$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa File: 325ce877-ce13-37a2-ac60-db90fc5927ff.roa (raw, json) Hash identifier: 3L3tLixBPimlOVyrnjbXkybwgr55RIoKJy4o5fIUu5k= Subject key identifier: 32:D9:53:39:9C:E2:6D:9B:CB:24:6C:15:38:E4:46:0C:77:F1:1F:5E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B73632E4220BC3E671EC5480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa Signing time: Thu 30 Jan 2025 11:09:01 +0000 ROA not before: Thu 30 Jan 2025 11:09:01 +0000 ROA not after: Wed 30 Apr 2025 10:09:01 +0000 asID: 30036 IP address blocks: 173.16.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:32:e4:22:0b:c3:e6:71:ec:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:09:01 2025 GMT Not After : Apr 30 10:09:01 2025 GMT Subject: CN=ce3ef6ba-0790-40dc-bd3a-40af680aadbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ab:e8:d3:85:23:01:1b:d3:c1:cf:f4:86:b8: 6b:20:1a:a5:cc:f6:ed:60:62:5b:b3:8f:13:c8:f7: ec:9d:fd:63:53:d9:69:47:fe:73:d2:73:89:b7:a9: 71:a8:df:92:97:b2:3d:fc:fb:53:36:89:a9:3e:84: e3:21:43:f4:69:27:0c:95:29:f4:46:7c:f1:e2:64: ff:53:da:e9:4e:f5:63:9c:dc:81:99:18:97:2b:5e: e0:5f:01:68:71:7c:e2:8e:bc:77:14:9f:25:99:fe: 04:a5:f1:28:90:93:e5:c8:f2:64:f3:b2:68:c3:8e: bb:0f:8c:4c:71:48:a5:7f:78:50:88:2b:64:e2:ae: 3b:95:c1:ee:f8:c5:c9:1e:37:a7:50:77:94:24:db: 45:ad:6b:09:f2:90:11:c3:99:85:1e:80:b3:f1:20: e7:58:a0:e7:06:75:1c:bb:12:bc:a7:0d:5c:46:78: 89:7a:bf:0d:4f:3b:68:2d:53:cb:1c:73:7c:d0:54: 29:8a:65:44:04:3c:0c:6d:78:db:b8:cd:e8:97:38: 6f:5c:4f:68:13:b3:c5:6a:97:5c:39:a2:f2:9c:7e: 55:69:17:69:52:02:c6:e9:b1:5a:99:2c:1b:d6:c3: f9:13:78:20:c6:40:96:39:ed:2e:3e:bd:6e:26:70: 98:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D9:53:39:9C:E2:6D:9B:CB:24:6C:15:38:E4:46:0C:77:F1:1F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:58:67:61:30:42:c0:b3:04:90:08:85:5a:18:51:3d:d2:98: ad:81:d1:98:9a:01:ca:98:04:ca:3f:c0:fe:41:12:97:df:1e: 15:b3:f2:01:21:0e:c7:17:ab:a7:14:73:e3:f0:aa:49:5a:01: 45:13:97:fc:a3:db:cf:f2:fb:03:af:e1:94:f2:ec:a2:75:97: 0d:7a:a2:5c:11:a8:03:56:3c:97:ee:ea:38:1b:e7:a3:c1:1d: 77:73:30:39:06:3a:0f:b0:da:64:67:20:08:fe:55:6b:02:91: 34:79:d2:92:32:cd:c0:a8:7f:7e:41:93:43:28:6a:e9:26:45: 0d:e8:ff:41:fd:97:e3:6c:a9:91:b0:94:8f:07:1b:be:5b:2f: 76:86:2d:86:e2:da:7d:b3:b8:7b:e6:44:d7:69:b5:af:ec:e1: 68:70:0c:83:a1:7f:23:ed:4e:9e:18:7b:8f:72:c9:61:ee:3f: c1:15:a9:bc:0c:d8:21:05:01:fe:e8:2f:9e:05:2a:1d:a1:3e: 05:80:e3:3b:b3:02:e0:e6:c4:0d:72:ce:92:d3:52:f4:73:b1: a7:34:0c:bf:a5:10:67:f7:98:2a:9c:3a:76:e4:7c:da:d5:15: 14:14:ea:62:35:d4:f2:2a:d2:55:f7:b7:51:00:e1:6e:70:15: e3:83:70:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NjLkIgvD5nHsVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDkwMVoXDTI1MDQzMDEwMDkwMVowLzEtMCsGA1UEAxMk Y2UzZWY2YmEtMDc5MC00MGRjLWJkM2EtNDBhZjY4MGFhZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKvo04UjARvTwc/0hrhrIBqlzPbtYGJbs48T yPfsnf1jU9lpR/5z0nOJt6lxqN+Sl7I9/PtTNompPoTjIUP0aScMlSn0Rnzx4mT/ U9rpTvVjnNyBmRiXK17gXwFocXzijrx3FJ8lmf4EpfEokJPlyPJk87Jow467D4xM cUilf3hQiCtk4q47lcHu+MXJHjenUHeUJNtFrWsJ8pARw5mFHoCz8SDnWKDnBnUc uxK8pw1cRniJer8NTztoLVPLHHN80FQpimVEBDwMbXjbuM3olzhvXE9oE7PFapdc OaLynH5VaRdpUgLG6bFamSwb1sP5E3ggxkCWOe0uPr1uJnCYiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLZUzmc4m2byyRsFTjkRgx38R9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzI1Y2U4NzctY2UxMy0z N2EyLWFjNjAtZGI5MGZjNTkyN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJYZ2EwQsCzBJAIhVoYUT3SmK2B0ZiaAcqYBMo/wP5BEpffHhWz8gEh DscXq6cUc+PwqklaAUUTl/yj28/y+wOv4ZTy7KJ1lw16olwRqANWPJfu6jgb56PB HXdzMDkGOg+w2mRnIAj+VWsCkTR50pIyzcCof35Bk0MoaukmRQ3o/0H9l+NsqZGw lI8HG75bL3aGLYbi2n2zuHvmRNdpta/s4WhwDIOhfyPtTp4Ye49yyWHuP8EVqbwM 2CEFAf7oL54FKh2hPgWA4zuzAuDmxA1yzpLTUvRzsac0DL+lEGf3mCqcOnbkfNrV FRQU6mI11PIq0lX3t1EA4W5wFeODcEI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:31 2025 by rpki-client