$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa File: 213537ac-2312-3e47-8fd5-9349e44762f2.roa (raw, json) Hash identifier: cGJaF4EEF2dEiBEk90U5sVEyTkeQjO136yHxx2GB0qo= Subject key identifier: 41:52:68:D8:F0:09:D5:FA:9E:9A:D6:93:0D:0B:B5:D1:0C:07:B6:AF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA18A3E83E373C99D46FC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:18:a3:e8:3e:37:3c:99:d4:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=83f845b9-1ab2-438f-8998-b635bacb0415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:53:45:46:91:2f:26:e3:29:5d:2a:60:03: de:d8:aa:5f:75:70:e5:38:bd:bb:7b:f8:f4:cb:cb: b3:53:af:f1:d0:56:06:80:76:25:04:b1:de:2b:e8: 21:b6:00:c9:3f:a0:ca:80:2e:cf:95:f8:fa:fb:11: ec:bd:0c:6a:54:99:9c:38:22:be:d5:d7:cc:9d:e4: 30:a7:9e:f2:35:ed:29:d5:3a:09:ac:e8:e3:a4:e1: c8:6a:e4:04:cd:7a:79:14:8e:8a:51:38:24:2c:1c: 21:bb:a9:cf:de:15:0e:87:2b:5d:ad:b6:8c:e1:89: 8b:c9:ce:6f:ef:85:45:25:82:f8:fb:18:59:e6:bd: d1:d2:58:8e:cd:c9:60:73:0e:79:20:08:39:78:b7: c2:ed:49:6a:96:3e:aa:f6:8f:2e:68:b5:9b:73:65: cb:85:48:50:60:aa:62:42:d5:69:a3:52:2c:ce:61: ea:ec:83:a9:3d:6b:8d:95:06:d0:2f:ef:d5:ef:dd: 31:6e:73:23:36:64:bd:b7:76:fb:83:0f:2c:fa:0f: e6:9c:e3:73:15:30:1b:02:f9:df:a6:e5:08:a5:b1: 9f:46:3d:b6:8b:de:fd:84:72:88:69:f3:35:97:b2: ea:8c:0e:b4:6f:83:1e:3a:89:8c:b3:a7:95:9d:70: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:52:68:D8:F0:09:D5:FA:9E:9A:D6:93:0D:0B:B5:D1:0C:07:B6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d5:3e:3c:fc:79:80:ad:b1:94:13:ab:0b:ed:a5:8f:02:c8: 11:8d:69:3e:7e:f4:0f:1d:95:79:0f:4c:85:4c:bc:a9:ef:94: b8:e0:5c:85:4a:66:9f:f6:47:e3:59:b3:62:fe:4c:8f:80:7d: 08:55:b1:b1:65:ee:b7:9a:55:ed:c8:74:01:d0:95:0e:eb:68: 12:28:4c:21:79:2d:39:31:92:49:e2:76:71:5b:bf:03:db:90: 33:b6:28:2f:50:5c:78:5b:3a:2a:eb:cd:e8:b5:34:6b:0c:85: d5:c1:cf:79:e0:da:00:08:ad:59:dc:84:58:8c:45:b6:a7:b0: ea:56:77:79:66:b1:e5:56:92:e7:60:b1:43:7e:f5:2b:80:c3: 78:84:08:72:ec:60:9c:42:d8:76:c9:24:3c:bd:40:c9:20:7f: e0:3e:3c:63:cf:49:48:b9:5f:c3:3c:13:b0:23:22:a0:64:d8: f6:d4:a8:28:17:de:e6:95:d2:59:a7:85:21:c4:50:54:3c:f0: e0:43:04:eb:78:9d:96:90:35:4f:14:12:1f:5d:cf:5c:f2:52: ee:21:af:cf:6c:04:b5:1a:0c:e4:0a:27:a8:da:89:57:cb:e0: 69:c9:93:3e:6b:26:79:e0:05:d7:44:18:92:c8:b4:c9:f0:df: 6e:6c:91:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhij6D43PJnUb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODNmODQ1YjktMWFiMi00MzhmLTg5OTgtYjYzNWJhY2IwNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVFTRUaRLybjKV0qYAPe2KpfdXDlOL27e/j0 y8uzU6/x0FYGgHYlBLHeK+ghtgDJP6DKgC7Plfj6+xHsvQxqVJmcOCK+1dfMneQw p57yNe0p1ToJrOjjpOHIauQEzXp5FI6KUTgkLBwhu6nP3hUOhytdrbaM4YmLyc5v 74VFJYL4+xhZ5r3R0liOzclgcw55IAg5eLfC7Ulqlj6q9o8uaLWbc2XLhUhQYKpi QtVpo1IszmHq7IOpPWuNlQbQL+/V790xbnMjNmS9t3b7gw8s+g/mnONzFTAbAvnf puUIpbGfRj22i979hHKIafM1l7LqjA60b4MeOomMs6eVnXCmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFSaNjwCdX6nprWkw0LtdEMB7avMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjEzNTM3YWMtMjMxMi0z ZTQ3LThmZDUtOTM0OWU0NDc2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADVPjz8eYCtsZQTqwvtpY8CyBGNaT5+9A8dlXkPTIVMvKnvlLjgXIVK Zp/2R+NZs2L+TI+AfQhVsbFl7reaVe3IdAHQlQ7raBIoTCF5LTkxkknidnFbvwPb kDO2KC9QXHhbOirrzei1NGsMhdXBz3ng2gAIrVnchFiMRbansOpWd3lmseVWkudg sUN+9SuAw3iECHLsYJxC2HbJJDy9QMkgf+A+PGPPSUi5X8M8E7AjIqBk2PbUqCgX 3uaV0lmnhSHEUFQ88OBDBOt4nZaQNU8UEh9dz1zyUu4hr89sBLUaDOQKJ6jaiVfL 4GnJkz5rJnngBddEGJLItMnw325skUo= -----END CERTIFICATE-----Generated at Sun Apr 27 00:10:31 2025 by rpki-client