$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea8f4b44-c908-382f-aae1-a007d870719d.roa File: ea8f4b44-c908-382f-aae1-a007d870719d.roa (raw, json) Hash identifier: x59WzwklkYV7kJppBYRHHd0ZJD0QclQqT6M5JcNliDA= Subject key identifier: F1:36:A9:2B:D0:BA:99:27:03:F5:BA:0E:CE:C4:D4:8B:50:C0:37:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA18B288C1BDA3857CF85E Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea8f4b44-c908-382f-aae1-a007d870719d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:18:b2:88:c1:bd:a3:85:7c:f8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=386cd0c7-0795-4d7b-8041-d21c9353a8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:e7:b9:76:b6:9e:ec:cb:20:a8:4e:6d:93: a3:56:a7:8c:dc:bc:b8:0e:2b:c3:3f:ac:53:03:d8: 92:d1:73:53:f9:74:84:79:30:c6:1c:87:77:1e:47: 6b:08:a8:af:c1:03:9b:34:68:59:8e:02:2c:fa:30: 63:df:44:2f:40:17:f1:7f:28:d6:ef:86:ff:29:23: 71:fc:d9:29:02:0e:b7:9c:dc:44:7c:f2:ac:e0:92: d8:76:5a:93:08:c1:9e:77:e7:ca:c1:cc:43:6a:aa: 8b:f1:49:1c:a7:8f:03:4a:d3:9e:52:6e:21:21:2a: 4e:cc:53:be:53:a6:36:41:1e:44:06:c7:c5:96:d2: d5:bc:bc:5a:1e:a0:65:18:89:0b:62:a2:ae:df:b0: a4:a6:45:3c:4e:b6:85:d1:ea:8a:c5:a5:2b:f0:9c: 77:cd:ca:c4:8a:37:e5:5b:66:95:8b:91:68:f7:06: d1:24:1d:8d:40:43:dc:28:7c:53:06:a6:c7:8b:ac: ae:93:7d:e7:9a:52:fd:95:e1:ca:c1:23:58:ad:35: 80:48:86:62:19:52:86:e0:2d:f1:c5:4e:0a:08:6e: 8c:5d:b7:52:ee:a0:c8:ee:f0:bd:84:31:e6:06:e8: ff:cd:75:4d:cf:a3:24:4e:e8:f5:fd:40:fc:dc:27: 4f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:36:A9:2B:D0:BA:99:27:03:F5:BA:0E:CE:C4:D4:8B:50:C0:37:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea8f4b44-c908-382f-aae1-a007d870719d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a9:3e:89:4f:bc:f1:70:78:cf:dd:f4:a9:e0:2c:6d:2e:34: ff:c1:5e:fa:cf:3c:ad:20:7c:ad:6b:50:57:d9:90:7b:7e:91: 2e:a9:87:1c:05:c2:b3:dc:1a:01:82:b6:e5:ac:cb:6b:f0:d5: 0e:46:73:34:1c:35:b1:58:7a:9f:86:81:a6:7c:47:20:46:96: 20:30:3a:5a:0a:36:6c:83:15:17:7f:58:43:f3:52:b2:ff:9a: 1e:4d:95:34:36:fc:18:38:11:de:0d:a3:35:38:59:e9:e1:3e: cd:7a:2f:30:de:33:16:91:ff:5d:34:bb:b3:80:d2:ef:d6:3d: 5a:8d:61:0c:44:d3:ce:15:ca:4e:6a:c3:9c:92:db:32:d7:34: 80:02:65:1d:79:f3:4d:46:de:b0:80:af:41:ec:f4:33:9f:a9: 77:1d:ff:4b:d8:72:06:32:6e:2d:bc:2f:d3:89:c8:92:22:29: 4e:23:78:e4:af:44:ca:76:e8:de:88:0c:9f:93:b8:a3:56:ba: e6:af:50:14:b5:c8:c1:85:86:1d:0f:ee:ab:aa:08:ef:d2:5a: 5b:36:67:77:08:36:f3:8b:55:e1:99:10:63:fd:75:f6:0b:07: d6:50:9c:f2:19:48:b9:c2:0e:30:c7:91:44:88:2e:d2:08:69: 22:9d:55:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhiyiMG9o4V8+F4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Mzg2Y2QwYzctMDc5NS00ZDdiLTgwNDEtZDIxYzkzNTNhOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApePnuXa2nuzLIKhObZOjVqeM3Ly4DivDP6xT A9iS0XNT+XSEeTDGHId3HkdrCKivwQObNGhZjgIs+jBj30QvQBfxfyjW74b/KSNx /NkpAg63nNxEfPKs4JLYdlqTCMGed+fKwcxDaqqL8Ukcp48DStOeUm4hISpOzFO+ U6Y2QR5EBsfFltLVvLxaHqBlGIkLYqKu37CkpkU8TraF0eqKxaUr8Jx3zcrEijfl W2aVi5Fo9wbRJB2NQEPcKHxTBqbHi6yuk33nmlL9leHKwSNYrTWASIZiGVKG4C3x xU4KCG6MXbdS7qDI7vC9hDHmBuj/zXVNz6MkTuj1/UD83CdPLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE2qSvQupknA/W6Ds7E1ItQwDf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWE4ZjRiNDQtYzkwOC0z ODJmLWFhZTEtYTAwN2Q4NzA3MTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSpPolPvPFweM/d9KngLG0uNP/BXvrPPK0gfK1rUFfZkHt+kS6phxwF wrPcGgGCtuWsy2vw1Q5GczQcNbFYep+GgaZ8RyBGliAwOloKNmyDFRd/WEPzUrL/ mh5NlTQ2/Bg4Ed4NozU4WenhPs16LzDeMxaR/100u7OA0u/WPVqNYQxE084Vyk5q w5yS2zLXNIACZR15801G3rCAr0Hs9DOfqXcd/0vYcgYybi28L9OJyJIiKU4jeOSv RMp26N6IDJ+TuKNWuuavUBS1yMGFhh0P7quqCO/SWls2Z3cINvOLVeGZEGP9dfYL B9ZQnPIZSLnCDjDHkUSILtIIaSKdVUc= -----END CERTIFICATE-----Generated at Sat Apr 26 21:43:09 2025 by rpki-client