$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa File: 85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa (raw, json) Hash identifier: 4JTIuvgWKRzXlucv5+JxY14tDZ2e9GdMXwtcriHkjkk= Subject key identifier: B9:66:32:55:80:45:02:A7:99:69:A9:F4:C3:C4:06:BF:DD:C8:9A:80 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5756A35352923A8775A2180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa Signing time: Tue 04 Feb 2025 13:37:43 +0000 ROA not before: Tue 04 Feb 2025 13:37:43 +0000 ROA not after: Mon 05 May 2025 12:37:43 +0000 asID: 30036 IP address blocks: 173.28.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:75:6a:35:35:29:23:a8:77:5a:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:37:43 2025 GMT Not After : May 5 12:37:43 2025 GMT Subject: CN=a1ea0e8c-3ef1-42b9-9af1-71ce117dd6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:2e:97:df:82:66:09:48:50:d5:18:83:84: 07:35:37:82:07:b8:ec:15:b4:56:7e:5c:99:6f:58: 38:c9:74:b4:1b:02:64:be:e3:e0:23:8f:94:15:40: f9:4a:30:b7:25:94:92:83:9f:fb:77:d2:c9:72:ff: 5d:57:2f:df:44:84:c4:73:5d:a9:35:9b:1e:21:0f: 40:16:83:57:21:96:63:e1:1a:2a:6f:3d:0a:16:97: 91:70:7b:e0:c1:6d:45:3f:46:de:c2:55:43:60:3c: cf:b3:d1:95:0f:18:d0:04:f7:66:5e:be:dd:9b:a8: 90:c1:44:05:43:a6:58:12:da:28:5c:f2:95:a4:a8: b8:f7:4e:81:f0:6b:e3:1c:53:4b:c9:30:19:e5:9d: 4c:74:10:89:0a:c8:4d:7a:de:f7:cc:a4:50:4c:59: 4b:69:66:23:fe:13:1b:bb:0d:4f:a2:ce:f3:dd:45: 0c:55:ee:a6:7e:49:27:72:65:87:13:69:d3:95:e0: b7:7d:3e:cb:9d:8f:0b:41:3a:53:68:c7:6d:73:16: 9f:c2:a3:15:32:05:66:07:d0:ab:da:a8:25:11:a1: 5e:e6:93:6d:7c:c8:e2:ed:e4:cd:24:70:db:ca:3a: 0f:ff:93:6f:42:e5:29:10:3a:3e:26:cd:48:19:5f: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:66:32:55:80:45:02:A7:99:69:A9:F4:C3:C4:06:BF:DD:C8:9A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cd:f0:fb:74:a8:8b:da:44:25:8c:04:1f:00:3d:ea:77:cb: 0d:6a:72:df:cb:fb:9d:8b:d7:d8:ce:b5:3f:52:69:41:1b:5d: 9f:dc:d5:d2:77:ce:50:2f:ea:f9:b3:52:24:ae:84:83:82:5c: 43:ab:02:c5:ad:7b:22:b6:c7:4d:54:dd:de:36:e2:bb:6b:71: c0:ce:a7:90:83:9e:fa:f7:6c:33:b6:2e:49:f0:f2:62:52:1d: 24:de:38:1b:54:57:c6:7a:7a:0a:bb:da:5b:1d:e6:41:3f:63: f2:75:1c:78:2a:6d:ac:13:06:e0:be:ba:77:63:81:60:e8:99: 4c:da:76:dc:1b:6f:74:91:88:64:d1:9d:5d:40:d3:ea:ab:b0: 59:ca:21:44:90:a6:fb:81:83:5e:c5:e9:5e:c7:c0:14:65:eb: 25:60:d8:dc:b2:dc:7c:fe:a0:1d:6c:0a:72:02:fb:bf:d1:2d: 33:45:f3:27:e6:f8:2a:b2:69:8a:96:77:a2:1f:6b:f3:b6:0f: 5d:eb:48:9e:9c:51:d3:3d:01:86:61:65:fa:7c:8f:32:2d:f2: 16:ec:d4:7d:51:58:e9:22:14:d2:af:f6:22:15:d4:8b:ed:dd: 10:9a:87:59:6e:c2:51:5d:ab:5e:a0:5a:82:b0:cb:15:6d:06: 8c:af:b8:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdWo1NSkjqHdaIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzMzc0M1oXDTI1MDUwNTEyMzc0M1owLzEtMCsGA1UEAxMk YTFlYTBlOGMtM2VmMS00MmI5LTlhZjEtNzFjZTExN2RkNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvgul9+CZglIUNUYg4QHNTeCB7jsFbRWflyZ b1g4yXS0GwJkvuPgI4+UFUD5SjC3JZSSg5/7d9LJcv9dVy/fRITEc12pNZseIQ9A FoNXIZZj4Roqbz0KFpeRcHvgwW1FP0bewlVDYDzPs9GVDxjQBPdmXr7dm6iQwUQF Q6ZYEtooXPKVpKi4906B8GvjHFNLyTAZ5Z1MdBCJCshNet73zKRQTFlLaWYj/hMb uw1Pos7z3UUMVe6mfkkncmWHE2nTleC3fT7LnY8LQTpTaMdtcxafwqMVMgVmB9Cr 2qglEaFe5pNtfMji7eTNJHDbyjoP/5NvQuUpEDo+Js1IGV/1wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlmMlWARQKnmWmp9MPEBr/dyJqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVlNmRiMjItZmM1MC0z ZjAxLWIxMDAtZGY4YWUxZThmNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3N8Pt0qIvaRCWMBB8APep3yw1qct/L+52L19jOtT9SaUEbXZ/c1dJ3 zlAv6vmzUiSuhIOCXEOrAsWteyK2x01U3d424rtrccDOp5CDnvr3bDO2Lknw8mJS HSTeOBtUV8Z6egq72lsd5kE/Y/J1HHgqbawTBuC+undjgWDomUzadtwbb3SRiGTR nV1A0+qrsFnKIUSQpvuBg17F6V7HwBRl6yVg2Nyy3Hz+oB1sCnIC+7/RLTNF8yfm +CqyaYqWd6Ifa/O2D13rSJ6cUdM9AYZhZfp8jzIt8hbs1H1RWOkiFNKv9iIV1Ivt 3RCah1luwlFdq16gWoKwyxVtBoyvuNk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:22 2025 by rpki-client