$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4650650-a2ec-3791-8bcc-7839988d0952.roa File: e4650650-a2ec-3791-8bcc-7839988d0952.roa (raw, json) Hash identifier: uVJANbn0PQHdKEPnu4u0FT/7rMIUu1s+FmCBvuxnroY= Subject key identifier: BF:44:71:1D:F9:64:2A:51:D3:28:75:82:43:AA:A4:A6:F0:C2:7A:51 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F331F042310F1FD02A100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4650650-a2ec-3791-8bcc-7839988d0952.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.28.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:33:1f:04:23:10:f1:fd:02:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=ddcc27ff-d898-42c9-9ee9-f8ea75b2be51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:aa:e3:46:ba:2f:81:6f:d9:8c:86:bb:ae:2b: 80:3c:d9:5b:ee:4f:b3:b4:d5:5f:da:c0:b7:4d:b3: bb:fd:7e:b9:e2:54:8b:69:83:f0:10:b4:4e:be:06: 9d:0f:72:46:58:70:e5:64:b7:64:4d:f6:91:9d:45: 7b:33:f0:58:df:c9:af:0d:12:55:9d:40:c6:e6:35: 5e:2a:b5:db:3a:6a:5e:b0:fe:ce:b9:b9:9a:f3:b3: 2f:17:7f:73:02:e5:7b:b0:31:b6:db:0b:5f:42:ec: e7:9d:b8:16:be:f6:4d:a9:19:14:7f:c6:e1:bc:6f: 0f:aa:38:57:29:7c:5f:99:f7:f7:65:80:36:e0:04: bd:df:ea:17:3b:1f:17:da:14:16:2a:a2:37:19:5e: 3c:10:16:3b:82:e7:c9:e5:22:ca:24:23:14:40:6f: 20:9e:50:eb:cc:a2:3f:28:4b:25:52:00:fa:ab:79: 9f:a9:19:10:26:34:6f:ce:ce:22:8f:db:c7:dc:1d: 34:f6:23:47:a8:28:31:82:e2:88:fb:6d:f6:f2:43: f1:cd:f5:34:ab:32:36:dd:cc:bc:b7:dd:36:c5:68: bf:d2:9f:8b:7f:c2:ee:78:01:87:81:6f:c6:24:fc: a3:1e:2d:14:74:ed:28:5b:46:ec:eb:e8:5a:27:40: 0f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:71:1D:F9:64:2A:51:D3:28:75:82:43:AA:A4:A6:F0:C2:7A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4650650-a2ec-3791-8bcc-7839988d0952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2f:e2:30:5d:3e:bf:f7:bd:49:81:99:21:29:ef:71:c7:fc: 14:cb:a0:55:36:17:d7:a3:4c:07:55:f2:8e:55:7f:e0:ef:e2: 60:1e:d4:8c:ab:51:97:4f:0c:32:84:76:60:ef:f2:6e:6b:f7: a2:ed:4e:18:c3:81:75:c9:4f:d4:08:ec:d0:10:60:d2:c5:ae: d7:a2:ba:7c:ae:65:e7:c3:1d:4a:64:2f:63:36:fb:c9:27:99: c5:46:25:85:42:2c:f7:54:4f:1c:7f:c4:a6:0d:f0:34:48:da: 19:85:c1:50:19:84:19:a5:2e:54:67:7c:f0:59:19:3c:d1:6c: 0c:8b:1c:77:33:27:3c:6e:bf:91:10:d7:d4:be:55:34:36:df: e5:f0:e9:ea:75:cf:94:95:9f:57:5b:32:cb:c9:e3:36:b7:91: 9b:ce:d2:44:7b:66:87:10:ce:cf:81:bd:54:ed:5d:55:3d:fc: 6e:fc:6f:93:2b:3c:a0:b1:fa:43:ac:18:a6:40:59:51:ca:66: 17:6a:9d:13:99:9f:8d:c8:a1:2c:9c:1e:29:81:83:9e:35:a8: d5:db:63:2e:35:09:39:76:d3:5e:ff:99:7d:61:01:96:82:93: 05:12:e1:cb:22:f1:24:41:3e:95:0f:e0:c3:25:d7:46:81:d4: 96:82:32:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzMfBCMQ8f0CoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZGRjYzI3ZmYtZDg5OC00MmM5LTllZTktZjhlYTc1YjJiZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKrjRrovgW/ZjIa7riuAPNlb7k+ztNVf2sC3 TbO7/X654lSLaYPwELROvgadD3JGWHDlZLdkTfaRnUV7M/BY38mvDRJVnUDG5jVe KrXbOmpesP7Oubma87MvF39zAuV7sDG22wtfQuznnbgWvvZNqRkUf8bhvG8PqjhX KXxfmff3ZYA24AS93+oXOx8X2hQWKqI3GV48EBY7gufJ5SLKJCMUQG8gnlDrzKI/ KEslUgD6q3mfqRkQJjRvzs4ij9vH3B009iNHqCgxguKI+2328kPxzfU0qzI23cy8 t902xWi/0p+Lf8LueAGHgW/GJPyjHi0UdO0oW0bs6+haJ0APiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9EcR35ZCpR0yh1gkOqpKbwwnpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTQ2NTA2NTAtYTJlYy0z NzkxLThiY2MtNzgzOTk4OGQwOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMv4jBdPr/3vUmBmSEp73HH/BTLoFU2F9ejTAdV8o5Vf+Dv4mAe1Iyr UZdPDDKEdmDv8m5r96LtThjDgXXJT9QI7NAQYNLFrteiunyuZefDHUpkL2M2+8kn mcVGJYVCLPdUTxx/xKYN8DRI2hmFwVAZhBmlLlRnfPBZGTzRbAyLHHczJzxuv5EQ 19S+VTQ23+Xw6ep1z5SVn1dbMsvJ4za3kZvO0kR7ZocQzs+BvVTtXVU9/G78b5Mr PKCx+kOsGKZAWVHKZhdqnROZn43IoSycHimBg541qNXbYy41CTl2017/mX1hAZaC kwUS4csi8SRBPpUP4MMl10aB1JaCMtQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:28 2025 by rpki-client