$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9609aa2-4534-3a42-9c29-88a85b4eb4b4.roa File: f9609aa2-4534-3a42-9c29-88a85b4eb4b4.roa (raw, json) Hash identifier: F5+fRd8hZQHWUuLRYM4jAkJPf4c+AbWYL3x6za9KV5I= Subject key identifier: 4A:34:8F:5B:34:BE:81:FF:63:CC:16:9C:60:B7:0A:CC:8D:6D:20:BA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A9B6FAD865E2CDE14840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9609aa2-4534-3a42-9c29-88a85b4eb4b4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.28.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a9:b6:fa:d8:65:e2:cd:e1:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2c72a298-d446-49f5-9c06-41e861cbcd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ed:65:22:7d:6f:ff:f3:78:b7:e8:72:5a:05: 5b:3e:ee:68:84:df:25:40:33:34:16:4c:65:ef:be: 56:2e:37:dc:5c:ec:c8:08:85:9c:ea:bb:99:19:7d: 6f:4b:4c:93:82:6a:0b:24:fd:5f:eb:cc:69:b5:1f: 11:61:c7:54:a6:2a:be:a6:1c:fd:ba:4c:1a:8e:1f: 16:b8:55:39:29:c7:52:ca:3f:be:2d:1f:21:41:24: f9:01:d0:b9:40:1e:04:eb:82:12:22:fe:d9:7f:97: 93:0b:b1:55:81:e6:45:89:51:d8:ae:9f:c8:a1:13: 91:09:50:84:46:49:e8:8f:16:0c:e2:2a:f6:d1:48: 00:18:79:5a:60:d6:ba:23:1b:a7:2c:13:bc:ed:8f: 21:51:6c:0d:68:12:92:3b:6b:99:87:16:0d:db:f3: 61:db:01:31:29:8d:4a:05:be:0a:7b:0a:73:e1:4a: 19:56:d0:6e:cb:e8:13:2e:0d:89:87:ee:5a:66:5e: ea:52:40:66:f0:54:d8:eb:c9:d7:13:49:6b:b0:0d: 6b:da:95:e0:b8:cf:a5:25:fb:86:0f:87:50:06:bb: da:84:64:fd:17:96:39:c9:fd:e5:90:a2:a2:75:76: 8a:07:7d:2d:99:af:5c:a0:5e:0d:07:3d:53:ae:97: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:34:8F:5B:34:BE:81:FF:63:CC:16:9C:60:B7:0A:CC:8D:6D:20:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9609aa2-4534-3a42-9c29-88a85b4eb4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4e:4d:b5:97:db:65:05:fc:74:28:64:bc:ef:5e:9f:94:01: ce:1a:0a:0c:8b:63:2e:af:1a:94:a1:b1:5f:b7:b7:84:df:ee: c4:c1:77:31:b9:9d:3b:80:cf:d1:26:d4:52:e9:89:76:f8:18: 9a:c3:d0:93:af:b8:94:1f:5d:b1:d9:ce:e6:81:e2:ed:04:ab: df:94:17:0e:6c:f7:8c:39:6e:30:7f:e1:98:e4:08:63:5e:04: 61:7e:b0:b8:92:0c:51:ba:5d:23:66:f1:51:d5:48:80:bc:2f: 63:cd:d8:ad:a5:7f:34:14:1f:4d:b7:73:9f:db:47:9e:02:20: 5a:d7:50:59:fa:80:42:fa:1d:de:f8:ef:14:f3:15:32:ac:bd: d6:0e:da:40:e5:59:9e:29:94:bf:06:40:24:cd:b9:ac:89:33: 96:82:22:b2:f8:59:4e:27:1a:32:f0:b3:1a:0c:da:f5:d3:06: b4:ce:fa:bb:e3:2d:d5:f8:9a:d6:4a:2d:fa:d3:ae:6a:6a:e9: 48:81:83:de:d9:3d:1f:2e:7e:1a:84:1f:f4:d2:19:95:cf:59: 17:b3:80:ce:fb:5a:f7:d3:94:45:94:a1:fe:0d:a9:c2:42:a0: 75:68:89:00:7b:55:4a:f3:c6:d2:98:db:45:90:d7:00:65:05: 04:b4:d3:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKm2+thl4s3hSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmM3MmEyOTgtZDQ0Ni00OWY1LTljMDYtNDFlODYxY2JjZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme1lIn1v//N4t+hyWgVbPu5ohN8lQDM0Fkxl 775WLjfcXOzICIWc6ruZGX1vS0yTgmoLJP1f68xptR8RYcdUpiq+phz9ukwajh8W uFU5KcdSyj++LR8hQST5AdC5QB4E64ISIv7Zf5eTC7FVgeZFiVHYrp/IoRORCVCE RknojxYM4ir20UgAGHlaYNa6IxunLBO87Y8hUWwNaBKSO2uZhxYN2/Nh2wExKY1K Bb4Kewpz4UoZVtBuy+gTLg2Jh+5aZl7qUkBm8FTY68nXE0lrsA1r2pXguM+lJfuG D4dQBrvahGT9F5Y5yf3lkKKidXaKB30tma9coF4NBz1TrpczdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo0j1s0voH/Y8wWnGC3CsyNbSC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjk2MDlhYTItNDUzNC0z YTQyLTljMjktODhhODViNGViNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFROTbWX22UF/HQoZLzvXp+UAc4aCgyLYy6vGpShsV+3t4Tf7sTBdzG5 nTuAz9Em1FLpiXb4GJrD0JOvuJQfXbHZzuaB4u0Eq9+UFw5s94w5bjB/4ZjkCGNe BGF+sLiSDFG6XSNm8VHVSIC8L2PN2K2lfzQUH023c5/bR54CIFrXUFn6gEL6Hd74 7xTzFTKsvdYO2kDlWZ4plL8GQCTNuayJM5aCIrL4WU4nGjLwsxoM2vXTBrTO+rvj LdX4mtZKLfrTrmpq6UiBg97ZPR8ufhqEH/TSGZXPWRezgM77WvfTlEWUof4NqcJC oHVoiQB7VUrzxtKY20WQ1wBlBQS004A= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:47 2025 by rpki-client