$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa File: 34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa (raw, json) Hash identifier: At+2zFvZIznQaiL5MorBq6KzGfMb+BFm0yLQnGLiN14= Subject key identifier: 68:8A:6D:A3:44:92:EF:FF:DA:FC:3A:84:F3:3D:55:46:71:CE:4A:88 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDDB67126655585BE9DF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa Signing time: Thu 24 Apr 2025 11:53:45 +0000 ROA not before: Thu 24 Apr 2025 11:53:45 +0000 ROA not after: Wed 23 Jul 2025 11:53:45 +0000 asID: 19905 IP address blocks: 173.29.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:db:67:12:66:55:58:5b:e9:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:45 2025 GMT Not After : Jul 23 11:53:45 2025 GMT Subject: CN=1f33eb96-a3f8-46a6-8919-4cc84dc25ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:53:49:5f:62:d1:df:93:0d:00:3c:55:25: 41:5c:f5:65:8e:a9:9e:ec:3a:c3:e3:71:e6:81:86: 95:69:0e:60:ba:37:50:4e:d4:e5:a4:95:02:cc:8b: b5:78:8d:86:61:f9:cb:0c:dc:e0:09:f7:29:30:10: f3:d6:1d:23:83:c8:0f:5e:87:9b:f0:2b:78:b2:b0: 16:02:08:fc:6c:04:e7:3a:db:96:9d:d1:47:d5:c1: d5:0e:58:35:10:4e:57:97:97:32:70:c3:fd:a6:eb: 6f:3d:3e:0a:2a:c0:85:87:e7:31:b2:58:55:20:a8: db:83:9a:06:99:97:9f:4e:2a:e7:ab:3c:88:85:b0: 80:94:64:01:ff:7f:ca:9b:98:b1:8c:87:aa:04:4d: 62:74:4d:2c:b8:b6:b1:21:a5:99:6e:c6:0b:d3:5e: 47:2b:61:66:05:79:eb:7e:29:09:0f:9e:4a:43:4e: de:18:4b:7d:0d:4e:b0:3a:6f:2d:20:c0:0f:fa:05: 0c:f6:d6:c1:47:3b:33:4c:6d:b4:50:12:09:11:13: 10:c8:8a:4b:3e:40:08:ec:3f:d5:9a:7b:ce:94:26: d6:df:10:1e:1e:fb:c7:c3:58:cb:e1:9c:54:6e:e6: 60:5a:1d:b8:bc:65:84:f7:4d:ba:8a:0d:9f:3a:6e: 90:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8A:6D:A3:44:92:EF:FF:DA:FC:3A:84:F3:3D:55:46:71:CE:4A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:fd:a6:88:96:c2:8d:f0:c7:a8:d7:fa:c1:aa:cf:f6:84:df: 07:82:53:bc:eb:18:c8:d1:68:bc:8d:bb:7c:37:cf:00:03:e6: 67:47:57:82:96:a6:5a:1c:e5:c0:d8:91:db:aa:12:15:26:19: 1d:3b:df:f1:c5:84:d9:e2:df:0e:5c:3e:52:a5:b0:4d:5b:d3: f0:11:0c:5a:62:a0:75:eb:9a:f7:7b:38:dd:d0:2a:0f:1e:14: 65:e0:8c:54:68:2d:bc:f0:c0:a4:34:ee:64:30:78:4e:73:01: 1d:98:a4:0f:2d:4b:91:0e:46:ca:8d:50:e8:63:3e:04:89:4d: 67:2c:3f:6e:ce:d8:c1:87:b4:d1:36:f0:dd:4a:8d:d2:cf:66: 37:3f:bd:9e:f9:46:b1:b5:56:f7:b4:86:d8:de:75:51:60:f8: c7:2e:40:31:97:24:35:c2:25:0e:13:62:91:c1:dc:57:31:40: 81:43:16:22:8f:59:19:1a:a2:b6:64:20:29:5c:a9:3a:62:40: b7:a6:5b:dd:86:5f:aa:92:33:05:e0:32:e4:29:4f:2a:a3:a0: c7:63:b9:2b:b6:c6:77:5b:5d:d5:6c:7a:08:33:eb:e1:af:99: f8:b1:62:c9:62:65:b7:d1:c1:9d:52:8c:02:48:ac:bf:1c:39: 9d:93:ed:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzdtnEmZVWFvp34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTM0NVoXDTI1MDcyMzExNTM0NVowLzEtMCsGA1UEAxMk MWYzM2ViOTYtYTNmOC00NmE2LTg5MTktNGNjODRkYzI1Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt1TSV9i0d+TDQA8VSVBXPVljqme7DrD43Hm gYaVaQ5gujdQTtTlpJUCzIu1eI2GYfnLDNzgCfcpMBDz1h0jg8gPXoeb8Ct4srAW Agj8bATnOtuWndFH1cHVDlg1EE5Xl5cycMP9putvPT4KKsCFh+cxslhVIKjbg5oG mZefTirnqzyIhbCAlGQB/3/Km5ixjIeqBE1idE0suLaxIaWZbsYL015HK2FmBXnr fikJD55KQ07eGEt9DU6wOm8tIMAP+gUM9tbBRzszTG20UBIJERMQyIpLPkAI7D/V mnvOlCbW3xAeHvvHw1jL4ZxUbuZgWh24vGWE9026ig2fOm6Q6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiKbaNEku//2vw6hPM9VUZxzkqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRkZGUwYTAtNjM2My0z ZDNhLWFhZDctNGEyOWE1OWExZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/9poiWwo3wx6jX+sGqz/aE3weCU7zrGMjRaLyNu3w3zwAD5mdHV4KW ploc5cDYkduqEhUmGR073/HFhNni3w5cPlKlsE1b0/ARDFpioHXrmvd7ON3QKg8e FGXgjFRoLbzwwKQ07mQweE5zAR2YpA8tS5EORsqNUOhjPgSJTWcsP27O2MGHtNE2 8N1KjdLPZjc/vZ75RrG1Vve0htjedVFg+McuQDGXJDXCJQ4TYpHB3FcxQIFDFiKP WRkaorZkIClcqTpiQLemW92GX6qSMwXgMuQpTyqjoMdjuSu2xndbXdVseggz6+Gv mfixYsliZbfRwZ1SjAJIrL8cOZ2T7QI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:52:53 2025 by rpki-client