$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa File: 23957716-4faa-35cf-b99d-97d2f25c2a2e.roa (raw, json) Hash identifier: FjfcjTGdY/VPlC1RmTIouM4YATTZYZwPRYMqvkK6tMw= Subject key identifier: 5E:CE:07:F1:50:94:57:2D:28:4A:8E:1F:16:29:3C:E6:49:BA:45:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA465CF300785E914BD800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:46:5c:f3:00:78:5e:91:4b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2b7d68fd-eacd-412a-9109-1cfba3e9030d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:7b:df:e9:59:82:2e:15:be:85:d1:d4:87: af:e6:a1:cb:82:2d:c2:f5:74:f2:25:6d:62:44:ec: e8:af:43:bb:45:c5:41:46:27:2c:4a:94:ea:ef:9e: ce:83:c6:d9:44:bd:7a:b8:6f:90:0e:8a:4c:ea:db: 8f:98:12:f9:69:4d:d9:7b:05:98:a3:68:ae:d8:0a: 78:03:a4:97:41:ad:86:1a:97:29:45:98:56:b3:48: d3:e0:e8:e7:4d:97:4b:ab:30:2d:2b:21:bc:38:d9: 74:9c:26:48:9e:09:45:60:fe:5b:1e:3b:97:18:51: 91:69:57:00:46:2f:b3:e8:78:31:d2:08:72:27:ca: 62:4e:8a:ea:13:78:c5:dc:af:dc:d1:e0:6a:54:97: 1e:e7:29:72:33:bc:e3:56:75:3d:b0:9a:af:d5:dd: ca:e4:5c:d1:ce:f3:72:42:27:fe:0c:cd:61:65:89: b5:49:7c:2b:0a:be:88:b1:52:4d:cf:5f:62:b1:b6: f6:f9:66:78:d7:b5:3f:a6:c7:3d:67:29:c6:1a:06: c1:62:d8:74:9d:eb:c5:eb:8b:ef:b8:6b:10:30:37: 3f:19:f5:2f:d0:c6:78:74:ff:cf:b8:ad:f6:6b:95: 8b:0f:60:e8:c3:be:f5:91:58:d9:02:14:2d:b7:50: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:07:F1:50:94:57:2D:28:4A:8E:1F:16:29:3C:E6:49:BA:45:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:98:9c:fe:1e:d5:a4:14:88:59:43:1b:8a:97:89:c5:43:cf: d0:d6:e7:8c:32:f6:80:76:9e:da:39:17:68:53:93:b7:30:a4: 5d:02:71:f3:47:5f:17:14:81:3b:d5:05:62:12:46:ec:51:1e: 05:cd:49:9a:02:f7:a8:c2:50:58:41:9f:a7:f6:79:2f:99:e8: 34:d7:6d:ee:20:07:5d:b2:b6:95:9c:97:ca:e3:fb:3a:44:dd: e9:58:ac:85:b3:91:d7:45:54:61:d8:0b:03:28:92:d6:0c:e2: 46:97:bf:f8:72:f8:8b:0f:1f:35:06:81:73:30:60:9d:2b:65: bd:5a:64:5c:c3:a9:e7:55:6e:5b:2c:b6:42:d1:f8:d8:03:3f: 61:2f:5a:e0:d1:91:c2:fa:39:be:0f:09:d0:ec:f6:ee:03:b8: 0c:97:56:ac:e0:91:a3:c6:97:d4:8f:f2:9c:99:f7:be:14:7f: 63:57:eb:84:b8:85:ef:e8:75:a9:87:2f:d4:41:b1:24:cd:68: 99:55:6b:21:16:c5:82:bf:ce:74:85:aa:04:fe:2b:cc:b0:c1: 61:d7:cd:fa:5c:da:4d:1c:4c:bc:5c:ab:3b:7e:8c:f0:19:7a: 64:d8:40:9c:f3:62:23:af:a7:f1:88:4e:a2:48:dd:1c:d1:6f: 34:46:a6:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukZc8wB4XpFL2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmI3ZDY4ZmQtZWFjZC00MTJhLTkxMDktMWNmYmEzZTkwMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+973+lZgi4VvoXR1Iev5qHLgi3C9XTyJW1i ROzor0O7RcVBRicsSpTq757Og8bZRL16uG+QDopM6tuPmBL5aU3ZewWYo2iu2Ap4 A6SXQa2GGpcpRZhWs0jT4OjnTZdLqzAtKyG8ONl0nCZInglFYP5bHjuXGFGRaVcA Ri+z6Hgx0ghyJ8piTorqE3jF3K/c0eBqVJce5ylyM7zjVnU9sJqv1d3K5FzRzvNy Qif+DM1hZYm1SXwrCr6IsVJNz19isbb2+WZ417U/psc9ZynGGgbBYth0nevF64vv uGsQMDc/GfUv0MZ4dP/PuK32a5WLD2Dow771kVjZAhQtt1B9wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7OB/FQlFctKEqOHxYpPOZJukXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM5NTc3MTYtNGZhYS0z NWNmLWI5OWQtOTdkMmYyNWMyYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASYnP4e1aQUiFlDG4qXicVDz9DW54wy9oB2nto5F2hTk7cwpF0CcfNH XxcUgTvVBWISRuxRHgXNSZoC96jCUFhBn6f2eS+Z6DTXbe4gB12ytpWcl8rj+zpE 3elYrIWzkddFVGHYCwMoktYM4kaXv/hy+IsPHzUGgXMwYJ0rZb1aZFzDqedVblss tkLR+NgDP2EvWuDRkcL6Ob4PCdDs9u4DuAyXVqzgkaPGl9SP8pyZ974Uf2NX64S4 he/odamHL9RBsSTNaJlVayEWxYK/znSFqgT+K8ywwWHXzfpc2k0cTLxcqzt+jPAZ emTYQJzzYiOvp/GITqJI3RzRbzRGpjw= -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:21 2025 by rpki-client