$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa File: 127cab6c-cfe0-3d58-af0b-af059f2f8361.roa (raw, json) Hash identifier: 6rfNnpkP9JJ9ma8beIG9GwL0bLjzPxNALV2C3D7Pi/A= Subject key identifier: 76:28:F9:17:52:A5:F1:59:A3:14:79:4A:1C:11:6C:F4:F3:C0:73:C6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584902973D09CCDE5980226D6720 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa Signing time: Wed 26 Feb 2025 11:10:10 +0000 ROA not before: Wed 26 Feb 2025 11:10:10 +0000 ROA not after: Tue 27 May 2025 10:10:10 +0000 asID: 30036 IP address blocks: 173.28.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:97:3d:09:cc:de:59:80:22:6d:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 26 11:10:10 2025 GMT Not After : May 27 10:10:10 2025 GMT Subject: CN=37c6c9ba-2977-4629-b2c4-65baf3549836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:99:9c:03:2f:ac:f0:57:c1:b8:44:47:f6: f1:95:9d:a6:33:1e:9b:62:d8:e3:56:14:bb:5d:cd: 4f:7e:67:d2:62:b9:a2:5a:f3:4f:f5:a3:cf:94:b6: 24:4b:fd:0f:36:71:f9:3c:03:dd:51:fc:b2:43:2d: cf:d8:21:fc:f0:3f:4f:42:cf:df:81:8e:e7:ac:d0: 1a:85:15:82:69:72:8c:c8:dc:5d:bb:88:df:10:b9: 93:c9:f0:93:8a:da:13:c6:cd:3f:8f:99:7c:6d:00: 75:45:7f:7d:b9:bf:d0:4b:c6:36:46:85:e1:1e:16: 65:fa:09:0f:bb:94:a2:99:bb:b0:ba:be:67:65:5a: 43:c2:d7:43:85:40:3c:66:e1:11:32:0b:3e:ce:6e: 21:b3:3e:5d:a2:54:96:9e:7a:c8:78:b4:b6:cc:03: 78:d6:6a:5c:93:2a:bb:d1:9f:a5:5b:b2:da:4b:37: b9:02:67:da:74:a2:67:75:03:3d:08:ee:ee:bd:05: 59:9d:0e:92:2b:9a:54:a5:11:e5:a0:1e:34:67:87: 26:28:62:b9:dd:96:3d:b1:60:9b:16:c9:c5:63:13: a2:4a:50:91:fb:42:f0:04:3d:8b:31:67:f0:16:7a: bd:3c:cf:a7:c1:ca:b9:fa:b5:3e:04:ca:30:16:fe: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:28:F9:17:52:A5:F1:59:A3:14:79:4A:1C:11:6C:F4:F3:C0:73:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:47:2d:4b:f7:df:11:ba:52:3e:ca:71:af:81:37:c0:e6:34: f4:2d:46:1b:eb:74:42:f1:46:db:d7:5b:2f:ad:98:23:51:e8: d1:b9:70:cf:f9:e2:41:dc:0b:67:2e:5b:b6:eb:f3:c2:18:83: 28:8c:53:e8:75:90:8b:00:4b:8f:68:ab:95:35:15:ab:09:b7: 20:11:c1:17:bc:9c:f7:9e:47:d9:66:73:3e:91:ef:57:6a:16: 3b:87:c0:1b:c2:25:8f:a6:ae:b8:45:33:97:a4:a0:92:9f:0f: 53:bb:4b:b1:9b:f4:d5:35:18:ed:39:cb:3c:11:de:58:a0:eb: a3:a5:6d:1a:d1:61:ee:c5:4f:37:a7:cf:79:3e:b0:ac:9b:0d: 2e:5b:3c:60:d5:2f:5a:9c:58:6c:45:ba:df:ae:26:1b:fa:c0: 92:85:a1:8d:ef:57:ed:fa:19:89:1f:1c:1e:e2:05:17:ec:ed: 8a:35:aa:07:23:89:68:b4:e0:68:d1:9e:8c:2f:ca:30:b7:c8: 61:38:f6:0c:46:ca:86:f5:b7:e5:a0:66:a0:8d:33:0e:75:e8: 02:31:45:b9:9d:18:62:61:ef:1e:f3:3e:cd:e9:a8:f3:dc:45: 6c:d5:a8:7d:7d:91:d9:1d:22:28:90:2c:13:97:05:c2:c4:96: 60:21:55:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkClz0JzN5ZgCJtZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIyNjExMTAxMFoXDTI1MDUyNzEwMTAxMFowLzEtMCsGA1UEAxMk MzdjNmM5YmEtMjk3Ny00NjI5LWIyYzQtNjViYWYzNTQ5ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln+ZnAMvrPBXwbhER/bxlZ2mMx6bYtjjVhS7 Xc1PfmfSYrmiWvNP9aPPlLYkS/0PNnH5PAPdUfyyQy3P2CH88D9PQs/fgY7nrNAa hRWCaXKMyNxdu4jfELmTyfCTitoTxs0/j5l8bQB1RX99ub/QS8Y2RoXhHhZl+gkP u5Simbuwur5nZVpDwtdDhUA8ZuERMgs+zm4hsz5dolSWnnrIeLS2zAN41mpckyq7 0Z+lW7LaSze5AmfadKJndQM9CO7uvQVZnQ6SK5pUpRHloB40Z4cmKGK53ZY9sWCb FsnFYxOiSlCR+0LwBD2LMWfwFnq9PM+nwcq5+rU+BMowFv4w5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYo+RdSpfFZoxR5ShwRbPTzwHPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTI3Y2FiNmMtY2ZlMC0z ZDU4LWFmMGItYWYwNTlmMmY4MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdHLUv33xG6Uj7Kca+BN8DmNPQtRhvrdELxRtvXWy+tmCNR6NG5cM/5 4kHcC2cuW7br88IYgyiMU+h1kIsAS49oq5U1FasJtyARwRe8nPeeR9lmcz6R71dq FjuHwBvCJY+mrrhFM5ekoJKfD1O7S7Gb9NU1GO05yzwR3lig66OlbRrRYe7FTzen z3k+sKybDS5bPGDVL1qcWGxFut+uJhv6wJKFoY3vV+36GYkfHB7iBRfs7Yo1qgcj iWi04GjRnowvyjC3yGE49gxGyob1t+WgZqCNMw516AIxRbmdGGJh7x7zPs3pqPPc RWzVqH19kdkdIiiQLBOXBcLElmAhVes= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:44 2025 by rpki-client