$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e71559e5-8e39-3179-adfa-3dc3dbbe6ca1.roa File: e71559e5-8e39-3179-adfa-3dc3dbbe6ca1.roa (raw, json) Hash identifier: 3kNUT5V0C2uMS9qsZ4C1I3L+mfk+4bzzUcdtL1emEV8= Subject key identifier: C6:FE:AA:A5:9A:DF:E6:75:54:83:D3:85:83:19:09:47:23:3A:F1:AF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA20B43972F73A4E5EEC30 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e71559e5-8e39-3179-adfa-3dc3dbbe6ca1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:20:b4:39:72:f7:3a:4e:5e:ec:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=54a1d10d-bfed-41e3-a3e4-d387b4e12ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:2d:5b:51:bc:be:03:6e:51:6c:b9:e9:93: 77:0a:b8:ed:7c:94:fa:39:cf:be:f5:09:4d:55:38: 96:e0:d9:e5:54:ae:5a:aa:23:9f:10:ef:93:85:9d: 27:22:77:01:86:29:e5:36:0c:6b:0c:c6:a6:e2:9d: 23:51:7a:05:e1:8c:74:a8:c0:c1:72:a0:6c:25:bb: af:e6:b8:be:8e:41:d7:eb:16:f4:23:c4:c2:3a:5b: 5c:cb:59:20:0e:b3:9a:cf:bd:7b:9f:07:9c:7b:ea: ad:a2:6e:0c:34:fc:73:46:de:e6:65:e7:cc:9f:ad: c4:c8:d6:91:80:bd:65:07:78:1c:a4:5f:24:17:1f: 8f:09:3f:94:bf:a1:b8:56:9a:63:94:f5:58:b7:4b: c0:15:3e:5b:78:16:bb:f6:8b:d9:23:3d:ef:9e:8c: 06:90:0a:91:64:b6:a7:13:a2:0c:0f:4e:66:79:69: 46:2c:f1:b8:45:fe:e9:89:80:0f:4a:e8:85:04:1e: 26:e3:3e:10:68:68:3d:09:d7:8d:2f:00:59:66:f6: 20:f7:6e:84:4c:18:93:8c:04:9e:01:24:d7:26:bf: 91:5b:ff:ec:29:86:ed:65:0d:d8:24:61:b2:5b:1b: af:b6:72:92:9d:c2:fc:90:8b:a2:b6:80:0d:51:3b: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:AA:A5:9A:DF:E6:75:54:83:D3:85:83:19:09:47:23:3A:F1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e71559e5-8e39-3179-adfa-3dc3dbbe6ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b8:72:f1:12:7a:ed:c6:fe:75:5e:84:32:60:ec:c3:d5:92: a1:9f:ef:51:ac:6d:98:8f:11:dd:11:01:36:6a:a2:2e:a1:fb: 6a:c5:65:3d:80:98:bc:20:6a:b3:4f:1a:55:b8:53:23:bc:04: 3b:1d:10:98:22:3a:04:45:c4:c0:bb:44:f9:81:6c:3d:bd:96: 17:21:c3:23:62:5d:2f:bd:30:9b:46:0a:4e:03:8e:af:cd:eb: 13:e7:28:59:1c:fc:ca:c5:a3:4e:58:8b:c9:f9:05:10:d1:5a: 25:5d:1d:d2:30:f1:df:13:c9:0a:7c:47:36:df:e3:df:f5:ae: 28:8b:1a:c1:3a:d7:76:d0:e2:87:c7:ce:a4:84:52:80:3c:cb: 75:be:34:a4:6d:9e:ab:6e:e9:d7:17:d9:1b:ab:c9:59:af:ee: 27:08:33:98:4b:c2:b8:0a:48:92:91:45:1e:84:c6:33:c6:74: 46:7b:c6:04:05:ef:f7:50:fd:b5:53:ff:4e:67:b2:b3:9f:4e: 2b:40:28:96:df:1c:78:75:71:fa:29:a1:3d:40:49:39:22:23: 1a:ce:a6:ee:3e:c5:ea:7b:a5:94:3b:45:c3:c2:a7:bf:ed:f1: b7:88:f3:c2:a1:24:05:47:88:5c:af:47:75:88:c6:fe:5b:93: 94:63:70:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuiC0OXL3Ok5e7DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTRhMWQxMGQtYmZlZC00MWUzLWEzZTQtZDM4N2I0ZTEyZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbstW1G8vgNuUWy56ZN3CrjtfJT6Oc++9QlN VTiW4NnlVK5aqiOfEO+ThZ0nIncBhinlNgxrDMam4p0jUXoF4Yx0qMDBcqBsJbuv 5ri+jkHX6xb0I8TCOltcy1kgDrOaz717nwece+qtom4MNPxzRt7mZefMn63EyNaR gL1lB3gcpF8kFx+PCT+Uv6G4VppjlPVYt0vAFT5beBa79ovZIz3vnowGkAqRZLan E6IMD05meWlGLPG4Rf7piYAPSuiFBB4m4z4QaGg9CdeNLwBZZvYg926ETBiTjASe ASTXJr+RW//sKYbtZQ3YJGGyWxuvtnKSncL8kIuitoANUTv3eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb+qqWa3+Z1VIPThYMZCUcjOvGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTcxNTU5ZTUtOGUzOS0z MTc5LWFkZmEtM2RjM2RiYmU2Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu4cvESeu3G/nVehDJg7MPVkqGf71GsbZiPEd0RATZqoi6h+2rFZT2A mLwgarNPGlW4UyO8BDsdEJgiOgRFxMC7RPmBbD29lhchwyNiXS+9MJtGCk4Djq/N 6xPnKFkc/MrFo05Yi8n5BRDRWiVdHdIw8d8TyQp8Rzbf49/1riiLGsE613bQ4ofH zqSEUoA8y3W+NKRtnqtu6dcX2RuryVmv7icIM5hLwrgKSJKRRR6ExjPGdEZ7xgQF 7/dQ/bVT/05nsrOfTitAKJbfHHh1cfopoT1ASTkiIxrOpu4+xep7pZQ7RcPCp7/t 8beI88KhJAVHiFyvR3WIxv5bk5RjcOM= -----END CERTIFICATE-----Generated at Sun Apr 27 02:57:55 2025 by rpki-client