$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc8568c-9942-31d2-b630-3116629f0d17.roa File: 1fc8568c-9942-31d2-b630-3116629f0d17.roa (raw, json) Hash identifier: M8+omC05Z3q0XNQTnzFuyuPEt69/yTtAyeHcb73Q8Us= Subject key identifier: 78:23:CB:12:8F:02:9C:B7:AE:A7:E2:51:1D:C1:60:CC:C4:63:10:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49794AD6B4BAAE0681640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc8568c-9942-31d2-b630-3116629f0d17.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.29.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:97:94:ad:6b:4b:aa:e0:68:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=da56ca0d-cd44-4e58-a43c-231854c25e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:fb:01:7c:a9:85:12:d3:f5:5a:76:2e:b3: 75:dd:73:29:32:bd:76:56:85:bb:bd:c7:df:c0:3a: 4f:80:8f:68:e4:23:8b:9f:90:95:90:34:15:ac:8f: 8f:3d:87:7c:df:57:39:2c:c2:b2:8e:83:91:37:f8: 22:e1:c0:94:03:32:06:8b:d4:ef:0a:07:03:61:d4: 5f:4a:9f:63:5a:dd:38:80:fe:61:52:73:6f:be:27: ee:f8:d6:4e:9b:70:83:a8:ed:fc:97:57:c9:c3:de: a3:26:9e:3f:29:c4:0a:a7:2f:6c:95:6d:e9:62:4b: e4:59:a4:31:ad:5d:93:93:f9:dc:13:a6:ad:75:81: 06:f6:b3:94:b7:1d:b4:a6:3c:cf:8b:58:0c:7b:78: 53:1b:fb:1f:70:c0:ce:db:aa:dc:e5:35:7d:8d:6f: de:a9:cf:f5:27:c8:27:4c:5c:2a:d5:b3:d9:47:bc: 4d:6f:22:fc:d1:5c:34:44:a8:e5:5d:3f:16:f4:5b: aa:d7:e1:30:c9:74:b9:6b:e4:22:65:55:a5:36:85: b9:9f:32:84:0d:e3:a0:e4:a0:03:57:5a:8d:f0:2e: fb:47:e1:80:5a:2c:6a:e3:1e:98:a4:11:6b:46:7e: 76:a3:d9:af:40:8b:9c:20:b4:ed:d8:75:04:9c:bc: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:23:CB:12:8F:02:9C:B7:AE:A7:E2:51:1D:C1:60:CC:C4:63:10:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc8568c-9942-31d2-b630-3116629f0d17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:0d:d4:e1:44:4d:54:2d:bd:24:11:36:e0:5d:37:33:d9:df: 98:1c:03:04:6a:92:9a:75:f6:ae:69:ca:ca:75:92:db:04:d7: 61:90:ab:9f:38:e6:bd:bf:be:a2:1c:8e:2e:c8:ce:26:e2:b4: 48:16:6a:96:3f:88:99:d6:70:6b:43:fb:ec:14:bb:f1:be:4c: 22:e4:86:46:b7:35:5a:ee:96:29:c2:de:be:fa:91:fc:fc:30: 3e:2e:1d:00:38:5f:f0:c2:54:a9:0f:aa:d0:e9:42:36:67:b0: fe:57:ef:81:7c:4e:56:22:b2:c9:35:5d:4f:f4:ed:a0:e9:96: 6e:6a:13:73:5f:20:b1:ff:e5:70:78:5f:5b:71:78:e5:37:03: 3f:85:21:70:df:2a:29:d6:ae:cf:87:5a:2b:f7:ed:64:0b:f6: e3:15:32:61:8b:01:d1:23:5f:c1:42:f0:fa:16:0b:f4:6d:8f: da:25:41:0f:5c:3e:2a:4a:49:7b:bd:82:12:15:6a:88:47:6e: b7:66:26:b1:d0:cb:54:ce:00:ef:41:99:b4:ee:fa:ad:7e:e0: 8c:e8:0f:5f:7d:9e:1a:9f:ee:5f:f4:fc:11:23:12:2c:e1:18: c4:4b:75:03:0c:c4:4f:a3:4d:2b:74:14:44:33:a5:e1:af:72: 08:a0:ae:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJeUrWtLquBoFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZGE1NmNhMGQtY2Q0NC00ZTU4LWE0M2MtMjMxODU0YzI1ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kr7AXyphRLT9Vp2LrN13XMpMr12VoW7vcff wDpPgI9o5COLn5CVkDQVrI+PPYd831c5LMKyjoORN/gi4cCUAzIGi9TvCgcDYdRf Sp9jWt04gP5hUnNvvifu+NZOm3CDqO38l1fJw96jJp4/KcQKpy9slW3pYkvkWaQx rV2Tk/ncE6atdYEG9rOUtx20pjzPi1gMe3hTG/sfcMDO26rc5TV9jW/eqc/1J8gn TFwq1bPZR7xNbyL80Vw0RKjlXT8W9Fuq1+EwyXS5a+QiZVWlNoW5nzKEDeOg5KAD V1qN8C77R+GAWixq4x6YpBFrRn52o9mvQIucILTt2HUEnLyPQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgjyxKPApy3rqfiUR3BYMzEYxDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWZjODU2OGMtOTk0Mi0z MWQyLWI2MzAtMzExNjYyOWYwZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEN1OFETVQtvSQRNuBdNzPZ35gcAwRqkpp19q5pysp1ktsE12GQq584 5r2/vqIcji7IzibitEgWapY/iJnWcGtD++wUu/G+TCLkhka3NVrulinC3r76kfz8 MD4uHQA4X/DCVKkPqtDpQjZnsP5X74F8TlYissk1XU/07aDplm5qE3NfILH/5XB4 X1txeOU3Az+FIXDfKinWrs+HWiv37WQL9uMVMmGLAdEjX8FC8PoWC/Rtj9olQQ9c PipKSXu9ghIVaohHbrdmJrHQy1TOAO9BmbTu+q1+4IzoD199nhqf7l/0/BEjEizh GMRLdQMMxE+jTSt0FEQzpeGvcgigrow= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:52 2025 by rpki-client