$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa File: 7ddf2659-7157-340a-a60b-bc3915120be3.roa (raw, json) Hash identifier: GQiNXLY/w3ZRZynFL9gWc0hqXdyd/Pa9R2OJoL6KWRQ= Subject key identifier: 93:A4:35:8A:FC:38:EA:3A:FA:49:34:30:D9:AE:EA:9E:73:97:0B:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FF7C4F878A32558DAA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:ff:7c:4f:87:8a:32:55:8d:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=27e03dcb-aa21-4990-978c-87fc4e9b21de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:9b:6d:d9:7f:e8:8d:c7:eb:6d:34:21:5e: 22:af:2b:87:34:f3:08:1c:ec:0c:ce:6b:cf:4b:3c: cc:e9:53:3b:94:43:a1:28:e9:65:a5:55:88:35:7f: 37:8f:38:d6:10:1d:0b:62:ad:e3:81:12:f6:4a:88: 7c:ac:21:3a:70:05:04:ec:f1:20:17:4f:89:82:b1: d5:23:fb:c1:62:fc:b7:a1:af:c8:7e:32:4f:1d:d4: c0:f4:ac:8d:22:eb:28:02:cc:80:31:4f:2b:a2:c2: ae:cf:a6:a1:cc:45:bb:2b:04:c2:e8:9d:1c:0b:2d: af:56:0b:34:5a:f6:16:84:eb:88:7d:95:95:fb:53: 93:d5:40:fe:f0:3e:10:6b:bf:59:81:49:b3:d2:bf: 65:c1:12:15:39:75:91:ec:11:48:48:e1:53:a4:5a: 0b:d1:6c:ca:dc:22:0a:bd:03:e8:0a:9f:86:dc:5c: e8:b1:c9:57:00:bf:80:c3:7a:e3:6f:d3:70:5b:3f: 7d:e2:6d:0b:93:55:a4:83:a0:65:65:e8:a8:68:16: 56:86:99:c6:bb:e8:e5:51:fd:72:23:58:d7:e3:0a: af:3a:44:84:b1:22:90:4c:8d:e3:36:e7:0a:04:1b: bd:e5:6c:27:4a:01:be:a2:93:56:3e:a7:a0:d6:13: 1b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A4:35:8A:FC:38:EA:3A:FA:49:34:30:D9:AE:EA:9E:73:97:0B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:75:d7:65:49:3a:99:12:d2:64:7f:d3:7a:0c:d4:ff:dc:d3: 08:37:df:4b:60:cf:8b:21:a2:51:7f:0e:e4:a8:fd:98:be:0d: c0:0e:0a:46:0f:cf:27:2b:d7:45:3b:65:fe:37:b8:b2:2c:22: 0b:1d:bb:83:74:a1:1e:63:bb:20:b0:cf:6c:20:ed:e1:0d:e6: 77:c7:4d:42:4b:ef:54:48:6b:38:7b:28:9e:34:e7:b5:e9:8e: aa:c5:64:dc:7b:34:f2:c2:77:a5:34:de:bd:35:1f:97:a1:d9: ec:67:15:99:4b:0d:d9:60:2d:cb:43:1f:08:98:39:15:fd:f3: 66:c1:d5:27:4f:f6:6e:75:dd:0d:47:eb:de:dc:81:d9:ff:85: 1e:68:51:04:e6:e0:d7:13:46:53:3f:8b:e6:fc:7a:2a:24:19: 5b:6f:c4:9f:20:2c:ed:6f:0a:93:10:01:00:a8:cd:9f:99:51: 01:5d:08:33:e3:58:96:bb:9b:29:cf:06:58:d8:c1:39:cc:e1: f7:99:d5:37:8d:44:01:72:52:4e:94:9a:6d:af:5d:74:9d:3d: 0a:15:80:51:21:95:d0:07:6a:09:1f:6f:8a:1b:83:0f:c8:d3: 6c:c4:ab:fb:ee:76:c8:91:c8:37:27:f9:94:04:88:ae:12:e4: 76:d3:5e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf98T4eKMlWNqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjdlMDNkY2ItYWEyMS00OTkwLTk3OGMtODdmYzRlOWIyMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuGbbdl/6I3H6200IV4iryuHNPMIHOwMzmvP SzzM6VM7lEOhKOllpVWINX83jzjWEB0LYq3jgRL2Soh8rCE6cAUE7PEgF0+JgrHV I/vBYvy3oa/IfjJPHdTA9KyNIusoAsyAMU8rosKuz6ahzEW7KwTC6J0cCy2vVgs0 WvYWhOuIfZWV+1OT1UD+8D4Qa79ZgUmz0r9lwRIVOXWR7BFISOFTpFoL0WzK3CIK vQPoCp+G3FzosclXAL+Aw3rjb9NwWz994m0Lk1Wkg6BlZeioaBZWhpnGu+jlUf1y I1jX4wqvOkSEsSKQTI3jNucKBBu95WwnSgG+opNWPqeg1hMbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOkNYr8OOo6+kk0MNmu6p5zlwsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2RkZjI2NTktNzE1Ny0z NDBhLWE2MGItYmMzOTE1MTIwYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1112VJOpkS0mR/03oM1P/c0wg330tgz4sholF/DuSo/Zi+DcAOCkYP zycr10U7Zf43uLIsIgsdu4N0oR5juyCwz2wg7eEN5nfHTUJL71RIazh7KJ4057Xp jqrFZNx7NPLCd6U03r01H5eh2exnFZlLDdlgLctDHwiYORX982bB1SdP9m513Q1H 697cgdn/hR5oUQTm4NcTRlM/i+b8eiokGVtvxJ8gLO1vCpMQAQCozZ+ZUQFdCDPj WJa7mynPBljYwTnM4feZ1TeNRAFyUk6Umm2vXXSdPQoVgFEhldAHagkfb4obgw/I 02zEq/vudsiRyDcn+ZQEiK4S5HbTXi0= -----END CERTIFICATE-----Generated at Sun Apr 27 17:53:37 2025 by rpki-client