$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e78fd349-e182-3894-a7d5-3dc04343687b.roa File: e78fd349-e182-3894-a7d5-3dc04343687b.roa (raw, json) Hash identifier: jub42bLwdHPkbXOIKrLt0OB8q3rWBeZztGGymAtx9tY= Subject key identifier: F2:E3:04:A3:31:64:17:6F:C6:9A:97:A1:71:A5:60:4D:AA:5B:46:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA14650382FEAE40ADE940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e78fd349-e182-3894-a7d5-3dc04343687b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:14:65:03:82:fe:ae:40:ad:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=806271a6-9a52-4c27-8d81-1614112e4cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:a2:5e:de:93:26:31:b8:37:4c:47:ea:fb: e4:eb:3d:8c:14:d2:44:c5:3f:f6:d2:e5:92:e6:4f: 99:88:d8:75:85:fe:eb:50:64:50:d6:6e:33:e4:16: ca:bf:72:6f:2b:76:12:ce:54:a2:a4:87:78:01:90: 6b:d6:c5:e6:f2:e4:37:68:ee:23:2d:59:85:96:9f: 22:86:6d:8b:12:d5:37:cd:d4:67:b4:a6:55:09:97: 3f:16:05:6d:97:a4:bb:85:84:bd:09:13:2d:85:0f: 44:44:c5:17:7e:23:a3:d9:12:3a:7f:d6:5f:b9:6a: 79:18:3f:fb:70:25:9f:96:5a:97:a0:d2:64:a7:31: 70:2c:57:b4:1c:7e:c2:25:d6:92:35:f2:65:ed:87: fd:97:a7:bd:cb:92:64:82:07:59:ab:c0:b7:89:46: d9:9d:f1:03:10:ec:b2:1f:11:0e:39:7e:e6:3c:f9: b9:cb:c7:4c:d1:c4:a2:4b:ef:2b:f4:b9:ad:fe:3d: f5:dc:ec:bc:15:3e:28:5a:8f:90:6a:3a:22:00:2a: db:9c:28:9f:cb:d9:0a:1a:5b:6e:1b:7a:31:24:99: e2:e6:18:06:ab:99:0b:b3:a0:d9:f8:ab:c4:97:09: 25:e9:65:09:60:b3:82:63:67:8b:88:cc:05:0e:a8: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E3:04:A3:31:64:17:6F:C6:9A:97:A1:71:A5:60:4D:AA:5B:46:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e78fd349-e182-3894-a7d5-3dc04343687b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9d:36:95:b0:28:f1:95:02:e9:55:e9:fe:6b:d3:5d:8b:01: ad:f7:19:c2:02:2c:8c:a6:2c:f4:a7:2f:ad:43:67:f2:b7:c9: 70:31:47:6a:95:83:f2:23:e2:b5:55:97:41:3c:32:94:6b:72: 6f:70:0e:c6:40:0f:2d:e2:09:21:22:82:81:eb:69:f3:7e:41: 98:5c:29:dc:02:a6:f8:df:3b:ea:44:ca:34:c7:23:69:98:3e: 06:ef:b9:d4:4a:2e:2e:bf:56:5d:c5:de:1b:d9:94:d1:76:a0: 41:cf:3b:b6:75:8f:62:27:14:2f:a5:b1:9b:4e:b8:d8:a0:0f: e9:09:7e:16:48:dd:99:92:bd:fa:ce:3d:e4:88:ff:f8:6d:32: 0c:b9:b5:a7:a3:97:3b:e6:a9:96:e4:e5:8b:f8:d0:a5:47:40: 3b:04:3f:e9:8a:7b:35:26:cf:03:e8:33:fc:a7:b4:e9:18:72: d8:ed:7a:d7:4d:4c:43:82:c2:67:6b:24:87:b2:56:d4:d5:1a: 3f:d2:29:f3:9b:4e:62:29:c6:28:db:08:fd:dd:72:97:9d:67: a6:8e:30:0a:49:8b:ea:1b:5c:88:c6:e8:c6:ab:6e:65:a9:d7: c5:08:d9:be:c0:d2:10:e1:8b:49:10:81:7d:86:a0:6a:88:65: 43:c7:e4:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhRlA4L+rkCt6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODA2MjcxYTYtOWE1Mi00YzI3LThkODEtMTYxNDExMmU0Y2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPqiXt6TJjG4N0xH6vvk6z2MFNJExT/20uWS 5k+ZiNh1hf7rUGRQ1m4z5BbKv3JvK3YSzlSipId4AZBr1sXm8uQ3aO4jLVmFlp8i hm2LEtU3zdRntKZVCZc/FgVtl6S7hYS9CRMthQ9ERMUXfiOj2RI6f9ZfuWp5GD/7 cCWfllqXoNJkpzFwLFe0HH7CJdaSNfJl7Yf9l6e9y5JkggdZq8C3iUbZnfEDEOyy HxEOOX7mPPm5y8dM0cSiS+8r9Lmt/j313Oy8FT4oWo+QajoiACrbnCify9kKGltu G3oxJJni5hgGq5kLs6DZ+KvElwkl6WUJYLOCY2eLiMwFDqgJQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLjBKMxZBdvxpqXoXGlYE2qW0YKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTc4ZmQzNDktZTE4Mi0z ODk0LWE3ZDUtM2RjMDQzNDM2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACudNpWwKPGVAulV6f5r012LAa33GcICLIymLPSnL61DZ/K3yXAxR2qV g/Ij4rVVl0E8MpRrcm9wDsZADy3iCSEigoHrafN+QZhcKdwCpvjfO+pEyjTHI2mY PgbvudRKLi6/Vl3F3hvZlNF2oEHPO7Z1j2InFC+lsZtOuNigD+kJfhZI3ZmSvfrO PeSI//htMgy5taejlzvmqZbk5Yv40KVHQDsEP+mKezUmzwPoM/yntOkYctjtetdN TEOCwmdrJIeyVtTVGj/SKfObTmIpxijbCP3dcpedZ6aOMApJi+obXIjG6MarbmWp 18UI2b7A0hDhi0kQgX2GoGqIZUPH5Is= -----END CERTIFICATE-----Generated at Sun Apr 27 13:12:15 2025 by rpki-client