$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96c2b6ac-9dae-37ab-9d54-979728d4a91b.roa File: 96c2b6ac-9dae-37ab-9d54-979728d4a91b.roa (raw, json) Hash identifier: GXXAdZNjY0h5NnSmZHkMAFPB6SQ1Adi9lV8cV8IkYZY= Subject key identifier: 8D:F1:17:E6:AE:BE:37:AF:04:F1:26:17:B8:38:22:04:A0:78:B6:04 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA021D11494D6033D5BE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96c2b6ac-9dae-37ab-9d54-979728d4a91b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:02:1d:11:49:4d:60:33:d5:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8dd153dd-7293-4c9f-b1fd-8f0737585f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:a3:6d:07:37:12:ee:a8:79:71:b3:ec:0b: 31:40:61:c6:31:e2:4b:8d:0a:e6:b8:d5:f9:0f:ce: 60:c8:a4:73:d5:a9:14:53:81:19:19:48:2b:ec:ab: f0:c7:a4:47:d5:d3:af:76:b3:87:f3:42:e6:d1:2f: 99:34:fc:aa:c2:0a:56:c2:9e:6a:42:1d:14:6d:b3: 5a:85:fc:6c:d4:45:28:6d:59:d2:15:77:f6:70:86: a5:cc:bf:96:99:89:dc:0a:3d:02:5d:6e:b7:61:4e: eb:6c:b5:a6:73:25:bb:47:eb:9a:bb:42:54:17:4f: 0c:b2:09:3e:76:6c:dc:26:ed:04:9c:76:6c:ca:4c: 54:f4:d5:83:01:42:bb:d2:cb:bc:fb:1c:38:68:4d: bc:69:83:f0:08:02:7b:9a:39:23:ea:43:6d:5e:82: ca:1e:92:50:e3:73:2f:10:98:68:62:f2:60:35:7d: fc:93:0a:db:d3:26:b6:5c:78:04:ad:39:0e:a6:97: e1:32:e0:89:cb:bb:60:d5:e8:6e:5f:44:7a:80:67: 8d:bb:41:d1:5a:02:2b:b0:89:47:2e:c8:51:e8:2c: b2:4d:9a:5e:69:81:9e:80:2c:fe:22:de:64:cf:79: 80:d3:ee:e1:91:ce:0a:a2:af:83:98:bc:e6:bd:de: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F1:17:E6:AE:BE:37:AF:04:F1:26:17:B8:38:22:04:A0:78:B6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96c2b6ac-9dae-37ab-9d54-979728d4a91b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1e:ae:0b:8b:f0:c5:04:a8:42:a4:51:12:71:ca:98:83:e9: 02:a4:41:83:5a:be:ac:bf:5d:a9:bb:1c:e5:50:40:41:cd:f6: 08:29:7e:2b:a4:95:46:ed:c4:b9:da:cc:2d:55:04:a2:84:d0: d8:4f:b1:71:63:f6:50:6c:d5:a2:7b:f3:92:44:df:15:b3:95: 64:cd:36:04:10:3a:b2:9c:9b:4f:9d:fa:39:23:03:81:8a:d3: 5c:0b:e1:fb:78:ff:3b:8f:24:08:08:b8:bd:86:0f:4b:59:aa: 34:fa:4b:f0:59:a5:13:1c:0d:1b:a1:6a:29:83:bb:5d:72:ea: 61:36:0e:b8:0a:7b:ea:34:49:62:c8:69:54:48:6c:be:72:10: 74:c1:a9:7f:de:19:86:f6:58:86:a7:2b:08:07:c2:e2:d7:81: 69:93:93:7e:0f:5c:b4:9b:6e:46:52:5c:91:ab:ba:5a:ed:1f: ec:ae:d4:42:74:d1:17:87:ce:9f:87:63:66:70:eb:eb:f4:7a: 9b:14:77:87:7d:9c:3a:1c:39:ed:46:d3:e9:f6:4f:0e:3b:cb: f9:e0:04:36:e2:67:82:80:9d:15:ea:53:6a:02:57:49:e2:92: dc:08:52:68:49:18:66:52:21:83:ef:61:46:67:6c:0e:c4:da: d6:ed:af:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugIdEUlNYDPVvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGRkMTUzZGQtNzI5My00YzlmLWIxZmQtOGYwNzM3NTg1ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotejbQc3Eu6oeXGz7AsxQGHGMeJLjQrmuNX5 D85gyKRz1akUU4EZGUgr7Kvwx6RH1dOvdrOH80Lm0S+ZNPyqwgpWwp5qQh0UbbNa hfxs1EUobVnSFXf2cIalzL+WmYncCj0CXW63YU7rbLWmcyW7R+uau0JUF08Msgk+ dmzcJu0EnHZsykxU9NWDAUK70su8+xw4aE28aYPwCAJ7mjkj6kNtXoLKHpJQ43Mv EJhoYvJgNX38kwrb0ya2XHgErTkOppfhMuCJy7tg1ehuX0R6gGeNu0HRWgIrsIlH LshR6CyyTZpeaYGegCz+It5kz3mA0+7hkc4Koq+DmLzmvd6OvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3xF+auvjevBPEmF7g4IgSgeLYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTZjMmI2YWMtOWRhZS0z N2FiLTlkNTQtOTc5NzI4ZDRhOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgerguL8MUEqEKkURJxypiD6QKkQYNavqy/Xam7HOVQQEHN9ggpfiuk lUbtxLnazC1VBKKE0NhPsXFj9lBs1aJ785JE3xWzlWTNNgQQOrKcm0+d+jkjA4GK 01wL4ft4/zuPJAgIuL2GD0tZqjT6S/BZpRMcDRuhaimDu11y6mE2DrgKe+o0SWLI aVRIbL5yEHTBqX/eGYb2WIanKwgHwuLXgWmTk34PXLSbbkZSXJGrulrtH+yu1EJ0 0ReHzp+HY2Zw6+v0epsUd4d9nDocOe1G0+n2Tw47y/ngBDbiZ4KAnRXqU2oCV0ni ktwIUmhJGGZSIYPvYUZnbA7E2tbtrzQ= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:15 2025 by rpki-client