$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/686ed97a-1958-3fbd-a158-7ffade11aff9.roa File: 686ed97a-1958-3fbd-a158-7ffade11aff9.roa (raw, json) Hash identifier: 7MmWJt0woBU6er6DqdrBT4TxTpNUYuhbRfG0yP6woY0= Subject key identifier: 52:29:61:89:80:57:F1:AA:BE:25:BB:58:2B:CA:BF:9A:80:BA:1F:92 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B0E65B1E317ED5BF0780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/686ed97a-1958-3fbd-a158-7ffade11aff9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.29.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b0:e6:5b:1e:31:7e:d5:bf:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7317123e-7e12-4788-86d9-c727e0cb7b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:72:78:62:3c:94:36:61:43:d6:95:00:fd: 75:11:fc:1e:c0:08:53:65:a4:24:08:8e:9f:ab:d0: 0b:8c:7b:89:47:99:ce:4b:60:ff:db:92:1f:50:29: fe:6a:1f:84:b8:4e:1d:b2:30:64:8b:1a:d6:ff:a0: f9:b1:1f:71:1f:62:cd:18:4c:51:e7:15:ce:48:2e: 73:68:7a:3f:4e:e1:be:c7:26:2b:1f:ef:6a:1f:28: 7e:3c:1a:e8:85:db:f4:ce:a8:ca:e1:9c:66:20:68: b4:4f:bf:f0:9d:27:9a:ba:32:7f:e2:4b:21:1f:e8: 4a:08:83:45:c5:58:85:22:68:66:7a:57:8e:20:ab: 67:70:73:09:75:2b:d6:6b:76:6e:eb:08:e2:d8:38: 2b:df:37:24:54:ba:ec:13:ed:a0:0e:3e:30:d2:10: 3d:1a:a2:c5:9d:3e:25:e8:fa:f6:95:46:98:a5:c7: a2:b5:a7:43:36:b9:8b:17:25:94:88:fb:7c:4c:34: b6:8c:c2:58:06:95:50:ff:7e:2f:b3:d8:6c:95:56: 11:4b:bb:d8:7c:a4:55:df:43:07:70:2b:0f:4c:98: 6f:02:1f:47:57:3e:b2:01:ae:48:ad:e8:57:98:60: 72:e7:79:71:69:68:16:5d:9c:25:33:b1:d0:f8:95: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:29:61:89:80:57:F1:AA:BE:25:BB:58:2B:CA:BF:9A:80:BA:1F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/686ed97a-1958-3fbd-a158-7ffade11aff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:04:66:1d:03:7c:7d:b0:0b:0c:ad:36:50:df:9c:40:9f:cc: 49:72:49:1b:1d:ff:0d:77:cf:d0:be:10:2e:72:3d:c7:63:c5: 4d:0f:19:4e:0c:dc:40:de:7b:0d:14:01:c3:3e:9b:9f:13:ff: 4f:12:98:71:22:b5:49:29:bc:59:76:9c:6a:cb:09:1d:1f:35: 15:2c:a9:f1:31:50:fb:1c:ca:0d:7c:85:91:0d:47:f4:eb:72: 72:d4:ed:14:17:94:83:14:cb:3d:b5:0f:b8:e0:88:ae:d6:55: e4:e1:35:a7:be:57:43:cf:0b:af:27:1a:07:97:34:21:a9:39: af:91:d2:4b:7b:92:73:21:b2:ef:d1:53:88:2e:d7:33:19:0d: 19:98:d7:ec:2c:77:96:ee:c3:a5:9c:c6:e5:19:2d:6a:85:15: 73:2f:89:2b:f2:1b:0e:01:fa:56:f0:10:e8:ae:bb:40:f5:8d: 88:11:df:8c:67:67:ec:66:ce:23:ed:54:e7:f5:27:ec:1f:8f: 00:64:c7:cf:f0:26:e6:7d:b7:f8:71:a1:e8:b5:52:d1:a6:1b: 23:3b:ee:bd:d2:e5:35:dd:33:11:9c:5c:9f:6e:f8:a1:60:4f: 3e:72:79:ff:ad:b1:59:a5:dc:30:f8:8b:6d:3c:57:53:a1:86: 3a:42:c1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLDmWx4xftW/B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzMxNzEyM2UtN2UxMi00Nzg4LTg2ZDktYzcyN2UwY2I3Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvpyeGI8lDZhQ9aVAP11EfwewAhTZaQkCI6f q9ALjHuJR5nOS2D/25IfUCn+ah+EuE4dsjBkixrW/6D5sR9xH2LNGExR5xXOSC5z aHo/TuG+xyYrH+9qHyh+PBrohdv0zqjK4ZxmIGi0T7/wnSeaujJ/4kshH+hKCINF xViFImhmeleOIKtncHMJdSvWa3Zu6wji2Dgr3zckVLrsE+2gDj4w0hA9GqLFnT4l 6Pr2lUaYpceitadDNrmLFyWUiPt8TDS2jMJYBpVQ/34vs9hslVYRS7vYfKRV30MH cCsPTJhvAh9HVz6yAa5IrehXmGBy53lxaWgWXZwlM7HQ+JUYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIpYYmAV/GqviW7WCvKv5qAuh+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjg2ZWQ5N2EtMTk1OC0z ZmJkLWExNTgtN2ZmYWRlMTFhZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAEZh0DfH2wCwytNlDfnECfzElySRsd/w13z9C+EC5yPcdjxU0PGU4M 3EDeew0UAcM+m58T/08SmHEitUkpvFl2nGrLCR0fNRUsqfExUPscyg18hZENR/Tr cnLU7RQXlIMUyz21D7jgiK7WVeThNae+V0PPC68nGgeXNCGpOa+R0kt7knMhsu/R U4gu1zMZDRmY1+wsd5buw6WcxuUZLWqFFXMviSvyGw4B+lbwEOiuu0D1jYgR34xn Z+xmziPtVOf1J+wfjwBkx8/wJuZ9t/hxoei1UtGmGyM77r3S5TXdMxGcXJ9u+KFg Tz5yef+tsVml3DD4i208V1OhhjpCwfE= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:35 2025 by rpki-client