$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa File: 9df44781-4047-3c71-93d5-d36ca8cb49a0.roa (raw, json) Hash identifier: hX05/OGKWTM1xs0mJjxzXfjQNcI0qw6s5Jve0DlTQZ4= Subject key identifier: 35:0E:5B:83:C5:D9:D4:22:3A:08:0C:44:17:71:9A:40:41:C8:0E:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C26144A0D8937E517355BB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa Signing time: Mon 03 Feb 2025 11:09:41 +0000 ROA not before: Mon 03 Feb 2025 11:09:41 +0000 ROA not after: Sun 04 May 2025 10:09:41 +0000 asID: 30036 IP address blocks: 173.28.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:61:44:a0:d8:93:7e:51:73:55:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:09:41 2025 GMT Not After : May 4 10:09:41 2025 GMT Subject: CN=d5b0ecce-a404-4413-9b53-7fa6c75dbddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:41:e5:e3:1f:6d:ad:3b:f7:d6:4e:d3:19: 0b:cd:bb:eb:2c:b2:c1:47:da:02:f1:88:c5:eb:71: b1:06:c0:89:8e:e5:44:37:bd:a6:ce:ad:41:81:82: c8:e0:7e:0c:03:5b:61:9e:70:56:4e:1e:ca:b8:b8: f0:11:1d:9d:8b:e6:c5:1b:fb:75:e3:e4:35:f8:01: 50:78:d7:23:54:84:e1:db:ef:0f:26:e8:6e:21:3b: fe:35:2c:3c:93:29:d8:2d:83:54:b9:bb:df:28:f9: 9a:9c:d2:50:7c:c4:93:66:8f:99:f7:a4:30:0d:ed: 1f:e8:9f:d7:40:05:5c:66:8f:f4:d2:c3:50:db:f1: c9:1c:40:9e:96:0c:42:83:78:dd:11:8b:23:42:15: bd:7d:4f:70:ae:6d:f2:1b:bc:16:3b:f0:83:30:f6: 4d:e8:73:18:34:e4:9c:94:c8:41:ed:c0:3a:20:d6: 5b:d8:47:31:55:f2:a2:4d:54:9b:18:3a:27:39:1b: 59:e1:be:0f:10:50:4e:51:92:80:7f:36:1e:d9:c0: 6d:26:36:2f:c5:b3:46:a7:b7:b0:a9:87:ed:bf:fd: 67:86:6b:41:e2:4f:04:b1:45:e6:5c:f9:d7:9a:87: c6:57:9b:86:06:84:b1:60:f3:34:20:b7:ad:2d:46: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0E:5B:83:C5:D9:D4:22:3A:08:0C:44:17:71:9A:40:41:C8:0E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:00:b6:84:27:01:42:ef:bd:49:db:cd:9b:25:0a:8c:0c:05: b9:a6:e6:85:71:5b:78:f6:4b:e0:d3:57:6f:e2:aa:12:0d:72: 84:32:d0:0f:fb:3a:16:2a:b6:af:56:41:5f:7a:94:5d:d8:a4: 72:77:81:2d:ec:77:a1:2f:09:9d:33:38:77:65:10:70:9f:8d: ca:66:9d:47:70:40:da:05:fb:a4:b2:63:10:44:af:f2:ee:42: d9:89:c1:3f:bf:60:4e:6e:6f:0d:c7:c2:51:26:4f:7c:84:f7: 60:e1:37:43:44:80:02:be:e4:d6:f5:b7:52:3a:21:1f:89:8b: fe:e9:88:d4:a9:af:9d:cc:42:90:0d:5a:56:64:76:da:e1:3f: a8:3e:f1:d5:9e:e6:d3:fa:b7:ef:ba:c4:8e:da:a4:0b:1b:9c: 34:50:cd:90:e5:a1:c9:bf:ee:c1:77:28:e0:31:70:f9:85:e8: ef:40:16:cf:b6:7e:9f:e4:38:1c:97:65:03:95:71:d3:ad:d5: e1:e0:0b:84:b9:fd:68:39:04:d0:13:7d:60:fc:ad:b1:cf:33: 72:32:23:cf:60:75:09:91:38:02:8d:75:a7:00:0d:27:46:32: 68:ef:ee:cd:ba:4a:d9:53:a4:b2:c3:47:10:38:ab:d8:8e:e5: a0:89:e2:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYUSg2JN+UXNVu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDk0MVoXDTI1MDUwNDEwMDk0MVowLzEtMCsGA1UEAxMk ZDViMGVjY2UtYTQwNC00NDEzLTliNTMtN2ZhNmM3NWRiZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhZB5eMfba0799ZO0xkLzbvrLLLBR9oC8YjF 63GxBsCJjuVEN72mzq1BgYLI4H4MA1thnnBWTh7KuLjwER2di+bFG/t14+Q1+AFQ eNcjVITh2+8PJuhuITv+NSw8kynYLYNUubvfKPmanNJQfMSTZo+Z96QwDe0f6J/X QAVcZo/00sNQ2/HJHECelgxCg3jdEYsjQhW9fU9wrm3yG7wWO/CDMPZN6HMYNOSc lMhB7cA6INZb2EcxVfKiTVSbGDonORtZ4b4PEFBOUZKAfzYe2cBtJjYvxbNGp7ew qYftv/1nhmtB4k8EsUXmXPnXmofGV5uGBoSxYPM0ILetLUbPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUOW4PF2dQiOggMRBdxmkBByA7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWRmNDQ3ODEtNDA0Ny0z YzcxLTkzZDUtZDM2Y2E4Y2I0OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEAtoQnAULvvUnbzZslCowMBbmm5oVxW3j2S+DTV2/iqhINcoQy0A/7 OhYqtq9WQV96lF3YpHJ3gS3sd6EvCZ0zOHdlEHCfjcpmnUdwQNoF+6SyYxBEr/Lu QtmJwT+/YE5ubw3HwlEmT3yE92DhN0NEgAK+5Nb1t1I6IR+Ji/7piNSpr53MQpAN WlZkdtrhP6g+8dWe5tP6t++6xI7apAsbnDRQzZDlocm/7sF3KOAxcPmF6O9AFs+2 fp/kOByXZQOVcdOt1eHgC4S5/Wg5BNATfWD8rbHPM3IyI89gdQmROAKNdacADSdG Mmjv7s26StlTpLLDRxA4q9iO5aCJ4rg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:48 2025 by rpki-client