$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa File: bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa (raw, json) Hash identifier: KW8YXUporVeZeR9qh+xLtsXaYEnMAhaaLpXr/Y/rOmg= Subject key identifier: B2:80:A8:C4:C8:69:49:58:60:BB:B1:05:EB:C1:26:2F:D3:F6:AC:F4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F61E41A75094FE18F26400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa Signing time: Wed 05 Feb 2025 11:08:39 +0000 ROA not before: Wed 05 Feb 2025 11:08:39 +0000 ROA not after: Tue 06 May 2025 10:08:39 +0000 asID: 30036 IP address blocks: 173.28.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f6:1e:41:a7:50:94:fe:18:f2:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:08:39 2025 GMT Not After : May 6 10:08:39 2025 GMT Subject: CN=0af04897-e096-4d88-b2cb-64d94b64b373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:07:c5:e0:87:4e:25:9d:55:57:b1:cf:62:d7: 3a:5a:d1:0d:3f:21:d4:dc:2f:f5:ca:d5:53:db:cd: 12:55:04:0d:e1:fe:b3:73:be:4d:93:d7:2b:30:2b: 85:36:dd:79:98:1e:6c:05:d6:56:de:39:ba:42:94: 1c:71:fb:19:75:ac:21:78:17:db:1e:af:2a:9f:f8: 1b:37:b6:96:df:a1:14:dc:2e:15:be:c8:35:5f:81: 7d:97:28:81:e3:fd:ba:82:f7:d9:2b:f9:ec:19:95: 52:28:35:02:02:e0:5e:a1:b9:36:4f:fb:b7:38:4b: 74:29:17:dd:5a:81:27:9f:43:cf:fb:3e:7f:72:35: be:ca:93:84:d6:dd:db:9a:9d:86:58:86:6a:81:a4: 19:f4:6d:30:fa:fb:bc:eb:13:82:20:d2:ac:ad:0b: 4c:0d:a1:d3:43:71:af:a5:a4:89:33:cc:8a:5d:95: e5:dd:c4:e5:df:cc:a1:2b:8c:55:2f:2a:f4:cc:95: a1:d3:92:d3:ab:3c:9d:c2:05:a6:1b:0d:cf:e8:89: 1a:81:95:92:04:d6:96:2b:e6:14:cc:f4:5f:1a:dd: f8:31:90:b8:2b:d3:bd:82:c9:92:97:e2:a2:ca:f2: 18:e4:d7:42:32:37:84:48:c9:4b:d7:a1:06:e5:10: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:80:A8:C4:C8:69:49:58:60:BB:B1:05:EB:C1:26:2F:D3:F6:AC:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:74:7a:ca:40:b5:a6:dc:a7:b7:ef:24:65:ad:9d:86:51:b5: 45:05:34:66:5f:ff:35:00:cb:71:df:54:65:7e:53:7c:31:20: 62:8b:68:a3:09:02:12:ac:69:ef:3e:e9:86:9b:c0:29:9d:9b: 22:5f:08:49:fc:0f:29:aa:25:22:4c:9e:ed:7b:cb:75:e7:ca: b3:55:5d:03:ff:0c:5d:3f:14:9d:3a:af:4c:02:d1:25:7c:ac: d4:1f:7a:aa:b9:a6:4a:5b:51:17:25:1b:3f:15:19:fa:86:6d: 03:c5:64:44:af:53:cc:25:db:5f:81:cc:e8:e9:60:6c:38:8c: 88:14:0f:28:5f:db:92:86:fd:1e:63:23:c2:74:b2:8c:ca:33: 54:1d:ef:ff:5c:91:fe:dd:a0:68:05:e7:61:73:cb:6b:04:d4: 2d:a2:d7:5a:8b:ad:d1:8c:2c:21:79:fb:eb:3e:36:c0:93:02: c7:2e:50:d8:43:74:33:94:37:6d:0a:9f:f0:e1:22:27:76:d0: 60:3f:aa:82:89:1c:ca:76:6b:85:7c:6d:5a:5f:8d:8e:08:75: 08:59:ba:65:cb:79:3c:c6:1a:8e:ba:9b:a1:74:d9:e7:fc:ae: 63:71:11:60:eb:b6:b3:2c:8a:e0:fb:55:0f:48:f1:39:cc:66: 6b:22:e6:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9h5Bp1CU/hjyZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMDgzOVoXDTI1MDUwNjEwMDgzOVowLzEtMCsGA1UEAxMk MGFmMDQ4OTctZTA5Ni00ZDg4LWIyY2ItNjRkOTRiNjRiMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAfF4IdOJZ1VV7HPYtc6WtENPyHU3C/1ytVT 280SVQQN4f6zc75Nk9crMCuFNt15mB5sBdZW3jm6QpQccfsZdawheBfbHq8qn/gb N7aW36EU3C4Vvsg1X4F9lyiB4/26gvfZK/nsGZVSKDUCAuBeobk2T/u3OEt0KRfd WoEnn0PP+z5/cjW+ypOE1t3bmp2GWIZqgaQZ9G0w+vu86xOCINKsrQtMDaHTQ3Gv paSJM8yKXZXl3cTl38yhK4xVLyr0zJWh05LTqzydwgWmGw3P6IkagZWSBNaWK+YU zPRfGt34MZC4K9O9gsmSl+KiyvIY5NdCMjeESMlL16EG5RCtyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKAqMTIaUlYYLuxBevBJi/T9qz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmYzZTUzNjAtMzUxOS0z ZWYxLWE1NTEtNDRiMWI3MDdiOGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx0espAtabcp7fvJGWtnYZRtUUFNGZf/zUAy3HfVGV+U3wxIGKLaKMJ AhKsae8+6YabwCmdmyJfCEn8DymqJSJMnu17y3XnyrNVXQP/DF0/FJ06r0wC0SV8 rNQfeqq5pkpbURclGz8VGfqGbQPFZESvU8wl21+BzOjpYGw4jIgUDyhf25KG/R5j I8J0sozKM1Qd7/9ckf7doGgF52Fzy2sE1C2i11qLrdGMLCF5++s+NsCTAscuUNhD dDOUN20Kn/DhIid20GA/qoKJHMp2a4V8bVpfjY4IdQhZumXLeTzGGo66m6F02ef8 rmNxEWDrtrMsiuD7VQ9I8TnMZmsi5gY= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:50 2025 by rpki-client