$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ba68b78-16a5-39ee-bfa9-0676306342f6.roa File: 5ba68b78-16a5-39ee-bfa9-0676306342f6.roa (raw, json) Hash identifier: CPcUEzTiP5jIijM85+b1IvO2wxGBh2cF77W2R4viB5g= Subject key identifier: AB:F7:CA:2A:93:1E:7F:92:13:7D:D5:35:F6:97:8D:E5:42:3C:49:C4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3620B0ECE3ECB743C700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ba68b78-16a5-39ee-bfa9-0676306342f6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:36:20:b0:ec:e3:ec:b7:43:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d04e4fca-2dfc-4dd6-8a76-4633a0fd4f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:c3:5a:68:eb:0c:fc:d2:8a:a0:5d:a9:a2: 09:81:de:5a:9b:32:97:0e:54:1a:87:76:03:fd:5f: dc:6c:83:e4:7d:65:d5:ef:33:de:3c:42:d7:d0:76: da:ad:eb:7f:b6:bf:a4:96:42:c3:0d:38:cb:3d:d5: 65:18:b7:75:be:98:3f:e9:af:e4:2c:cc:30:96:14: 97:b6:48:a2:5f:de:f6:03:d0:f1:22:00:32:b6:b4: 47:2f:af:f0:b1:39:fd:ff:54:00:f3:9d:5c:8a:da: a1:2c:59:49:d6:06:c9:75:32:ca:fb:42:1f:4c:3b: b6:b5:91:85:47:fd:43:ca:91:ba:f4:8e:c3:04:4e: 46:8d:7c:28:a8:3a:12:3a:00:36:85:b5:c6:9f:74: c4:df:cf:62:22:43:b6:7c:17:30:37:4a:34:e1:d2: 10:84:c3:a2:02:9b:4d:d5:41:34:9e:14:77:8c:78: 73:7d:67:9e:5e:55:b7:82:38:ad:ea:7f:a2:b8:94: 32:c9:1b:7f:67:73:d2:14:77:bb:08:09:3a:09:4f: 08:84:48:85:55:46:56:b7:1d:5e:b8:ac:21:da:ce: 47:c5:c4:23:38:06:21:5c:24:7a:45:2b:fb:12:50: c6:62:80:27:10:ff:5c:84:25:10:5c:5c:b8:1b:f4: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F7:CA:2A:93:1E:7F:92:13:7D:D5:35:F6:97:8D:E5:42:3C:49:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ba68b78-16a5-39ee-bfa9-0676306342f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e2:87:a7:40:d0:fc:75:0c:4a:9a:6e:67:4d:bc:ff:1e:19: a4:03:34:f7:07:d5:de:c2:e2:de:49:5d:28:95:09:9f:95:02: 92:8b:3c:2a:36:bd:23:a3:73:81:76:b7:9a:42:fc:bc:7a:73: 68:ca:76:b3:62:d9:07:50:f3:0a:2b:52:ae:a5:63:2d:88:5f: 3e:ba:2b:30:38:65:59:6c:0a:d4:d0:e3:b2:7d:d0:90:9a:fc: 58:a4:ba:78:5c:67:d7:38:e5:3a:06:7a:93:3b:38:5f:e4:ad: ef:0f:e9:91:e8:e7:f9:32:cf:2a:c1:25:6f:17:bb:89:81:c1: c4:12:58:cb:91:a4:47:e3:0a:eb:4b:28:12:3a:10:3f:c3:94: 85:79:08:8e:20:b9:8e:5c:01:ef:a7:ef:80:13:99:00:6c:d3: 51:e1:ee:9e:90:bd:8c:67:8a:21:af:f7:31:96:7b:35:93:4f: 92:4d:28:c3:e0:36:f6:33:4a:d5:5a:e7:fe:1e:cb:48:d0:42: ef:58:8f:3c:c0:41:ff:d1:45:90:3d:72:ec:2e:11:b5:c8:da: 4c:24:f3:87:5f:13:01:c6:15:66:a7:09:af:37:13:12:6f:a5: ec:6c:ee:ca:5c:fb:7b:65:b5:3a:6c:93:b7:f6:52:eb:eb:46: ad:ed:fe:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujYgsOzj7LdDxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDA0ZTRmY2EtMmRmYy00ZGQ2LThhNzYtNDYzM2EwZmQ0ZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZDDWmjrDPzSiqBdqaIJgd5amzKXDlQah3YD /V/cbIPkfWXV7zPePELX0Hbaret/tr+klkLDDTjLPdVlGLd1vpg/6a/kLMwwlhSX tkiiX972A9DxIgAytrRHL6/wsTn9/1QA851citqhLFlJ1gbJdTLK+0IfTDu2tZGF R/1DypG69I7DBE5GjXwoqDoSOgA2hbXGn3TE389iIkO2fBcwN0o04dIQhMOiAptN 1UE0nhR3jHhzfWeeXlW3gjit6n+iuJQyyRt/Z3PSFHe7CAk6CU8IhEiFVUZWtx1e uKwh2s5HxcQjOAYhXCR6RSv7ElDGYoAnEP9chCUQXFy4G/S/wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv3yiqTHn+SE33VNfaXjeVCPEnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWJhNjhiNzgtMTZhNS0z OWVlLWJmYTktMDY3NjMwNjM0MmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPih6dA0Px1DEqabmdNvP8eGaQDNPcH1d7C4t5JXSiVCZ+VApKLPCo2 vSOjc4F2t5pC/Lx6c2jKdrNi2QdQ8worUq6lYy2IXz66KzA4ZVlsCtTQ47J90JCa /FikunhcZ9c45ToGepM7OF/kre8P6ZHo5/kyzyrBJW8Xu4mBwcQSWMuRpEfjCutL KBI6ED/DlIV5CI4guY5cAe+n74ATmQBs01Hh7p6QvYxniiGv9zGWezWTT5JNKMPg NvYzStVa5/4ey0jQQu9YjzzAQf/RRZA9cuwuEbXI2kwk84dfEwHGFWanCa83ExJv pexs7spc+3tltTpsk7f2UuvrRq3t/vo= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:36 2025 by rpki-client