$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e76f5c9-10d5-3d7d-a65a-4470a11705a4.roa File: 5e76f5c9-10d5-3d7d-a65a-4470a11705a4.roa (raw, json) Hash identifier: 2qQBRlYVpSdV5f9/tsI99D+FkvIsT/I14VZT5RFkxAg= Subject key identifier: 43:28:6E:7C:11:A9:4C:68:8A:9C:AF:C2:4A:69:B3:13:BC:C9:43:3D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C4977C4CC04EA25FD49C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e76f5c9-10d5-3d7d-a65a-4470a11705a4.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.29.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:97:7c:4c:c0:4e:a2:5f:d4:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=3f0b7a1c-0059-4e0e-a501-595728cd9cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:68:f6:a9:b0:e6:09:d5:88:d0:1c:67:46: 15:b4:cb:17:97:0e:eb:ad:8b:9d:48:08:c8:32:7a: 54:8a:a7:67:8c:2f:dc:34:00:9e:c2:04:e7:9b:b4: 7a:7b:2c:7b:2e:fc:44:fd:16:5a:74:50:76:d8:d6: ca:c6:06:93:c8:bd:1f:25:96:23:f5:1f:63:77:d4: cd:22:94:32:7e:e2:66:21:4c:b2:9d:89:77:bd:15: 4f:37:ab:d6:57:6c:5f:8b:a4:69:7d:37:32:23:53: eb:14:78:0b:2a:c5:a2:da:13:24:b4:46:df:1e:37: 64:04:06:59:98:ac:8a:39:35:d3:ec:8f:f4:4d:61: ac:6f:ec:4e:e7:0b:94:75:50:3e:54:f5:53:38:51: 1b:e9:06:0a:e2:87:24:aa:dc:28:15:e3:e8:e6:ad: 77:42:f7:6f:95:16:50:78:e1:eb:39:35:70:23:0e: 55:4f:1a:82:80:bc:93:55:c2:51:36:6b:32:3c:62: 50:11:5c:a8:45:5c:31:91:d2:50:0f:69:3c:df:4f: b4:e5:2d:67:b1:d0:5d:92:44:51:31:57:5d:67:f8: 04:b6:66:f5:ab:14:b4:f8:8c:4e:80:29:64:44:88: f6:31:60:2d:bc:09:a7:49:0b:d5:8f:1a:6c:5f:a1: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:28:6E:7C:11:A9:4C:68:8A:9C:AF:C2:4A:69:B3:13:BC:C9:43:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e76f5c9-10d5-3d7d-a65a-4470a11705a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2d:55:8e:24:00:70:f5:b5:77:66:f5:25:ed:f7:6b:8a:fe: ed:ce:a1:2b:07:ef:dc:a1:ff:50:c9:b1:c9:18:cb:30:bc:be: a2:6b:4a:10:ad:02:f1:09:09:7c:0d:52:e2:fa:4e:b9:73:c9: cf:90:96:7a:66:70:a3:54:13:95:aa:28:fd:d2:05:16:df:fa: d4:46:6e:3f:9f:9b:0e:71:e8:28:c3:40:9f:99:2e:dc:bb:d4: 52:8b:6a:91:5f:7a:b5:47:dd:37:de:aa:8a:10:d9:b9:60:ad: c4:82:e5:f1:28:c5:20:ae:15:9c:d7:77:cf:4f:ac:0f:cf:6b: 8b:e5:4e:52:11:ae:b7:86:b5:7b:f6:20:2d:15:c7:c5:4a:7a: f4:7f:43:42:a7:e5:d4:f3:f7:88:3f:b3:56:72:73:bd:bd:62: 1d:c6:bd:52:06:bb:03:33:b8:88:1e:bb:41:0a:55:2e:1b:e1: 1b:4a:5c:90:d9:85:30:c7:65:0e:07:4a:fc:eb:00:8f:a6:14: 4f:fa:5f:f8:9e:08:a6:c0:6f:73:d2:22:b8:b0:5e:20:74:50: 1a:dd:0d:88:54:d8:89:85:49:22:99:a3:9e:f8:8b:f9:b9:54: bb:d5:51:1c:7f:91:46:f3:65:d0:d9:2b:7a:c5:b2:df:11:b7: dc:3b:bf:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJd8TMBOol/UnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk M2YwYjdhMWMtMDA1OS00ZTBlLWE1MDEtNTk1NzI4Y2Q5Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3Vo9qmw5gnViNAcZ0YVtMsXlw7rrYudSAjI MnpUiqdnjC/cNACewgTnm7R6eyx7LvxE/RZadFB22NbKxgaTyL0fJZYj9R9jd9TN IpQyfuJmIUyynYl3vRVPN6vWV2xfi6RpfTcyI1PrFHgLKsWi2hMktEbfHjdkBAZZ mKyKOTXT7I/0TWGsb+xO5wuUdVA+VPVTOFEb6QYK4ockqtwoFePo5q13QvdvlRZQ eOHrOTVwIw5VTxqCgLyTVcJRNmsyPGJQEVyoRVwxkdJQD2k830+05S1nsdBdkkRR MVddZ/gEtmb1qxS0+IxOgClkRIj2MWAtvAmnSQvVjxpsX6GQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMobnwRqUxoipyvwkppsxO8yUM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWU3NmY1YzktMTBkNS0z ZDdkLWE2NWEtNDQ3MGExMTcwNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHktVY4kAHD1tXdm9SXt92uK/u3OoSsH79yh/1DJsckYyzC8vqJrShCt AvEJCXwNUuL6Trlzyc+QlnpmcKNUE5WqKP3SBRbf+tRGbj+fmw5x6CjDQJ+ZLty7 1FKLapFferVH3TfeqooQ2blgrcSC5fEoxSCuFZzXd89PrA/Pa4vlTlIRrreGtXv2 IC0Vx8VKevR/Q0Kn5dTz94g/s1Zyc729Yh3GvVIGuwMzuIgeu0EKVS4b4RtKXJDZ hTDHZQ4HSvzrAI+mFE/6X/ieCKbAb3PSIriwXiB0UBrdDYhU2ImFSSKZo574i/m5 VLvVURx/kUbzZdDZK3rFst8Rt9w7vz0= -----END CERTIFICATE-----Generated at Sun Apr 27 15:31:42 2025 by rpki-client