$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa File: 968256d3-cb78-314c-bb42-530413b2968f.roa (raw, json) Hash identifier: pZLGLEUN+vhVkXGz/X1C5IxlfFcRA1sX1HIzn7XlVBk= Subject key identifier: B0:68:4C:8D:3F:98:42:87:B5:1E:48:D1:D4:B7:B2:4C:DA:40:2B:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C577426ED9DC0FF7257F9F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa Signing time: Tue 04 Feb 2025 13:41:26 +0000 ROA not before: Tue 04 Feb 2025 13:41:26 +0000 ROA not after: Mon 05 May 2025 12:41:26 +0000 asID: 30036 IP address blocks: 173.28.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:42:6e:d9:dc:0f:f7:25:7f:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:41:26 2025 GMT Not After : May 5 12:41:26 2025 GMT Subject: CN=937ad5b6-cfb7-43fc-9b5b-bfc53d6842da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:5b:4a:fe:84:41:a4:3e:e3:d2:60:d5:de: 7f:a5:e7:c3:04:9a:62:cc:58:f9:77:6f:c9:e2:30: 4a:b5:da:69:08:59:27:8e:5d:4f:31:10:a3:7f:dc: b4:63:05:f7:02:de:d1:98:10:e5:7b:44:7c:1a:13: 66:72:a0:c6:6d:52:27:0d:b2:4e:f9:fa:9b:fa:67: 6a:09:9c:93:03:1c:0c:f4:df:85:b5:47:fa:98:df: 14:6a:d5:d1:4a:e6:67:d7:1c:b1:bb:c2:87:6c:15: f9:cf:15:19:8a:4a:03:53:60:3d:1e:ba:00:60:9a: 29:da:9c:d9:c7:77:c7:0d:1b:82:40:c7:62:f5:a0: dd:0e:f3:33:b6:3b:8d:de:01:9d:1e:2f:09:43:1a: ef:3a:94:f2:a9:6a:db:e4:dd:be:2e:71:c6:0a:71: 04:17:df:c9:72:b2:a1:c9:70:0e:05:4c:5e:2d:50: 9f:63:57:fe:20:c4:5a:21:69:da:bd:5f:b7:49:ec: 5e:13:ea:67:82:81:55:bd:c5:dd:c3:04:30:91:af: ab:80:7f:0f:e7:59:39:11:16:e0:7d:80:58:38:08: d4:67:0c:e6:ba:53:42:b5:e3:7b:dc:c5:80:7e:aa: 7e:04:80:01:0c:1c:1e:d8:0e:e1:1e:22:e4:0b:1f: 95:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:68:4C:8D:3F:98:42:87:B5:1E:48:D1:D4:B7:B2:4C:DA:40:2B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:55:d4:a5:e5:6e:a1:01:4f:55:7c:a6:06:b6:53:0d:30:3f: 08:e6:e9:cd:85:98:c5:41:b1:b2:fd:ec:ac:8c:f9:c2:97:39: 15:65:c6:82:09:31:5b:27:36:b1:19:24:f0:a1:70:91:ce:a7: 4a:83:53:40:37:ae:54:9b:e9:54:3e:5f:18:52:a5:2d:77:cb: 4a:8e:65:75:74:94:cb:0e:aa:da:96:7a:7a:2b:65:96:bf:67: 36:31:36:ec:c6:b2:5b:5f:8c:8f:67:82:02:67:f4:7e:38:89: f4:8d:0d:17:f9:72:28:21:ca:54:6a:56:37:50:4b:34:50:19: c7:bb:d8:2f:42:32:1c:45:bb:9e:c8:db:19:98:70:35:bf:21: 5a:28:19:30:54:b6:33:f3:37:b9:71:84:36:ec:59:ca:92:95: 99:61:89:44:8d:4a:63:fa:35:4c:f0:e7:2b:c5:0a:cb:ca:93: a2:ea:a1:49:07:c2:dc:6d:b6:17:0e:6f:d2:ca:58:cd:4f:3d: 5b:47:6b:8f:79:2a:b0:de:37:04:b4:4f:5c:2b:27:6b:3f:98: 93:11:cf:ef:99:3d:5a:0d:fc:27:8c:2a:22:d0:0c:f9:81:5b: 36:06:4a:f9:82:2c:58:82:fb:5d:3c:54:f9:80:41:b9:13:19: c2:5e:6e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFd0Ju2dwP9yV/n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDEyNloXDTI1MDUwNTEyNDEyNlowLzEtMCsGA1UEAxMk OTM3YWQ1YjYtY2ZiNy00M2ZjLTliNWItYmZjNTNkNjg0MmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL1bSv6EQaQ+49Jg1d5/pefDBJpizFj5d2/J 4jBKtdppCFknjl1PMRCjf9y0YwX3At7RmBDle0R8GhNmcqDGbVInDbJO+fqb+mdq CZyTAxwM9N+FtUf6mN8UatXRSuZn1xyxu8KHbBX5zxUZikoDU2A9HroAYJop2pzZ x3fHDRuCQMdi9aDdDvMztjuN3gGdHi8JQxrvOpTyqWrb5N2+LnHGCnEEF9/JcrKh yXAOBUxeLVCfY1f+IMRaIWnavV+3SexeE+pngoFVvcXdwwQwka+rgH8P51k5ERbg fYBYOAjUZwzmulNCteN73MWAfqp+BIABDBwe2A7hHiLkCx+VxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBoTI0/mEKHtR5I0dS3skzaQCutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY4MjU2ZDMtY2I3OC0z MTRjLWJiNDItNTMwNDEzYjI5NjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRV1KXlbqEBT1V8pga2Uw0wPwjm6c2FmMVBsbL97KyM+cKXORVlxoIJ MVsnNrEZJPChcJHOp0qDU0A3rlSb6VQ+XxhSpS13y0qOZXV0lMsOqtqWenorZZa/ ZzYxNuzGsltfjI9nggJn9H44ifSNDRf5cighylRqVjdQSzRQGce72C9CMhxFu57I 2xmYcDW/IVooGTBUtjPzN7lxhDbsWcqSlZlhiUSNSmP6NUzw5yvFCsvKk6LqoUkH wtxtthcOb9LKWM1PPVtHa495KrDeNwS0T1wrJ2s/mJMRz++ZPVoN/CeMKiLQDPmB WzYGSvmCLFiC+108VPmAQbkTGcJeblM= -----END CERTIFICATE-----Generated at Sun Apr 6 08:28:13 2025 by rpki-client