$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa File: 2d526aab-3817-3369-8704-f5e3258bccd6.roa (raw, json) Hash identifier: o82/Nz5XM4lKwyuHxJ1dGb5IaMR3CrKJckqDOTjlLFU= Subject key identifier: 99:CA:77:C6:5B:0A:4B:C3:2D:DA:D9:24:02:71:DB:52:0A:D8:5A:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F5D8EE541BDD346E0E6A60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa Signing time: Wed 05 Feb 2025 11:08:06 +0000 ROA not before: Wed 05 Feb 2025 11:08:06 +0000 ROA not after: Tue 06 May 2025 10:08:06 +0000 asID: 30036 IP address blocks: 173.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f5:d8:ee:54:1b:dd:34:6e:0e:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:08:06 2025 GMT Not After : May 6 10:08:06 2025 GMT Subject: CN=a0fa2557-ce23-4280-839c-bfc9539772d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:b8:1e:51:37:5c:d7:1a:36:0c:3f:b7:f0: b3:d4:36:4e:c0:8e:b3:5a:31:fd:e9:be:b9:f2:22: be:36:d0:9d:e8:a6:5b:eb:0a:f1:77:3b:f1:41:d1: 5d:ce:cf:cd:94:7b:39:1d:5d:c7:73:16:da:bc:ef: ba:a7:01:b2:f1:67:01:83:33:12:c6:6c:d3:d3:9a: 93:0f:9b:4e:6c:86:53:ac:db:91:b0:ca:19:8d:b9: f5:f9:14:c3:f2:6a:a2:8d:5d:29:68:8b:b3:54:f3: 26:a9:6a:29:dd:76:34:dd:81:d7:f3:7f:da:9a:a0: ac:0d:98:2a:91:08:3f:8e:e6:08:df:8d:83:b0:7f: c6:d7:55:44:a0:1a:e5:27:55:ee:be:c9:5e:9a:f9: d7:7f:3f:03:34:1c:b8:57:dc:b0:98:0d:58:8b:04: e5:32:3d:7d:53:dc:c7:db:85:da:f2:74:38:9d:e8: 44:67:83:7f:cb:10:c4:a4:2b:08:7b:3a:77:8f:30: 6a:48:63:7f:8d:db:f8:f9:37:c4:d1:2d:35:1c:9c: d2:99:6f:89:c4:61:ee:98:eb:49:68:a1:74:07:0e: bc:43:60:0f:16:b5:85:8f:67:2c:cc:85:74:86:11: db:fe:ab:28:c7:7f:4c:fb:a6:dd:9c:c8:78:17:1b: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CA:77:C6:5B:0A:4B:C3:2D:DA:D9:24:02:71:DB:52:0A:D8:5A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c2:37:57:59:05:a8:67:96:90:43:11:b8:fc:6b:34:71:c6: dd:a8:7a:45:30:81:93:37:35:97:b6:3f:95:f1:38:5d:27:35: 2f:a7:a2:74:6c:42:1b:86:f6:12:94:ed:04:d2:71:1f:bd:f7: 7d:67:f6:59:89:5d:e0:a2:86:de:7b:9a:e8:49:a7:d4:20:21: bd:42:cd:0d:e7:50:fd:8b:c4:54:3b:5b:81:6b:93:99:a3:77: 5f:f2:57:ec:f4:82:2e:c1:32:67:67:91:80:30:6e:6e:b1:17: 0e:f9:55:34:b7:8b:f2:c3:1c:24:8f:32:b4:5a:d9:a7:dc:58: 56:43:50:10:15:52:8b:e8:4a:a9:fe:39:0c:d0:b3:4f:c3:9f: 92:e0:bf:8f:51:28:85:56:61:dd:f4:05:a4:8f:69:d3:31:df: 6f:3f:9e:4f:d9:96:b1:0d:08:67:91:6e:df:90:c8:cb:4c:55: 8e:88:1c:7c:52:ee:31:87:70:6b:32:93:d0:5d:97:33:87:c1: ea:ed:89:55:36:d6:05:0c:64:0c:23:1f:fa:75:39:4f:84:e5: a5:46:0a:87:eb:cc:3f:16:5e:12:af:5e:79:49:c9:8a:38:07: 44:79:99:f8:4d:ee:66:eb:4e:ff:ca:16:cf:e8:af:54:d2:6d: 1f:06:fb:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9djuVBvdNG4OamAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMDgwNloXDTI1MDUwNjEwMDgwNlowLzEtMCsGA1UEAxMk YTBmYTI1NTctY2UyMy00MjgwLTgzOWMtYmZjOTUzOTc3MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mu4HlE3XNcaNgw/t/Cz1DZOwI6zWjH96b65 8iK+NtCd6KZb6wrxdzvxQdFdzs/NlHs5HV3HcxbavO+6pwGy8WcBgzMSxmzT05qT D5tObIZTrNuRsMoZjbn1+RTD8mqijV0paIuzVPMmqWop3XY03YHX83/amqCsDZgq kQg/juYI342DsH/G11VEoBrlJ1XuvslemvnXfz8DNBy4V9ywmA1YiwTlMj19U9zH 24Xa8nQ4nehEZ4N/yxDEpCsIezp3jzBqSGN/jdv4+TfE0S01HJzSmW+JxGHumOtJ aKF0Bw68Q2APFrWFj2cszIV0hhHb/qsox39M+6bdnMh4FxsjPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnKd8ZbCkvDLdrZJAJx21IK2FrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ1MjZhYWItMzgxNy0z MzY5LTg3MDQtZjVlMzI1OGJjY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnCN1dZBahnlpBDEbj8azRxxt2oekUwgZM3NZe2P5XxOF0nNS+nonRs QhuG9hKU7QTScR+9931n9lmJXeCiht57muhJp9QgIb1CzQ3nUP2LxFQ7W4Frk5mj d1/yV+z0gi7BMmdnkYAwbm6xFw75VTS3i/LDHCSPMrRa2afcWFZDUBAVUovoSqn+ OQzQs0/Dn5Lgv49RKIVWYd30BaSPadMx328/nk/ZlrENCGeRbt+QyMtMVY6IHHxS 7jGHcGsyk9BdlzOHwertiVU21gUMZAwjH/p1OU+E5aVGCofrzD8WXhKvXnlJyYo4 B0R5mfhN7mbrTv/KFs/or1TSbR8G+wo= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:51 2025 by rpki-client