$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa File: 49857a90-f490-31a1-a4af-0d9678a70395.roa (raw, json) Hash identifier: YgQC6mlXdsP1nMxnFt+qYZgm+QuU819iOZhFd+TnZ+w= Subject key identifier: 78:27:9A:A0:71:04:B2:CC:D0:0B:F0:A6:99:DA:A5:4E:31:5A:8D:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BD62969A8D3C64923B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.29.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bd:62:96:9a:8d:3c:64:92:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=28a94208-552c-436e-8ebd-a83f8eb58a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:b1:40:c0:b4:c5:40:ee:3c:eb:b9:29:0f: a8:49:ad:8e:d4:b0:1d:9b:ad:af:75:06:7b:f0:bb: e4:44:8e:b8:99:92:ff:8f:05:f2:e9:c5:28:2b:5b: 1b:df:67:aa:c8:b5:9a:69:c6:3a:7a:84:c8:2e:de: f8:58:14:d7:06:02:6a:b5:47:dc:d0:5b:e8:2f:f5: a5:28:46:14:65:ab:b5:d1:df:80:b7:c7:51:d7:96: bb:9e:a2:1a:bf:71:44:0d:6b:a9:82:fb:4b:ff:07: 7f:e3:13:b6:68:6f:c9:b0:bf:92:2a:96:60:61:4e: 6d:fe:d7:79:7c:15:46:3f:fa:9f:e5:01:cc:3b:d7: 2a:b8:9e:d2:56:79:60:14:f4:d5:87:be:a3:08:d7: e0:cb:01:7f:7f:98:07:45:f2:41:e5:94:ea:b5:9d: 67:17:c4:53:51:77:d3:0e:a3:35:cc:f2:bb:6c:33: b5:89:d5:29:92:de:eb:0d:c7:08:07:98:e1:02:80: 4d:b7:be:30:17:50:fa:3a:99:5e:dc:9e:05:5d:b5: d6:71:c4:be:c1:e4:8d:ac:00:c4:9b:41:d2:c8:3f: e5:24:7b:c3:f0:d4:df:48:a1:5a:d5:85:43:c4:1e: 47:54:6f:a8:f7:a2:49:2e:75:a3:0f:82:38:4c:25: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:27:9A:A0:71:04:B2:CC:D0:0B:F0:A6:99:DA:A5:4E:31:5A:8D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1f:93:0c:56:60:3e:97:b6:7b:69:13:1f:6f:41:dd:69:31: e8:25:6b:85:23:b1:ac:a9:be:b9:2a:cd:95:29:37:ea:5f:44: 99:e0:54:7e:a2:2b:9d:3d:c4:04:37:3c:f7:c4:8c:a6:c7:bf: 1b:42:9a:fe:e0:5e:45:01:aa:20:97:b0:ff:24:9e:f3:cf:5d: 9e:14:14:49:10:71:eb:ba:c1:f8:3c:85:bc:2e:53:47:33:77: f6:8e:69:ce:c2:5b:17:6e:24:4d:ee:01:0d:b8:f3:cf:ae:13: 7e:cd:4b:04:c0:ee:78:d6:3d:3f:fd:6d:e9:f6:14:8f:b7:81: 61:5a:bd:2e:23:9d:74:0e:f9:e6:81:74:f2:b1:e9:e5:a0:36: 3c:f0:b2:1a:6c:9e:88:4e:aa:ff:ba:cd:9a:d0:d8:72:7a:d8: 0c:4b:12:f9:09:ba:ed:a6:1d:3a:a4:15:4d:10:5e:ea:e8:c6: bf:97:3e:55:29:f3:f4:63:88:26:cf:bd:a5:84:e7:3a:b2:03: 0f:62:f1:01:52:63:bb:ef:34:cd:cf:b9:1f:8e:af:d2:7b:58: 13:db:ff:a7:6c:36:c1:28:92:0a:c6:27:26:d8:48:4d:0c:c2: 18:dc:ed:f8:37:cb:3b:06:6e:0c:30:c3:42:38:97:a8:56:f5: 64:f9:a3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhL1ilpqNPGSSO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjhhOTQyMDgtNTUyYy00MzZlLThlYmQtYTgzZjhlYjU4YTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOKxQMC0xUDuPOu5KQ+oSa2O1LAdm62vdQZ7 8LvkRI64mZL/jwXy6cUoK1sb32eqyLWaacY6eoTILt74WBTXBgJqtUfc0FvoL/Wl KEYUZau10d+At8dR15a7nqIav3FEDWupgvtL/wd/4xO2aG/JsL+SKpZgYU5t/td5 fBVGP/qf5QHMO9cquJ7SVnlgFPTVh76jCNfgywF/f5gHRfJB5ZTqtZ1nF8RTUXfT DqM1zPK7bDO1idUpkt7rDccIB5jhAoBNt74wF1D6Ople3J4FXbXWccS+weSNrADE m0HSyD/lJHvD8NTfSKFa1YVDxB5HVG+o96JJLnWjD4I4TCU1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgnmqBxBLLM0AvwppnapU4xWo0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDk4NTdhOTAtZjQ5MC0z MWExLWE0YWYtMGQ5Njc4YTcwMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAofkwxWYD6XtntpEx9vQd1pMegla4UjsaypvrkqzZUpN+pfRJngVH6i K509xAQ3PPfEjKbHvxtCmv7gXkUBqiCXsP8knvPPXZ4UFEkQceu6wfg8hbwuU0cz d/aOac7CWxduJE3uAQ2488+uE37NSwTA7njWPT/9ben2FI+3gWFavS4jnXQO+eaB dPKx6eWgNjzwshpsnohOqv+6zZrQ2HJ62AxLEvkJuu2mHTqkFU0QXuroxr+XPlUp 8/RjiCbPvaWE5zqyAw9i8QFSY7vvNM3PuR+Or9J7WBPb/6dsNsEokgrGJybYSE0M whjc7fg3yzsGbgwww0I4l6hW9WT5o0Q= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:48 2025 by rpki-client