$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8bd25f9-97e2-3378-ac62-863448d1823b.roa File: b8bd25f9-97e2-3378-ac62-863448d1823b.roa (raw, json) Hash identifier: 16mJSSTg0p+Bh/qHO2ZSL7MeEaoHVaYNrqAdTo71d6s= Subject key identifier: 67:84:ED:7E:9C:0E:5E:B5:75:F2:68:DF:37:7A:7D:97:11:24:FC:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1E514F20E954C4AF8580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8bd25f9-97e2-3378-ac62-863448d1823b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1e:51:4f:20:e9:54:c4:af:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2d75184f-ad0d-4e69-9dd6-7543b48cca00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:19:51:07:91:ec:37:19:ee:67:2f:06:1b: f0:e4:0b:31:b1:34:b8:4f:e2:93:55:2a:45:8b:32: ac:7a:aa:b3:1f:19:75:aa:01:80:b0:ca:99:fc:43: 02:ba:98:b4:50:30:93:a7:7e:18:94:4d:7b:10:10: c6:79:d6:41:c1:0e:ac:e2:1d:f9:6d:19:36:09:f9: 52:20:54:a5:d0:52:c1:52:f8:c2:f1:2d:55:a7:eb: dd:ee:28:a8:53:7b:96:f6:15:77:d8:69:b5:0c:7d: 4d:e9:85:b6:40:55:6e:dc:8f:7a:84:d0:c2:fc:f5: 44:42:82:68:cf:dd:64:ee:68:48:ea:c0:47:5f:99: 96:a0:6b:e5:6f:69:3d:f4:de:3c:ba:5b:32:ba:46: 6c:7e:61:26:f4:29:81:4c:a9:43:33:9a:38:fc:95: 11:67:4f:21:21:0a:ce:10:a4:e8:3f:8a:c9:36:82: da:1a:14:2b:60:25:fb:b6:82:4d:fd:62:eb:53:d6: b1:3e:ec:c7:6e:6a:1c:97:98:57:e5:b2:94:f1:f8: 4c:26:1d:76:21:c2:e3:e9:f3:21:a2:e7:91:98:76: 10:63:fa:61:ec:54:e0:71:2c:ce:51:20:ad:83:21: 1d:f7:f1:40:f6:93:78:1f:9c:49:a3:90:ba:ea:79: e9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:84:ED:7E:9C:0E:5E:B5:75:F2:68:DF:37:7A:7D:97:11:24:FC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8bd25f9-97e2-3378-ac62-863448d1823b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:96:16:02:e2:2e:d5:80:36:42:50:65:6e:a8:77:a4:c1:0a: 35:05:a9:1d:a1:e9:e8:a6:33:03:2a:e6:a2:2d:7b:41:99:bd: 3e:f7:42:86:7c:a5:91:fd:63:21:cb:d0:b4:bd:77:77:45:1a: b8:b5:0a:c4:1a:8b:b4:71:28:a1:e1:21:67:d0:bd:91:dd:b2: 73:f6:11:4a:0c:05:38:cb:2c:2c:48:50:75:7a:51:c6:e1:b6: 48:36:64:b2:66:c2:4c:f4:9d:44:4d:44:d7:d5:e8:14:7e:e1: 96:84:9d:19:6c:a0:f2:12:d9:77:51:05:13:85:7d:37:92:34: ef:16:3a:59:64:9c:82:cb:7e:32:bd:9c:1e:e3:1d:fa:68:d7: d3:46:34:16:2f:3d:89:f7:66:ff:64:55:ab:58:d3:98:eb:1a: 17:20:c0:5b:d6:18:57:4e:54:88:0b:72:81:fa:c2:d2:ce:a4: 96:56:ae:8d:c6:61:e6:27:e7:8e:9d:d7:77:99:36:4c:e7:7a: d5:47:99:0b:1b:61:37:c5:cc:e4:ad:0a:7c:d0:96:f3:2f:5f: bd:19:62:0c:47:e6:96:ac:55:17:4a:8d:46:ff:a5:6f:0d:d6: 56:92:d3:47:e5:d6:82:ae:b8:04:12:0b:f8:9a:6e:1b:0a:31: c7:66:bb:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuh5RTyDpVMSvhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmQ3NTE4NGYtYWQwZC00ZTY5LTlkZDYtNzU0M2I0OGNjYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtsZUQeR7DcZ7mcvBhvw5AsxsTS4T+KTVSpF izKseqqzHxl1qgGAsMqZ/EMCupi0UDCTp34YlE17EBDGedZBwQ6s4h35bRk2CflS IFSl0FLBUvjC8S1Vp+vd7iioU3uW9hV32Gm1DH1N6YW2QFVu3I96hNDC/PVEQoJo z91k7mhI6sBHX5mWoGvlb2k99N48ulsyukZsfmEm9CmBTKlDM5o4/JURZ08hIQrO EKToP4rJNoLaGhQrYCX7toJN/WLrU9axPuzHbmocl5hX5bKU8fhMJh12IcLj6fMh oueRmHYQY/ph7FTgcSzOUSCtgyEd9/FA9pN4H5xJo5C66nnpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeE7X6cDl61dfJo3zd6fZcRJPyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjhiZDI1ZjktOTdlMi0z Mzc4LWFjNjItODYzNDQ4ZDE4MjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2WFgLiLtWANkJQZW6od6TBCjUFqR2h6eimMwMq5qIte0GZvT73QoZ8 pZH9YyHL0LS9d3dFGri1CsQai7RxKKHhIWfQvZHdsnP2EUoMBTjLLCxIUHV6Ucbh tkg2ZLJmwkz0nURNRNfV6BR+4ZaEnRlsoPIS2XdRBROFfTeSNO8WOllknILLfjK9 nB7jHfpo19NGNBYvPYn3Zv9kVatY05jrGhcgwFvWGFdOVIgLcoH6wtLOpJZWro3G YeYn546d13eZNkznetVHmQsbYTfFzOStCnzQlvMvX70ZYgxH5pasVRdKjUb/pW8N 1laS00fl1oKuuAQSC/iabhsKMcdmuxA= -----END CERTIFICATE-----Generated at Sun Apr 27 01:40:37 2025 by rpki-client