$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa File: df95bfc8-2440-38d8-933c-5620004442e8.roa (raw, json) Hash identifier: roTLJFqOW9XDbopkr2VC8bHUIXdqb06FBj9Rpg2frrI= Subject key identifier: 0A:0D:9F:B8:D8:3D:33:B3:0F:10:19:97:9B:A6:4E:56:FB:7D:3C:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5580844FC1985126359B600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa Signing time: Tue 04 Feb 2025 12:38:30 +0000 ROA not before: Tue 04 Feb 2025 12:38:30 +0000 ROA not after: Mon 05 May 2025 11:38:30 +0000 asID: 30036 IP address blocks: 173.28.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:58:08:44:fc:19:85:12:63:59:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:38:30 2025 GMT Not After : May 5 11:38:30 2025 GMT Subject: CN=9b34dcc8-45c1-424a-a110-7a91f5137930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:c8:e9:43:44:aa:b9:3f:51:73:2b:14:06: 6b:c6:39:e2:1c:ba:e2:11:3b:86:8a:29:2d:38:5d: 16:c9:a5:5f:b4:81:6a:fd:1d:22:1b:d9:e9:75:6b: 0b:41:20:d7:e5:76:d3:82:dd:62:49:12:d7:5e:f6: 5e:99:11:27:84:a6:03:54:36:cb:99:4b:ac:2d:28: 88:87:2c:e3:f6:20:db:b3:7c:a3:f4:c2:31:51:d6: a7:8f:d5:09:f0:01:bf:9d:85:aa:23:ee:56:29:aa: 00:0e:fb:88:5f:1e:f1:c5:7b:4a:60:58:d7:2d:e5: 3e:cb:c4:5e:ce:e0:76:87:d9:cb:43:2b:6d:6c:e5: f8:d3:04:95:b3:c4:be:ed:19:1e:7d:b7:e9:ad:0b: 8d:d2:d9:36:3c:0f:4d:bb:d5:90:e5:ef:01:af:e4: 64:ae:82:7b:b0:3e:0f:76:01:e0:80:64:33:7a:18: f7:ad:2b:36:f2:97:3c:cb:6f:09:80:71:ed:70:d0: 72:85:48:7b:64:e5:1a:9a:ea:bf:93:e9:bc:15:ad: d8:46:ac:0e:21:2d:7a:82:3a:94:d2:a5:29:cd:b4: e2:0c:30:08:b2:07:05:04:b9:7a:46:a2:aa:eb:29: cf:e6:2c:1a:e3:45:6f:bc:c7:a7:33:b2:af:0c:96: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0D:9F:B8:D8:3D:33:B3:0F:10:19:97:9B:A6:4E:56:FB:7D:3C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:dc:b2:22:fe:d5:b1:9b:78:14:53:d4:36:0f:2d:4c:08:fd: 24:14:1b:77:ae:70:6a:64:3d:ce:a4:ba:50:41:8d:8b:bb:1b: 03:8b:36:ee:91:ce:43:76:1a:e0:d2:68:98:97:c4:ed:f6:77: 2e:9f:ec:f9:f4:86:b7:cb:74:41:da:62:0e:27:e0:c4:4f:d3: 7d:13:69:bb:84:a7:ae:d0:30:12:12:ad:eb:22:be:12:cd:49: 94:b8:b1:a2:7f:e6:df:36:47:36:80:74:79:25:a5:ca:df:6c: 53:07:3f:53:eb:7d:d0:bb:0b:7e:01:bf:1a:38:04:37:4d:58: 44:0f:a5:32:b3:ce:f4:48:c7:ac:54:bd:6c:25:a1:3d:4d:2c: a3:71:31:76:9d:df:c7:e8:3c:3f:7a:df:40:37:46:b4:6e:16: d8:ac:0d:0c:dc:a8:53:e7:6e:cd:1a:10:aa:a3:87:e5:ce:6f: ea:d8:d6:45:1b:e2:52:52:5d:79:d9:d2:8a:65:28:b2:ab:0a: 4b:29:60:ea:95:e9:ee:b6:0b:ac:ca:c1:4e:4a:98:1c:1b:ae: 12:e2:60:f4:eb:a0:bc:e0:37:ef:8e:9c:64:64:1d:71:45:06: af:1d:34:ea:0b:59:4d:4b:83:56:c4:52:b5:77:e8:ef:86:bd: d1:65:01:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWAhE/BmFEmNZtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzgzMFoXDTI1MDUwNTExMzgzMFowLzEtMCsGA1UEAxMk OWIzNGRjYzgtNDVjMS00MjRhLWExMTAtN2E5MWY1MTM3OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cjI6UNEqrk/UXMrFAZrxjniHLriETuGiikt OF0WyaVftIFq/R0iG9npdWsLQSDX5XbTgt1iSRLXXvZemREnhKYDVDbLmUusLSiI hyzj9iDbs3yj9MIxUdanj9UJ8AG/nYWqI+5WKaoADvuIXx7xxXtKYFjXLeU+y8Re zuB2h9nLQyttbOX40wSVs8S+7RkefbfprQuN0tk2PA9Nu9WQ5e8Br+RkroJ7sD4P dgHggGQzehj3rSs28pc8y28JgHHtcNByhUh7ZOUamuq/k+m8Fa3YRqwOIS16gjqU 0qUpzbTiDDAIsgcFBLl6RqKq6ynP5iwa40VvvMenM7KvDJZSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoNn7jYPTOzDxAZl5umTlb7fTwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGY5NWJmYzgtMjQ0MC0z OGQ4LTkzM2MtNTYyMDAwNDQ0MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrcsiL+1bGbeBRT1DYPLUwI/SQUG3eucGpkPc6kulBBjYu7GwOLNu6R zkN2GuDSaJiXxO32dy6f7Pn0hrfLdEHaYg4n4MRP030TabuEp67QMBISresivhLN SZS4saJ/5t82RzaAdHklpcrfbFMHP1PrfdC7C34Bvxo4BDdNWEQPpTKzzvRIx6xU vWwloT1NLKNxMXad38foPD9630A3RrRuFtisDQzcqFPnbs0aEKqjh+XOb+rY1kUb 4lJSXXnZ0oplKLKrCkspYOqV6e62C6zKwU5KmBwbrhLiYPTroLzgN++OnGRkHXFF Bq8dNOoLWU1Lg1bEUrV36O+GvdFlAbE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:00 2025 by rpki-client