$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa File: 1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa (raw, json) Hash identifier: olb8WwOOZkvWGEk47oBnrXXVRLPGndX3GE0UZ+O+W0Q= Subject key identifier: 73:CF:2A:FB:1A:5F:0C:F2:55:CB:01:9B:5E:68:B9:ED:FC:83:EB:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57D19E7CFD877872DD8DDA8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa Signing time: Tue 04 Feb 2025 13:53:12 +0000 ROA not before: Tue 04 Feb 2025 13:53:12 +0000 ROA not after: Mon 05 May 2025 12:53:12 +0000 asID: 30036 IP address blocks: 173.28.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:19:e7:cf:d8:77:87:2d:d8:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:53:12 2025 GMT Not After : May 5 12:53:12 2025 GMT Subject: CN=aa937468-ede0-4f4e-b5cf-74c8fc01dea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:ce:aa:4b:16:44:44:4a:d1:fb:cd:54:bb: f5:76:62:76:35:9a:76:8c:16:bb:a6:27:bc:eb:3f: 29:a0:92:29:ff:17:fc:cb:75:a5:3b:14:0e:e7:99: ba:fe:ad:92:e8:22:f7:13:ed:32:88:67:12:d8:5b: a1:f7:4b:57:fc:1c:52:16:93:06:ad:fe:20:bb:a6: 51:bd:ce:4c:6e:64:7b:30:60:43:b5:bf:6e:f2:71: 18:7b:28:c0:72:1a:a3:e7:e4:60:d8:22:24:11:5c: c8:43:4a:00:77:6b:21:b4:6f:6f:01:fc:7a:65:2d: 42:a6:0a:93:56:9d:f4:6f:0f:55:5d:4d:71:7e:70: 21:fa:68:b6:a1:ce:41:3f:77:41:76:80:41:fe:df: 4c:7f:20:06:fe:cc:57:4e:6a:5a:67:26:11:c4:1a: 6c:f3:d9:d2:3f:27:97:a6:5a:30:49:2a:aa:57:2f: 12:a8:7d:dc:d9:7c:d8:1d:01:bb:e9:66:dd:d4:f6: d8:e7:bb:af:66:3b:84:45:f7:74:a9:34:4e:21:5d: c1:d4:3e:85:47:ec:a7:49:10:80:86:a8:72:28:4c: d9:5c:ef:05:c3:5a:f7:44:51:4f:b3:53:77:62:bd: 5e:d7:87:e6:bf:66:ce:4f:48:d4:5b:f3:7f:3c:fb: 59:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CF:2A:FB:1A:5F:0C:F2:55:CB:01:9B:5E:68:B9:ED:FC:83:EB:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e7:53:43:5f:cd:e3:1f:80:ec:26:2b:fd:3e:4e:d2:16:b5: 85:c7:3e:88:3e:88:60:1f:ca:77:81:73:ad:db:e2:bc:94:a1: ba:27:67:39:5a:55:c1:16:b3:2f:e7:38:d7:e6:12:56:0e:47: d4:fe:db:b7:cd:8f:3a:45:35:e4:f7:2e:45:46:fd:bd:98:56: 55:df:ac:a4:78:84:27:b1:5a:6b:c3:82:d9:fe:10:60:5d:5e: ba:3f:63:17:2b:ea:31:fa:35:14:2f:8e:39:a2:7c:39:4e:f9: 1d:e2:e4:bc:e3:fa:e5:5f:e8:ad:be:fe:15:55:c9:48:a0:48: 3b:7d:e8:a4:33:6b:5d:ac:b4:c3:5a:19:ac:1e:9a:a1:fd:35: 1e:d4:95:c0:9a:4c:1a:38:f9:89:cf:86:e7:6c:0f:53:18:a9: 4d:37:56:d8:95:32:bb:72:33:cd:55:75:78:c8:90:af:ed:61: 78:53:42:b3:a6:ae:c2:c3:e4:b2:1a:3e:a3:1b:f7:bd:3c:59: ac:b7:2a:1e:1d:b2:90:68:9c:44:b8:74:89:c3:61:f2:d3:6f: 76:65:0b:3c:a3:81:4e:68:e9:c9:ee:03:0f:16:03:7d:e2:d9: d1:c6:12:58:eb:2b:c7:d8:33:dd:99:be:f4:2e:14:ef:23:01: b4:6f:62:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfRnnz9h3hy3Y3agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTMxMloXDTI1MDUwNTEyNTMxMlowLzEtMCsGA1UEAxMk YWE5Mzc0NjgtZWRlMC00ZjRlLWI1Y2YtNzRjOGZjMDFkZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTXOqksWRERK0fvNVLv1dmJ2NZp2jBa7pie8 6z8poJIp/xf8y3WlOxQO55m6/q2S6CL3E+0yiGcS2Fuh90tX/BxSFpMGrf4gu6ZR vc5MbmR7MGBDtb9u8nEYeyjAchqj5+Rg2CIkEVzIQ0oAd2shtG9vAfx6ZS1CpgqT Vp30bw9VXU1xfnAh+mi2oc5BP3dBdoBB/t9MfyAG/sxXTmpaZyYRxBps89nSPyeX plowSSqqVy8SqH3c2XzYHQG76Wbd1PbY57uvZjuERfd0qTROIV3B1D6FR+ynSRCA hqhyKEzZXO8Fw1r3RFFPs1N3Yr1e14fmv2bOT0jUW/N/PPtZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPPKvsaXwzyVcsBm15oue38g+vqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTM5N2EwZGQtZjI5My0z YWMxLThjOTYtMTZhYzNlNGUyOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTnU0NfzeMfgOwmK/0+TtIWtYXHPog+iGAfyneBc63b4ryUobonZzla VcEWsy/nONfmElYOR9T+27fNjzpFNeT3LkVG/b2YVlXfrKR4hCexWmvDgtn+EGBd Xro/Yxcr6jH6NRQvjjmifDlO+R3i5Lzj+uVf6K2+/hVVyUigSDt96KQza12stMNa GawemqH9NR7UlcCaTBo4+YnPhudsD1MYqU03VtiVMrtyM81VdXjIkK/tYXhTQrOm rsLD5LIaPqMb9708Way3Kh4dspBonES4dInDYfLTb3ZlCzyjgU5o6cnuAw8WA33i 2dHGEljrK8fYM92ZvvQuFO8jAbRvYo8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:50 2025 by rpki-client