$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f5ebbd3-06f4-330d-bed6-6bf76a79abf6.roa File: 0f5ebbd3-06f4-330d-bed6-6bf76a79abf6.roa (raw, json) Hash identifier: Bp9oMiSo+JHH6ZL61g/6y0n9+Gc7Rvo7H/jU/QCyQ58= Subject key identifier: 42:CA:07:0E:2F:3B:22:A2:25:E0:AD:D7:FF:B8:BD:0E:43:7B:C9:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57F9FE6CE5479F6F044F020 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f5ebbd3-06f4-330d-bed6-6bf76a79abf6.roa Signing time: Tue 04 Feb 2025 13:58:17 +0000 ROA not before: Tue 04 Feb 2025 13:58:17 +0000 ROA not after: Mon 05 May 2025 12:58:17 +0000 asID: 30036 IP address blocks: 173.28.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7f:9f:e6:ce:54:79:f6:f0:44:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:58:17 2025 GMT Not After : May 5 12:58:17 2025 GMT Subject: CN=876a0df9-f66c-45ad-bcde-a98a966aad4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:c3:bf:28:aa:25:46:d7:36:db:d3:18:41: fb:e8:8d:ea:38:43:65:87:89:25:64:ae:31:eb:aa: c3:b9:d5:2d:b9:80:7c:7f:cf:d5:af:d7:a8:42:13: 92:57:01:15:c9:2d:c1:2e:7b:ff:4e:e4:a2:61:3f: a9:ed:53:a1:65:b6:bf:fe:82:ec:59:36:df:9c:b1: 2b:4c:46:ad:66:0f:e4:6a:0f:f7:90:e5:83:b6:e8: b3:73:64:06:44:d6:32:15:dc:91:5a:e6:a3:bd:96: e1:4d:c0:53:0f:0e:f3:fa:58:c3:16:95:d2:ae:16: 25:60:e1:13:1c:e1:7b:a7:8f:e4:94:f2:ce:50:2b: 29:6f:e6:6d:8f:29:36:02:b3:19:25:11:0e:11:e6: b1:55:d6:c5:4f:da:b9:3a:84:b1:66:53:15:42:ce: 8a:92:b1:40:09:01:0a:7c:25:00:72:39:d4:0d:55: 64:9b:d9:26:02:a4:e9:c9:99:61:61:92:e9:83:14: 50:e0:b2:65:b5:9f:5f:fc:68:dc:17:40:0f:ac:e4: 1b:ff:b8:2c:83:2b:80:fb:78:e8:8d:ba:bd:79:3c: 81:93:0b:6f:f5:9e:30:dd:2d:f8:5d:21:1a:38:12: 6e:09:03:d4:73:52:0c:8f:e9:a0:af:c7:25:00:61: af:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CA:07:0E:2F:3B:22:A2:25:E0:AD:D7:FF:B8:BD:0E:43:7B:C9:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f5ebbd3-06f4-330d-bed6-6bf76a79abf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:41:19:ed:d1:4b:f7:da:dc:5b:93:1f:21:60:b3:e3:04:11: 8f:32:be:88:81:cf:e8:42:6a:95:b3:1f:88:78:7b:5d:86:8a: e6:11:0c:f6:24:03:10:91:ea:c4:b3:db:82:2e:14:d0:ab:9a: a1:63:2c:94:fc:55:c6:a1:cf:48:0a:00:b6:16:f6:7e:27:d3: c9:e9:03:d1:78:67:32:f4:f4:7e:2e:3f:f9:15:05:fd:7a:2b: 1a:76:69:d7:78:f4:f7:13:95:8a:04:69:40:3f:48:c9:10:58: 99:11:10:ef:3e:cc:68:27:22:ff:a6:a4:be:e6:1c:f0:b5:40: be:7b:4e:c6:c4:6e:45:2d:de:13:d5:83:28:07:a6:b5:44:61: 53:32:11:f4:d1:de:54:19:f0:86:40:a5:bb:9b:34:b9:15:57: 4f:3f:cd:a8:f5:72:3b:64:af:73:85:67:93:5b:39:d1:35:b4: 80:ee:dc:b2:f4:0b:d0:43:59:76:5e:04:3d:bd:de:9d:48:b5: 31:8d:e4:fd:89:5b:06:fc:44:2e:71:11:a7:29:15:e7:0a:a9: d1:46:31:d0:13:a3:f7:7a:2b:db:34:74:5b:5c:16:7b:5a:52: f2:6c:b9:19:4b:00:3c:7e:74:20:10:b5:61:eb:74:95:68:98: 86:a3:fd:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFf5/mzlR59vBE8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTgxN1oXDTI1MDUwNTEyNTgxN1owLzEtMCsGA1UEAxMk ODc2YTBkZjktZjY2Yy00NWFkLWJjZGUtYTk4YTk2NmFhZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrrDvyiqJUbXNtvTGEH76I3qOENlh4klZK4x 66rDudUtuYB8f8/Vr9eoQhOSVwEVyS3BLnv/TuSiYT+p7VOhZba//oLsWTbfnLEr TEatZg/kag/3kOWDtuizc2QGRNYyFdyRWuajvZbhTcBTDw7z+ljDFpXSrhYlYOET HOF7p4/klPLOUCspb+Ztjyk2ArMZJREOEeaxVdbFT9q5OoSxZlMVQs6KkrFACQEK fCUAcjnUDVVkm9kmAqTpyZlhYZLpgxRQ4LJltZ9f/GjcF0APrOQb/7gsgyuA+3jo jbq9eTyBkwtv9Z4w3S34XSEaOBJuCQPUc1IMj+mgr8clAGGvEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELKBw4vOyKiJeCt1/+4vQ5De8kwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGY1ZWJiZDMtMDZmNC0z MzBkLWJlZDYtNmJmNzZhNzlhYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINBGe3RS/fa3FuTHyFgs+MEEY8yvoiBz+hCapWzH4h4e12GiuYRDPYk AxCR6sSz24IuFNCrmqFjLJT8Vcahz0gKALYW9n4n08npA9F4ZzL09H4uP/kVBf16 Kxp2add49PcTlYoEaUA/SMkQWJkREO8+zGgnIv+mpL7mHPC1QL57TsbEbkUt3hPV gygHprVEYVMyEfTR3lQZ8IZApbubNLkVV08/zaj1cjtkr3OFZ5NbOdE1tIDu3LL0 C9BDWXZeBD293p1ItTGN5P2JWwb8RC5xEacpFecKqdFGMdATo/d6K9s0dFtcFnta UvJsuRlLADx+dCAQtWHrdJVomIaj/QI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:56 2025 by rpki-client