$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f0914d35-e41c-3df1-b5a0-12d55900b0ba.roa File: f0914d35-e41c-3df1-b5a0-12d55900b0ba.roa (raw, json) Hash identifier: j3LAIdTOLOCUUlPT/04eX8sEShdfT7i/JR4sJwpu2os= Subject key identifier: 33:6A:09:B9:15:62:52:1E:F9:FA:46:DF:BA:1D:C3:F9:85:DF:8F:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A3144922E16877B02EC49CE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f0914d35-e41c-3df1-b5a0-12d55900b0ba.roa Signing time: Thu 24 Apr 2025 22:51:28 +0000 ROA not before: Thu 24 Apr 2025 22:51:28 +0000 ROA not after: Wed 23 Jul 2025 22:51:28 +0000 asID: 30036 IP address blocks: 173.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:14:49:22:e1:68:77:b0:2e:c4:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 22:51:28 2025 GMT Not After : Jul 23 22:51:28 2025 GMT Subject: CN=517f7682-d6f2-400e-8c8f-b351ca4f7e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:ef:1a:6b:fe:0e:2e:a5:93:78:70:a1:56: 12:a8:08:3a:ff:a3:c8:64:80:e6:a5:7c:30:5d:04: d8:4a:08:70:9f:be:bb:0c:87:19:a9:57:5e:89:55: d6:ad:c6:16:63:bd:2f:5f:37:d6:2c:32:d4:64:37: 32:62:b3:67:a2:13:99:0e:23:1d:95:bf:f3:0d:75: b0:52:f0:e7:7e:df:9b:c3:01:c3:22:b6:57:aa:b8: 00:ea:42:80:9b:e8:a7:6f:a8:4f:45:de:45:ef:e3: a6:2d:3f:c6:63:5b:f4:39:88:a0:2f:15:40:a0:5e: 39:cd:33:f5:7e:7d:5e:e3:3d:45:87:17:67:df:96: 8c:9f:ba:2c:49:60:1e:cf:b6:5b:7e:ce:f8:ff:cc: ba:a0:55:2c:53:da:0e:6c:d1:b7:2b:cb:9a:c5:86: 12:e5:01:58:a3:e6:af:a6:8c:e1:a2:e7:e8:82:7c: 17:fc:9f:ad:80:0a:fb:41:67:bf:44:22:75:c0:6f: 49:36:9f:af:35:b8:54:7c:77:3e:19:36:de:af:fc: db:48:fc:9e:b7:f5:26:a2:29:a3:1e:be:54:80:31: 94:8a:1c:b9:a4:71:8b:fd:d5:42:15:cf:4d:32:d6: 3b:f8:da:6b:c3:78:c5:2c:29:f4:60:68:36:f0:27: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6A:09:B9:15:62:52:1E:F9:FA:46:DF:BA:1D:C3:F9:85:DF:8F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f0914d35-e41c-3df1-b5a0-12d55900b0ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c8:c8:63:52:c3:05:a5:9a:87:ae:b7:8d:dd:7b:7a:88:43: 42:0a:48:38:bf:aa:90:aa:26:65:e6:48:38:31:e4:b8:85:c8: 4e:f3:93:f4:f0:be:96:56:22:55:29:a7:36:2f:2f:5d:b9:fc: c2:48:5a:17:d4:d0:24:08:dc:52:34:a2:0a:24:14:ac:0e:50: df:93:e0:19:4d:71:32:ff:c0:1f:3f:5a:5d:0f:40:0f:85:fa: de:96:37:01:57:d2:6a:f6:d0:a3:54:9e:c2:4e:94:ca:66:f4: c1:2d:ff:c1:3c:e3:1a:7c:29:93:34:97:9f:75:6f:db:ba:1d: 6c:78:b0:59:91:06:bb:9b:4b:03:2b:a2:42:2a:93:71:91:05: da:34:f4:9d:9a:73:40:d1:e8:bc:2f:a7:e9:99:c6:bf:c6:b6: 69:98:12:12:41:e5:63:f7:77:44:31:6e:35:d7:07:84:ed:2b: 29:06:49:00:a7:f7:2b:19:a1:27:1d:63:c6:85:8a:60:e9:54: 3d:77:2d:4b:35:90:66:2a:7a:00:ec:08:d5:11:10:c7:9e:9f: e1:54:52:da:ad:cf:e0:b6:20:73:5b:af:c2:86:c4:b8:f8:e7: c3:28:b8:50:f2:6b:39:bf:73:6c:a2:e9:7d:f8:12:ee:62:77: da:a2:ed:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjFEki4Wh3sC7EnOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDIyNTEyOFoXDTI1MDcyMzIyNTEyOFowLzEtMCsGA1UEAxMk NTE3Zjc2ODItZDZmMi00MDBlLThjOGYtYjM1MWNhNGY3ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjnvGmv+Di6lk3hwoVYSqAg6/6PIZIDmpXww XQTYSghwn767DIcZqVdeiVXWrcYWY70vXzfWLDLUZDcyYrNnohOZDiMdlb/zDXWw UvDnft+bwwHDIrZXqrgA6kKAm+inb6hPRd5F7+OmLT/GY1v0OYigLxVAoF45zTP1 fn1e4z1Fhxdn35aMn7osSWAez7Zbfs74/8y6oFUsU9oObNG3K8uaxYYS5QFYo+av pozhoufognwX/J+tgAr7QWe/RCJ1wG9JNp+vNbhUfHc+GTber/zbSPyet/Umoimj Hr5UgDGUihy5pHGL/dVCFc9NMtY7+Nprw3jFLCn0YGg28CczKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNqCbkVYlIe+fpG37odw/mF3484MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjA5MTRkMzUtZTQxYy0z ZGYxLWI1YTAtMTJkNTU5MDBiMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/IyGNSwwWlmoeut43de3qIQ0IKSDi/qpCqJmXmSDgx5LiFyE7zk/Tw vpZWIlUppzYvL125/MJIWhfU0CQI3FI0ogokFKwOUN+T4BlNcTL/wB8/Wl0PQA+F +t6WNwFX0mr20KNUnsJOlMpm9MEt/8E84xp8KZM0l591b9u6HWx4sFmRBrubSwMr okIqk3GRBdo09J2ac0DR6Lwvp+mZxr/GtmmYEhJB5WP3d0QxbjXXB4TtKykGSQCn 9ysZoScdY8aFimDpVD13LUs1kGYqegDsCNUREMeen+FUUtqtz+C2IHNbr8KGxLj4 58MouFDyazm/c2yi6X34Eu5id9qi7XA= -----END CERTIFICATE-----Generated at Sun Apr 27 17:15:08 2025 by rpki-client