$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa File: 3b8538c7-b1af-312d-985d-bfad849eca5a.roa (raw, json) Hash identifier: 0LbFIzbvP9pSCM7z9ujxFcCm5pU9r6RN5SSfM1uzi10= Subject key identifier: B1:93:A0:54:11:03:BE:06:90:4B:8A:A8:B4:16:2C:39:CD:E7:32:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDDD7BEEF9316D9F985850 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa Signing time: Thu 24 Apr 2025 11:53:46 +0000 ROA not before: Thu 24 Apr 2025 11:53:46 +0000 ROA not after: Wed 23 Jul 2025 11:53:46 +0000 asID: 19905 IP address blocks: 173.29.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:dd:7b:ee:f9:31:6d:9f:98:58:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:46 2025 GMT Not After : Jul 23 11:53:46 2025 GMT Subject: CN=09dc6cb4-eb30-4691-b7dc-1a050b82a8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:5a:fc:5c:6d:64:b6:6e:0b:c3:0f:a3:74: 05:b1:55:47:8a:d9:0c:01:c3:45:13:d7:d9:aa:37: cc:68:05:a1:8c:24:4f:29:6b:44:64:65:64:69:4a: bd:30:04:5e:58:58:d2:b8:45:28:bb:ea:42:1a:dc: 67:0e:97:e8:0b:b4:41:df:c0:bf:af:77:7b:ce:dc: 7f:a8:92:60:52:e2:72:a7:e6:66:2a:93:0d:59:c9: 5f:5c:93:24:7c:0b:ce:1e:3a:09:bb:38:ff:d5:35: d7:08:8d:5c:60:44:3b:c9:fc:89:06:7c:33:b0:50: e6:e0:bc:ca:9f:c4:97:ab:57:f6:1a:65:72:7c:32: 83:c7:b1:b8:16:52:c1:74:db:34:1d:5c:0d:ba:14: 29:39:1b:f8:b3:78:42:cc:86:34:4b:48:35:f2:11: 1e:d7:5d:5c:3b:4e:b6:cf:f9:e4:67:de:21:7d:ff: 04:72:ef:5a:e1:f6:34:f7:54:be:4c:4b:bd:31:c1: 78:73:81:9b:1e:ed:66:79:35:39:31:6f:ce:f0:37: 4f:d4:c2:a7:32:8d:50:28:74:5b:b8:66:d6:2b:24: 73:65:94:14:97:46:95:50:8c:5c:b0:96:9f:49:96: 3c:e0:4a:10:60:4a:6f:37:94:bc:b9:11:32:cc:08: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:A0:54:11:03:BE:06:90:4B:8A:A8:B4:16:2C:39:CD:E7:32:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:13:bd:74:ca:22:d3:67:79:e8:9c:4d:ce:a9:8d:d7:57:69: 20:cc:e8:94:66:c2:60:b5:8e:69:d1:e2:3e:56:e8:01:71:e7: 38:d4:80:ba:d9:2c:e6:86:e6:19:a2:30:6e:b3:76:e5:98:de: e8:8b:05:a4:0e:6a:26:be:1a:8c:98:72:2a:95:0b:24:79:5f: d3:f6:2c:db:97:12:da:20:95:ff:c6:12:81:21:60:ea:59:fa: c2:f7:69:16:89:b8:c0:ad:85:4b:df:1a:9e:96:f3:c0:cf:3f: 4d:94:44:85:20:09:58:9b:a3:e5:08:8e:45:60:dd:b3:05:81: 0b:ff:9b:67:23:86:f2:9a:38:84:14:6a:1d:47:ad:2c:a7:46: 64:70:c6:6c:32:9e:0d:4e:d1:36:76:6f:a1:71:e4:23:ea:e2: 4f:8d:4d:67:6b:45:2d:6d:5e:96:1f:a9:c5:e0:f4:39:f8:28: 64:78:42:9d:4c:32:96:9b:f4:9d:0c:65:d4:0d:72:5c:a6:0b: 4b:11:8d:c5:5a:3d:2d:95:a0:62:a2:81:46:ef:47:fe:8c:17: 9d:e4:4a:6e:28:04:b8:7e:4a:ae:7a:2b:c8:39:4d:5b:64:6c: fe:84:01:d1:9d:f2:f8:43:db:57:99:59:ad:43:38:39:c5:40: 63:58:28:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzd177vkxbZ+YWFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTM0NloXDTI1MDcyMzExNTM0NlowLzEtMCsGA1UEAxMk MDlkYzZjYjQtZWIzMC00NjkxLWI3ZGMtMWEwNTBiODJhOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJNa/FxtZLZuC8MPo3QFsVVHitkMAcNFE9fZ qjfMaAWhjCRPKWtEZGVkaUq9MAReWFjSuEUou+pCGtxnDpfoC7RB38C/r3d7ztx/ qJJgUuJyp+ZmKpMNWclfXJMkfAvOHjoJuzj/1TXXCI1cYEQ7yfyJBnwzsFDm4LzK n8SXq1f2GmVyfDKDx7G4FlLBdNs0HVwNuhQpORv4s3hCzIY0S0g18hEe111cO062 z/nkZ94hff8Ecu9a4fY091S+TEu9McF4c4GbHu1meTU5MW/O8DdP1MKnMo1QKHRb uGbWKyRzZZQUl0aVUIxcsJafSZY84EoQYEpvN5S8uREyzAgmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGToFQRA74GkEuKqLQWLDnN5zJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2I4NTM4YzctYjFhZi0z MTJkLTk4NWQtYmZhZDg0OWVjYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoTvXTKItNneeicTc6pjddXaSDM6JRmwmC1jmnR4j5W6AFx5zjUgLrZ LOaG5hmiMG6zduWY3uiLBaQOaia+GoyYciqVCyR5X9P2LNuXEtoglf/GEoEhYOpZ +sL3aRaJuMCthUvfGp6W88DPP02URIUgCVibo+UIjkVg3bMFgQv/m2cjhvKaOIQU ah1HrSynRmRwxmwyng1O0TZ2b6Fx5CPq4k+NTWdrRS1tXpYfqcXg9Dn4KGR4Qp1M Mpab9J0MZdQNclymC0sRjcVaPS2VoGKigUbvR/6MF53kSm4oBLh+Sq56K8g5TVtk bP6EAdGd8vhD21eZWa1DODnFQGNYKMg= -----END CERTIFICATE-----Generated at Sun Jun 15 01:48:43 2025 by rpki-client