$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa File: 11b3517b-f12e-375d-b1d9-32d912779dc7.roa (raw, json) Hash identifier: MknTixLP6+qlIn8OWR5aRXSxot5KyO31oN/N5VgLxTU= Subject key identifier: E7:80:00:27:74:E0:1A:B0:25:B6:A9:BF:26:95:A7:AF:96:37:13:3B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4AF571EC04A1607D0BE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa Signing time: Tue 22 Apr 2025 09:37:08 +0000 ROA not before: Tue 22 Apr 2025 09:37:08 +0000 ROA not after: Mon 21 Jul 2025 09:37:08 +0000 asID: 19905 IP address blocks: 173.29.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:af:57:1e:c0:4a:16:07:d0:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:08 2025 GMT Not After : Jul 21 09:37:08 2025 GMT Subject: CN=87684c57-1603-4d08-a531-8f08459859b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:76:cb:c6:0d:ea:97:03:95:78:da:b7:f2:f8: c1:0e:2b:a3:a5:ac:c2:2b:d2:e3:08:34:dc:60:50: ef:0a:03:8c:2d:1a:c7:0b:d7:1c:16:94:d8:93:53: 04:42:8e:f5:5e:89:79:a7:7f:70:23:16:7e:c9:72: 55:0d:8d:ce:31:9b:30:c3:04:12:aa:93:ae:57:08: 02:74:da:e7:96:6f:a9:dc:8f:52:83:77:18:d1:51: 12:a3:30:5c:87:55:cc:c0:0d:de:49:61:27:a8:88: df:9b:aa:87:58:32:f0:7c:3d:44:53:6e:78:9a:af: 33:e4:2f:df:f0:f4:fa:0b:2c:59:64:6d:f8:85:3a: 18:2b:ef:bf:2a:38:dd:b6:fe:a8:de:6d:e4:22:2b: 20:47:47:8a:8c:c0:01:79:cb:e5:7a:10:ef:ed:50: 52:33:e9:72:6b:d3:9c:bf:4b:f5:67:d8:3c:47:83: a0:fc:2f:10:39:20:f4:15:0c:a0:74:b7:52:9e:fc: 83:be:38:61:a0:6b:6c:19:a6:83:b3:85:2b:ce:45: 16:cd:e3:19:0b:36:3c:a5:17:44:02:cd:a4:3f:53: 73:4a:d3:8b:f4:5c:d9:db:f9:99:9b:2a:aa:b6:98: 81:e0:92:7b:5e:a2:d4:64:7d:88:19:8c:73:32:ea: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:80:00:27:74:E0:1A:B0:25:B6:A9:BF:26:95:A7:AF:96:37:13:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f8:38:da:c5:e5:c6:4b:6f:f1:ad:89:45:be:a9:a7:fc:d3: 3a:36:78:20:d0:0a:44:05:ce:b5:f7:4e:46:cc:15:12:2a:af: a2:5d:50:3f:05:23:de:63:df:8a:32:d7:60:a6:2c:8a:68:61: a9:25:67:1c:0e:73:cd:68:ef:af:80:39:95:39:ce:57:26:34: 56:a3:83:b6:29:0f:f5:00:90:66:6a:cf:8c:8b:a2:67:18:6d: 04:cc:bb:23:72:60:a1:c0:43:4a:a2:d6:ed:08:e0:33:56:5f: 61:84:65:af:ad:9f:6d:0e:ff:f8:0c:29:13:fd:9c:51:4d:05: 74:24:22:32:f8:20:7d:e3:7c:89:ef:79:fa:72:1c:a7:e7:89: 1a:2a:b4:63:2d:6c:d6:29:31:ac:a2:79:66:36:e1:78:e2:36: b9:27:46:2d:82:e8:7c:60:f2:c3:b1:b2:b1:ca:22:a2:d8:9a: 0b:5a:15:1a:4f:89:58:26:33:bd:49:d3:9a:95:20:a3:25:ad: 51:6d:bc:24:5a:a5:83:77:8f:6c:94:13:3a:1a:a3:dd:15:08: 3f:f5:de:59:ed:22:d2:19:84:b8:6a:bd:fb:45:c9:77:c7:47: ff:d0:27:08:4d:41:a9:42:cd:fd:40:cb:d3:86:c2:27:77:ef: 23:65:8e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9K9XHsBKFgfQvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5MzcwOFoXDTI1MDcyMTA5MzcwOFowLzEtMCsGA1UEAxMk ODc2ODRjNTctMTYwMy00ZDA4LWE1MzEtOGYwODQ1OTg1OWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XbLxg3qlwOVeNq38vjBDiujpazCK9LjCDTc YFDvCgOMLRrHC9ccFpTYk1MEQo71Xol5p39wIxZ+yXJVDY3OMZswwwQSqpOuVwgC dNrnlm+p3I9Sg3cY0VESozBch1XMwA3eSWEnqIjfm6qHWDLwfD1EU254mq8z5C/f 8PT6CyxZZG34hToYK++/Kjjdtv6o3m3kIisgR0eKjMABecvlehDv7VBSM+lya9Oc v0v1Z9g8R4Og/C8QOSD0FQygdLdSnvyDvjhhoGtsGaaDs4UrzkUWzeMZCzY8pRdE As2kP1NzStOL9FzZ2/mZmyqqtpiB4JJ7XqLUZH2IGYxzMupVjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeAACd04BqwJbapvyaVp6+WNxM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFiMzUxN2ItZjEyZS0z NzVkLWIxZDktMzJkOTEyNzc5ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT4ONrF5cZLb/GtiUW+qaf80zo2eCDQCkQFzrX3TkbMFRIqr6JdUD8F I95j34oy12CmLIpoYaklZxwOc81o76+AOZU5zlcmNFajg7YpD/UAkGZqz4yLomcY bQTMuyNyYKHAQ0qi1u0I4DNWX2GEZa+tn20O//gMKRP9nFFNBXQkIjL4IH3jfInv efpyHKfniRoqtGMtbNYpMayieWY24XjiNrknRi2C6Hxg8sOxsrHKIqLYmgtaFRpP iVgmM71J05qVIKMlrVFtvCRapYN3j2yUEzoao90VCD/13lntItIZhLhqvftFyXfH R//QJwhNQalCzf1Ay9OGwid37yNljlo= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:43 2025 by rpki-client