$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa File: 708766bd-dad8-31a3-a3ad-c837a0328717.roa (raw, json) Hash identifier: UVwR9ah2IiN6LyH1IQRRrhv02Kd6xIFGC7X61hLp084= Subject key identifier: BE:B7:62:49:80:F2:A1:FD:14:80:28:19:F5:E6:04:06:2F:A0:F1:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDDF9644ED716587848A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa Signing time: Thu 24 Apr 2025 11:53:47 +0000 ROA not before: Thu 24 Apr 2025 11:53:47 +0000 ROA not after: Wed 23 Jul 2025 11:53:47 +0000 asID: 19905 IP address blocks: 173.29.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:df:96:44:ed:71:65:87:84:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:47 2025 GMT Not After : Jul 23 11:53:47 2025 GMT Subject: CN=78ffe6fa-0f3a-49b4-bdf1-df7edd8d4f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:3d:61:bd:4a:70:e2:05:c5:b0:64:91:cf: b6:3d:66:0d:73:88:6f:00:af:90:5c:4a:97:c9:5e: 41:18:fa:f8:d5:30:cd:3a:1b:5a:2e:51:03:75:ca: 9e:3a:76:6a:cc:12:46:d2:e8:2e:8d:f1:20:38:ac: 0d:cf:4a:86:e6:08:06:68:91:d9:ad:ad:99:38:72: 61:97:81:0e:6f:97:c1:88:eb:4d:a6:d8:b0:00:8f: 6e:41:86:a9:8b:5a:08:fb:4a:89:cf:87:d5:b3:16: 8e:60:98:bb:8b:07:88:8e:c9:0f:79:00:3b:7c:74: 49:40:34:46:b0:24:e9:25:92:13:d8:8b:6e:c3:f5: 44:28:3b:ec:1b:6c:2c:c3:1b:90:6c:c5:9f:9e:46: f8:72:14:8e:6f:d5:ed:3d:6d:5e:d0:58:6c:8e:f4: 6f:33:cb:70:7a:7a:8f:f3:7a:65:ac:29:de:8d:cc: 94:e3:59:b5:fe:08:c3:81:4c:f0:a6:49:51:ff:e0: 1b:ed:af:c2:04:dc:45:89:3e:18:49:30:cd:00:57: 6a:f5:ad:0b:1f:37:f4:9d:76:b2:5a:3e:37:ad:ec: 5c:20:37:be:2c:45:9a:91:53:76:44:fa:9c:97:bc: a8:d3:ac:73:6a:59:63:dc:f3:32:4b:36:aa:4a:e1: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:62:49:80:F2:A1:FD:14:80:28:19:F5:E6:04:06:2F:A0:F1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7c:71:30:64:1d:ef:96:6a:fe:f7:4c:66:d6:e7:9b:86:96: 41:27:45:d7:04:77:20:14:9a:c4:39:cc:a6:07:c6:2d:77:e1: d5:47:10:36:4f:d1:39:35:68:b8:09:f8:95:fd:f0:1a:95:39: 27:5a:16:de:71:be:c3:0d:a4:74:49:e8:2f:cf:cb:85:55:31: 6a:f0:9e:d0:ee:34:c9:b2:db:9c:2e:ab:7c:84:84:c0:14:ac: f1:18:ed:d2:21:ba:3f:c1:91:40:e5:ab:d7:9a:0e:8e:35:c0: 2e:cd:d3:a6:0f:73:0a:96:c5:98:d1:0d:5d:03:13:c0:20:18: 0c:7f:40:3d:cb:0a:de:b5:79:a8:48:3f:75:93:47:50:ef:c7: f3:26:2f:b5:6b:3a:5b:b7:21:38:cd:9b:fc:db:31:9a:a4:23: 08:20:3c:2c:e8:2f:85:1d:25:c7:d3:c5:31:be:07:0b:b7:07: 79:3f:73:a0:af:f7:97:12:4e:b4:c9:f8:80:60:80:41:0f:5d: 11:ca:c3:70:50:7b:12:07:96:3e:74:14:4b:7e:34:eb:1d:de: 0f:5d:6c:78:72:84:73:7c:e8:48:bf:8b:4e:39:5f:98:01:06: 2a:e0:6b:86:32:61:f9:b6:38:15:ce:da:d2:59:fc:5c:e7:48: 74:9e:0e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzd+WRO1xZYeEigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTM0N1oXDTI1MDcyMzExNTM0N1owLzEtMCsGA1UEAxMk NzhmZmU2ZmEtMGYzYS00OWI0LWJkZjEtZGY3ZWRkOGQ0ZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2E9Yb1KcOIFxbBkkc+2PWYNc4hvAK+QXEqX yV5BGPr41TDNOhtaLlEDdcqeOnZqzBJG0ugujfEgOKwNz0qG5ggGaJHZra2ZOHJh l4EOb5fBiOtNptiwAI9uQYapi1oI+0qJz4fVsxaOYJi7iweIjskPeQA7fHRJQDRG sCTpJZIT2Ituw/VEKDvsG2wswxuQbMWfnkb4chSOb9XtPW1e0FhsjvRvM8twenqP 83plrCnejcyU41m1/gjDgUzwpklR/+Ab7a/CBNxFiT4YSTDNAFdq9a0LHzf0nXay Wj43rexcIDe+LEWakVN2RPqcl7yo06xzallj3PMySzaqSuFyPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL63YkmA8qH9FIAoGfXmBAYvoPGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzA4NzY2YmQtZGFkOC0z MWEzLWEzYWQtYzgzN2EwMzI4NzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF8cTBkHe+Wav73TGbW55uGlkEnRdcEdyAUmsQ5zKYHxi134dVHEDZP 0Tk1aLgJ+JX98BqVOSdaFt5xvsMNpHRJ6C/Py4VVMWrwntDuNMmy25wuq3yEhMAU rPEY7dIhuj/BkUDlq9eaDo41wC7N06YPcwqWxZjRDV0DE8AgGAx/QD3LCt61eahI P3WTR1Dvx/MmL7VrOlu3ITjNm/zbMZqkIwggPCzoL4UdJcfTxTG+Bwu3B3k/c6Cv 95cSTrTJ+IBggEEPXRHKw3BQexIHlj50FEt+NOsd3g9dbHhyhHN86Ei/i045X5gB Birga4YyYfm2OBXO2tJZ/FznSHSeDtU= -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:23 2025 by rpki-client