:ea: a2:f5:d9:48:10:19:59:dc:ea:1a:a1:22:95:cd:f8: a7:3d:77:e1:b8:a1:78:19:a1:38:fc:95:13:a5:ee: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:20:B8:3B:0D:06:47:8B:B9:C5:BD:ED:2F:83:A1:12:83:A2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3e020a8-a9d1-3307-a211-0f7a19a09b5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:81:f6:da:ad:c2:a1:a7:9a:30:6f:97:3d:60:1a:76:40:96: c4:38:54:9a:72:d9:04:2d:98:eb:fa:92:d2:a1:24:3b:20:3d: 26:16:b2:2a:f6:d3:b6:02:f6:eb:7f:0e:90:fb:2e:9b:86:21: a3:e5:81:39:02:86:dd:73:37:15:f1:70:42:de:64:e1:48:17: 6f:2b:cc:9f:d6:7b:fe:f8:5f:b8:d6:3d:5f:61:94:29:fb:6c: 02:06:13:f3:c9:90:73:89:77:7b:12:e3:f2:ae:46:89:93:42: d5:68:82:17:dc:ee:cd:39:90:c6:7f:fe:2d:87:87:05:06:15: 4c:44:6b:a4:80:f1:d7:86:eb:6b:cf:b8:e4:a1:fe:e3:1d:54: 65:63:af:ac:3a:73:31:37:af:b4:38:f6:65:0b:25:f7:9a:eb: e0:dd:0d:c6:6d:49:4d:7d:5d:db:dc:b8:5e:c5:ee:71:07:c3: 8f:0b:d0:03:19:ca:57:43:1c:a3:15:25:35:ea:49:68:09:c0: 5f:c3:9a:c5:a7:1c:8d:a0:5b:9b:93:1b:60:d2:14:21:48:72: 76:23:f7:78:82:45:94:62:5d:11:51:40:64:59:c0:3b:a4:ce: fa:34:b5:a9:09:23:03:94:82:aa:f6:be:96:6f:24:23:48:b9: 8d:98:00:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70wTnnQeoo9J7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MGJiZjFiYWQtYmMxZS00MmJiLTlkZGYtMTU3MTZkZTE3ZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLTjcQhOLdEPM8a2i/W0qYhNpUQJGXtFbrm5 TqHhalAxlmKqdu2yfURVekm5euVTh2HP7GDGwgtlMglpGiYxNaW+aIp8QDq4gEQu 0eliDEct7aksHxqivK/mCJ7hkdgUBjDlbpManyPF6B7o56AZ5OH49BPsvntAHf1Y RQvB4QdytRY4QV8DrtovF7iXkWJT9hvoDJspvwDwTEWM2kfZlhAN+FrEErhWI0Cc 6gmEOJ8u9rvJvxfnKjTfLQ6kpbMwUz8bZbCQ4pwfVcAIgzUrZhM1iomBNi5g1cvu RUEAE+qi9dlIEBlZ3OoaoSKVzfinPXfhuKF4GaE4/JUTpe4KtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4hILg7DQZHi7nFve0vg6ESg6I4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTNlMDIwYTgtYTlkMS0z MzA3LWEyMTEtMGY3YTE5YTA5YjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOB9tqtwqGnmjBvlz1gGnZAlsQ4VJpy2QQtmOv6ktKhJDsgPSYWsir2 07YC9ut/DpD7LpuGIaPlgTkCht1zNxXxcELeZOFIF28rzJ/We/74X7jWPV9hlCn7 bAIGE/PJkHOJd3sS4/KuRomTQtVoghfc7s05kMZ//i2HhwUGFUxEa6SA8deG62vP uOSh/uMdVGVjr6w6czE3r7Q49mULJfea6+DdDcZtSU19XdvcuF7F7nEHw48L0AMZ yldDHKMVJTXqSWgJwF/DmsWnHI2gW5uTG2DSFCFIcnYj93iCRZRiXRFRQGRZwDuk zvo0takJIwOUgqr2vpZvJCNIuY2YANg= -----END CERTIFICATE-----Generated at Sun Apr 27 12:10:06 2025 by rpki-client