$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa File: 5649878e-e982-39bb-9d15-912d6b1f027b.roa (raw, json) Hash identifier: 20/BGQQ/rv84h4zzh2sKR5tnsHyqbGLAQ9sFW40F9dY= Subject key identifier: D2:BD:6D:42:A8:7B:1B:7D:59:79:31:70:C5:6E:B6:CA:4D:9E:42:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A314491E0702825C204D7B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa Signing time: Thu 24 Apr 2025 22:51:28 +0000 ROA not before: Thu 24 Apr 2025 22:51:28 +0000 ROA not after: Wed 23 Jul 2025 22:51:28 +0000 asID: 19905 IP address blocks: 173.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:14:49:1e:07:02:82:5c:20:4d:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 22:51:28 2025 GMT Not After : Jul 23 22:51:28 2025 GMT Subject: CN=e617d819-e397-47e1-abbd-5ab30efe5759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:0b:5a:b1:20:84:44:bb:2f:fd:bd:aa:6e: 10:bf:92:38:3a:58:2d:da:3e:0d:ba:01:a0:7b:62: d2:8d:78:6a:98:82:bd:55:86:f7:46:c2:6b:a2:1c: bc:29:0b:6f:d9:46:9c:37:34:f9:25:bc:cb:ee:da: 0f:8f:7d:bd:aa:12:c0:32:67:64:37:9c:3d:05:83: 78:5b:52:2c:04:dd:48:00:97:f6:1a:77:2c:70:35: e2:ca:b2:bc:88:46:18:e9:61:18:10:e7:2f:52:ff: 9c:50:64:73:07:03:be:37:68:23:ce:86:a8:48:75: af:91:bb:ae:ce:6d:31:40:74:36:81:b7:28:64:fd: df:20:82:0b:e3:80:a3:c7:07:cf:59:25:06:1f:8a: 7d:6b:b0:ef:c6:6d:8f:ac:de:e4:64:78:7f:7d:55: 55:aa:df:f2:f9:03:54:d7:cd:8f:18:4a:d5:1c:65: 91:72:c6:65:d1:80:1a:29:0c:e4:87:8e:2e:da:a1: 44:26:d1:cf:17:f3:ff:27:c0:5e:c0:fe:db:f6:ec: ce:2f:c3:b5:0c:f9:2f:7f:1b:89:4b:8b:4d:b3:75: da:37:f2:e7:b9:18:e1:3f:6a:5c:74:8f:9b:e8:54: a9:73:cb:07:df:dd:2c:90:83:ba:61:56:f5:96:9f: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BD:6D:42:A8:7B:1B:7D:59:79:31:70:C5:6E:B6:CA:4D:9E:42:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bf:6f:40:c3:65:61:ef:9b:70:65:eb:66:06:7b:e2:b5:ef: e5:8c:c4:c6:49:36:63:7d:63:0e:21:0c:2f:eb:54:ff:4f:b9: a4:da:b6:38:e3:cf:df:fe:63:4a:9c:10:f7:c1:a9:ec:7b:fb: a4:42:d1:7b:c5:9d:5a:bb:05:6e:33:53:09:74:6f:e9:35:1b: 4e:91:a1:58:df:44:e3:bf:60:8e:ca:98:d3:05:b5:e6:ef:87: d1:c8:42:2f:82:b5:91:0c:70:86:30:99:bf:b1:22:25:fb:36: 2c:76:27:76:94:68:b1:d7:89:54:b9:56:0b:f4:44:38:50:67: cf:d8:6e:d2:bc:e1:38:67:67:5c:dd:2d:c6:48:e7:0e:8f:7f: 64:04:0e:90:18:cd:5f:d6:f3:c1:da:26:8c:37:36:f7:47:c1: 5c:cb:c8:10:97:5e:ef:59:98:a5:16:cd:84:2b:8b:2a:82:57: cc:c9:6c:a8:81:76:9d:24:e3:99:74:1c:a2:5c:85:69:78:11: b7:a2:8e:5c:34:b0:35:c5:d0:63:1a:8e:2d:6b:6e:c9:a2:37: a4:01:b0:c2:b2:5b:30:14:31:cd:e6:73:75:19:d4:40:f7:c7: 58:74:23:0f:76:69:f7:4d:9b:d2:d4:0c:e7:30:b3:70:f3:22: 16:9e:82:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjFEkeBwKCXCBNe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDIyNTEyOFoXDTI1MDcyMzIyNTEyOFowLzEtMCsGA1UEAxMk ZTYxN2Q4MTktZTM5Ny00N2UxLWFiYmQtNWFiMzBlZmU1NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5YLWrEghES7L/29qm4Qv5I4Olgt2j4NugGg e2LSjXhqmIK9VYb3RsJrohy8KQtv2UacNzT5JbzL7toPj329qhLAMmdkN5w9BYN4 W1IsBN1IAJf2GncscDXiyrK8iEYY6WEYEOcvUv+cUGRzBwO+N2gjzoaoSHWvkbuu zm0xQHQ2gbcoZP3fIIIL44CjxwfPWSUGH4p9a7Dvxm2PrN7kZHh/fVVVqt/y+QNU 182PGErVHGWRcsZl0YAaKQzkh44u2qFEJtHPF/P/J8BewP7b9uzOL8O1DPkvfxuJ S4tNs3XaN/LnuRjhP2pcdI+b6FSpc8sH390skIO6YVb1lp/PDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK9bUKoext9WXkxcMVutspNnkKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTY0OTg3OGUtZTk4Mi0z OWJiLTlkMTUtOTEyZDZiMWYwMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC/b0DDZWHvm3Bl62YGe+K17+WMxMZJNmN9Yw4hDC/rVP9PuaTatjjj z9/+Y0qcEPfBqex7+6RC0XvFnVq7BW4zUwl0b+k1G06RoVjfROO/YI7KmNMFtebv h9HIQi+CtZEMcIYwmb+xIiX7Nix2J3aUaLHXiVS5Vgv0RDhQZ8/YbtK84ThnZ1zd LcZI5w6Pf2QEDpAYzV/W88HaJow3NvdHwVzLyBCXXu9ZmKUWzYQriyqCV8zJbKiB dp0k45l0HKJchWl4Ebeijlw0sDXF0GMaji1rbsmiN6QBsMKyWzAUMc3mc3UZ1ED3 x1h0Iw92afdNm9LUDOcws3DzIhaegu8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:14 2025 by rpki-client