$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0a1b200-6f2b-30fa-a29c-e573f4c903e4.roa File: c0a1b200-6f2b-30fa-a29c-e573f4c903e4.roa (raw, json) Hash identifier: e/lcFFtekPE4QKCizXSj9A0KDefJ6bMQbY/12V/E4Zg= Subject key identifier: 43:92:DB:9B:93:2E:DC:C8:DB:E0:34:4B:E2:22:97:C0:64:27:2E:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C586629A05A60394B18EDC40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0a1b200-6f2b-30fa-a29c-e573f4c903e4.roa Signing time: Tue 04 Feb 2025 14:11:54 +0000 ROA not before: Tue 04 Feb 2025 14:11:54 +0000 ROA not after: Mon 05 May 2025 13:11:54 +0000 asID: 30036 IP address blocks: 173.28.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:86:62:9a:05:a6:03:94:b1:8e:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:11:54 2025 GMT Not After : May 5 13:11:54 2025 GMT Subject: CN=5599e99f-2c0e-4fd4-8cd2-bd55acb7a364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:59:a7:4e:14:0f:a0:5b:9d:55:db:ef:e8: da:65:9e:21:3e:3e:11:70:1b:b0:38:e8:e8:bd:29: 4d:f9:05:dc:d2:30:67:31:08:b4:e1:32:6e:7e:83: 76:64:85:f6:95:2c:cb:6b:3c:d8:04:7c:6d:2b:7e: 2f:39:64:ff:1c:8a:e6:25:2f:8e:32:1a:aa:6b:c1: a1:9f:b4:1c:f0:34:90:2c:f6:d9:7d:5e:45:b3:67: 99:f6:7f:e6:a4:42:92:da:56:72:1c:4c:ce:a4:7a: 17:dc:68:68:e2:a4:fc:9b:b0:2b:34:87:13:de:0a: 6e:71:46:dd:2a:1c:4f:f6:0f:32:b6:b9:03:ad:f8: 95:27:c0:f7:85:1d:5b:17:d5:93:de:9b:f6:dd:3d: 24:8b:66:77:6d:c8:19:6c:01:55:57:e2:d8:4e:06: 6c:59:21:ff:c1:b9:54:3a:46:fd:07:94:11:92:1d: 38:85:77:61:00:f2:e3:cd:09:f1:7f:57:d4:73:48: b9:b4:1f:27:5c:af:aa:d2:d9:94:41:31:3c:89:d3: 03:14:53:6b:6c:18:d5:b8:63:e6:d4:0e:20:9d:83: bd:9b:de:dd:15:46:50:9f:30:81:28:b9:a3:7a:2e: 93:d2:21:06:76:67:07:9f:25:b7:7c:14:24:3f:4a: cf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:92:DB:9B:93:2E:DC:C8:DB:E0:34:4B:E2:22:97:C0:64:27:2E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0a1b200-6f2b-30fa-a29c-e573f4c903e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1d:d2:ff:72:5c:d7:bc:94:2b:82:ca:ac:98:e6:d4:6f:cf: ec:f6:4f:01:ca:c6:ea:9e:5c:1c:e0:ae:e2:f9:8c:e6:e6:bc: 78:64:96:5e:5c:c0:ba:75:2c:89:3a:15:cb:10:68:62:94:bd: 70:79:15:85:97:b7:c9:73:3b:43:d2:e5:ea:b5:cf:aa:86:c4: b2:f4:ea:f1:85:0d:11:d0:12:87:1a:cb:28:ae:a1:42:21:07: 66:ad:8e:a2:51:c7:d4:e9:7d:4f:8e:5a:59:11:d0:83:4d:5b: 15:1a:1a:0e:0d:c6:7d:e6:bc:81:ca:e5:b3:b0:06:9d:4e:49: f2:3c:61:1b:a0:7f:e0:18:3f:0a:5a:f6:af:25:d4:7f:32:a6: cd:7c:32:f4:59:06:d3:8c:73:6e:0f:f0:9a:32:96:4b:cb:07: 1b:dd:c2:0f:fc:34:eb:3a:ca:79:52:ad:42:7e:f6:24:3c:f4: 52:0a:54:ab:27:f2:2b:f4:f7:28:68:c5:c9:c6:5c:5d:51:79: c0:2c:16:e3:f2:22:fe:ab:63:ce:89:56:e4:49:b2:d6:f9:76: 39:2d:e8:5f:cc:4a:f1:ff:bf:ea:ea:ec:41:9c:5e:ee:57:cd: 5c:bd:32:3e:c4:14:9b:86:09:37:98:af:f5:10:d8:27:32:90: a3:84:46:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFhmKaBaYDlLGO3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MTE1NFoXDTI1MDUwNTEzMTE1NFowLzEtMCsGA1UEAxMk NTU5OWU5OWYtMmMwZS00ZmQ0LThjZDItYmQ1NWFjYjdhMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8tZp04UD6BbnVXb7+jaZZ4hPj4RcBuwOOjo vSlN+QXc0jBnMQi04TJufoN2ZIX2lSzLazzYBHxtK34vOWT/HIrmJS+OMhqqa8Gh n7Qc8DSQLPbZfV5Fs2eZ9n/mpEKS2lZyHEzOpHoX3Gho4qT8m7ArNIcT3gpucUbd KhxP9g8ytrkDrfiVJ8D3hR1bF9WT3pv23T0ki2Z3bcgZbAFVV+LYTgZsWSH/wblU Okb9B5QRkh04hXdhAPLjzQnxf1fUc0i5tB8nXK+q0tmUQTE8idMDFFNrbBjVuGPm 1A4gnYO9m97dFUZQnzCBKLmjei6T0iEGdmcHnyW3fBQkP0rPPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOS25uTLtzI2+A0S+Iil8BkJy6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzBhMWIyMDAtNmYyYi0z MGZhLWEyOWMtZTU3M2Y0YzkwM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEod0v9yXNe8lCuCyqyY5tRvz+z2TwHKxuqeXBzgruL5jObmvHhkll5c wLp1LIk6FcsQaGKUvXB5FYWXt8lzO0PS5eq1z6qGxLL06vGFDRHQEocayyiuoUIh B2atjqJRx9TpfU+OWlkR0INNWxUaGg4Nxn3mvIHK5bOwBp1OSfI8YRugf+AYPwpa 9q8l1H8yps18MvRZBtOMc24P8JoylkvLBxvdwg/8NOs6ynlSrUJ+9iQ89FIKVKsn 8iv09yhoxcnGXF1RecAsFuPyIv6rY86JVuRJstb5djkt6F/MSvH/v+rq7EGcXu5X zVy9Mj7EFJuGCTeYr/UQ2CcykKOERps= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:31 2025 by rpki-client