$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa File: bfe8432c-0a39-369f-abd1-923404f53a2f.roa (raw, json) Hash identifier: g/J1NvB7r1DrAQXYJvCCoI6Cv0Xww0noy5RSnR+nBQg= Subject key identifier: 37:6F:F5:CD:BB:7A:54:FC:B1:95:D0:95:47:40:C4:F0:9B:9C:B4:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57FA23D53E40372DC225F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa Signing time: Tue 04 Feb 2025 13:58:18 +0000 ROA not before: Tue 04 Feb 2025 13:58:18 +0000 ROA not after: Mon 05 May 2025 12:58:18 +0000 asID: 30036 IP address blocks: 173.28.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7f:a2:3d:53:e4:03:72:dc:22:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:58:18 2025 GMT Not After : May 5 12:58:18 2025 GMT Subject: CN=3735a52f-2804-45f8-ad38-b63cb9738947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:70:78:f0:00:01:27:6f:34:4d:01:f5:f0: be:ef:2b:5b:d9:91:19:fb:2f:59:ec:a8:bd:d3:37: af:af:1e:64:9c:99:44:84:a8:1d:93:eb:d2:d3:ea: 44:3d:b8:5c:9a:ba:24:f9:77:09:07:8a:7a:fc:17: cd:76:81:f0:4b:99:4c:a9:40:16:1f:1f:b5:4c:62: a9:0a:a3:38:b6:d1:26:19:d7:30:f6:f4:cf:73:84: da:01:ad:3c:00:31:ed:81:1f:c8:d4:82:b8:ab:3f: cf:e2:9d:cd:6c:4e:60:87:86:7a:d2:ad:47:ab:e0: 93:b8:62:1a:34:b4:49:7d:f8:f8:37:8b:c9:0b:4c: 35:a3:98:f4:1b:da:9e:d4:1a:d8:24:b9:52:27:c8: 37:54:79:fa:8f:57:31:93:d8:b1:a7:8d:4a:f5:7b: 9c:29:7e:6a:fd:c0:b3:75:5e:a9:54:48:57:97:eb: 50:e8:3e:92:50:c6:bc:31:fa:99:43:be:d5:8a:20: cf:48:1f:aa:0c:8c:9a:18:05:f3:70:4a:09:a7:0b: 25:8d:96:d7:dc:09:41:bf:b9:ca:da:f9:3a:d2:e7: 1b:c2:b6:70:63:21:0c:ec:7b:77:cc:02:8f:c4:8b: fb:43:bd:1b:bc:9d:01:4c:01:78:4d:a9:29:19:32: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6F:F5:CD:BB:7A:54:FC:B1:95:D0:95:47:40:C4:F0:9B:9C:B4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:1a:90:c9:c2:e2:57:a8:53:8d:4f:fe:15:06:0c:6f:e7:63: 2c:99:16:b9:b6:e9:2f:99:c7:73:38:fb:fd:c4:34:4d:25:da: ad:00:be:e5:b5:87:ec:b6:43:8d:a6:45:b2:b4:77:c8:a2:74: fb:cf:06:a8:30:9d:01:72:bd:d9:16:ce:fa:90:be:cb:8f:2c: dc:4c:b6:4e:72:cc:e6:fe:e2:93:6a:5d:43:af:07:16:ed:8f: e3:e4:dc:44:34:60:6c:ef:dd:6c:38:3e:90:d0:2c:6e:80:27: 9f:59:1c:d8:21:98:b3:e3:62:9a:ba:d7:2b:8d:08:82:4a:7f: e3:e1:fe:ec:3f:7c:b5:fa:2f:c1:86:34:1f:8b:cc:b0:d8:3d: b2:03:df:ae:f0:d9:f6:7d:55:2d:30:7e:e0:b4:91:2c:1e:a6: bc:c5:f0:0e:1b:12:26:b9:dd:29:fe:1d:2d:e6:87:a5:75:be: 36:7f:8f:b5:8e:2b:05:e3:e2:66:c0:c2:9d:90:a5:b9:04:76: a0:b6:7a:20:85:42:08:56:46:c1:7a:04:4a:48:fb:06:5e:01: 3d:f5:10:0b:5e:4c:cb:9a:63:7f:a3:8b:50:97:98:85:93:c8: ee:a6:9e:a9:12:e3:a9:b0:e4:34:14:9a:93:56:16:be:b3:25: e0:7f:0c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFf6I9U+QDctwiX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTgxOFoXDTI1MDUwNTEyNTgxOFowLzEtMCsGA1UEAxMk MzczNWE1MmYtMjgwNC00NWY4LWFkMzgtYjYzY2I5NzM4OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUJwePAAASdvNE0B9fC+7ytb2ZEZ+y9Z7Ki9 0zevrx5knJlEhKgdk+vS0+pEPbhcmrok+XcJB4p6/BfNdoHwS5lMqUAWHx+1TGKp CqM4ttEmGdcw9vTPc4TaAa08ADHtgR/I1IK4qz/P4p3NbE5gh4Z60q1Hq+CTuGIa NLRJffj4N4vJC0w1o5j0G9qe1BrYJLlSJ8g3VHn6j1cxk9ixp41K9XucKX5q/cCz dV6pVEhXl+tQ6D6SUMa8MfqZQ77ViiDPSB+qDIyaGAXzcEoJpwsljZbX3AlBv7nK 2vk60ucbwrZwYyEM7Ht3zAKPxIv7Q70bvJ0BTAF4TakpGTJOvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdv9c27elT8sZXQlUdAxPCbnLR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlODQzMmMtMGEzOS0z NjlmLWFiZDEtOTIzNDA0ZjUzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4akMnC4leoU41P/hUGDG/nYyyZFrm26S+Zx3M4+/3ENE0l2q0AvuW1 h+y2Q42mRbK0d8iidPvPBqgwnQFyvdkWzvqQvsuPLNxMtk5yzOb+4pNqXUOvBxbt j+Pk3EQ0YGzv3Ww4PpDQLG6AJ59ZHNghmLPjYpq61yuNCIJKf+Ph/uw/fLX6L8GG NB+LzLDYPbID367w2fZ9VS0wfuC0kSweprzF8A4bEia53Sn+HS3mh6V1vjZ/j7WO KwXj4mbAwp2QpbkEdqC2eiCFQghWRsF6BEpI+wZeAT31EAteTMuaY3+ji1CXmIWT yO6mnqkS46mw5DQUmpNWFr6zJeB/DBE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:08 2025 by rpki-client