$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa File: 4f7646bc-6592-3cd5-9347-184e8785764e.roa (raw, json) Hash identifier: X4B513X4SPDaiBnfS4cfMlq246kwVz3O9MeW0J51NHU= Subject key identifier: 86:8C:38:E4:DF:1A:91:73:6D:10:85:9E:E0:4F:2F:FD:59:06:CE:82 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2614C10B9C13168F2EA2E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa Signing time: Mon 03 Feb 2025 11:09:45 +0000 ROA not before: Mon 03 Feb 2025 11:09:45 +0000 ROA not after: Sun 04 May 2025 10:09:45 +0000 asID: 30036 IP address blocks: 173.29.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:61:4c:10:b9:c1:31:68:f2:ea:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:09:45 2025 GMT Not After : May 4 10:09:45 2025 GMT Subject: CN=6486a846-4377-491e-8421-156008aee9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:39:d5:43:95:c1:f0:bb:d0:d1:84:d9:06:10: c1:7b:f2:52:e3:fd:c5:1b:7b:ca:88:f6:37:e5:ec: 1c:3c:d5:c7:b4:74:99:19:79:db:49:47:3d:e7:bf: 33:c9:d3:b2:6f:13:d8:14:c6:06:9d:41:82:f7:89: 9e:d6:fb:71:7b:27:2a:f7:14:58:f0:de:64:b1:aa: 94:a5:e5:1c:9e:96:e6:4d:95:28:70:e6:8a:7a:1c: c9:79:80:00:f4:95:26:8f:ae:8f:6f:78:99:67:4b: c2:17:a4:96:45:7f:a0:9a:66:79:6a:5b:a6:e9:da: c1:46:5a:5a:83:25:ec:bf:cd:3a:ab:d5:16:93:30: ad:11:a6:f7:d6:b5:53:22:4e:b1:5c:32:bc:14:3d: b6:db:47:37:bf:40:6f:9c:d2:d4:8a:2d:70:7c:59: 4a:d2:65:9d:c0:ac:e7:b1:18:96:05:23:c2:4e:14: b0:42:a2:b8:15:81:14:0b:2b:a4:d9:7b:9a:40:b3: 45:8a:78:17:a6:92:93:d3:d1:0b:61:c6:0f:e1:b7: ea:52:37:88:b0:40:45:15:7a:32:fd:6e:38:fb:f8: 1a:94:17:35:65:b2:07:90:c1:7a:c7:93:48:a1:1c: b7:29:6c:93:73:2f:8d:a3:a6:26:24:96:f3:8f:f0: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8C:38:E4:DF:1A:91:73:6D:10:85:9E:E0:4F:2F:FD:59:06:CE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0d:f6:a1:2f:78:19:2b:00:4f:1e:19:bd:04:87:e6:16:9f: 38:fc:d3:ac:8b:fc:79:31:d1:5c:2f:c5:8c:43:c8:40:71:7c: e9:57:e6:6c:31:11:02:1c:df:cf:c7:58:b3:ef:9d:7b:a0:67: cf:13:0d:e2:83:0d:3f:3a:52:84:04:20:1a:68:fb:98:4f:91: 4a:57:58:7b:bb:56:b6:e9:d1:60:42:ef:77:80:e5:6e:f0:1e: 20:a0:49:75:8e:43:68:21:79:da:c1:e4:e9:9a:86:70:08:e4: 84:b1:d2:99:16:04:5e:9b:8c:0c:f5:fd:fc:31:00:f4:9f:a2: 7e:12:d3:f5:d9:a1:e4:77:63:9a:86:7c:f3:3d:1b:af:d2:69: d0:76:6f:1a:95:e6:7b:03:41:a6:c9:82:ec:b3:86:bb:2c:4f: ce:d0:1f:61:c4:60:cd:31:bd:1a:b3:88:3d:5e:8a:c1:11:4d: c3:ac:c7:ca:1a:70:35:6b:d6:64:68:79:79:16:a3:83:6e:da: 2e:29:d4:a0:00:81:01:1a:ed:b9:5b:b8:30:ac:1e:c3:54:b3: fa:92:4b:66:39:25:4b:b9:f8:2d:09:d0:b5:2f:11:5a:19:86: c9:20:1e:74:0a:89:de:66:9d:0a:4f:af:c0:d1:7f:44:52:4c: 54:ee:43:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYUwQucExaPLqLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDk0NVoXDTI1MDUwNDEwMDk0NVowLzEtMCsGA1UEAxMk NjQ4NmE4NDYtNDM3Ny00OTFlLTg0MjEtMTU2MDA4YWVlOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjnVQ5XB8LvQ0YTZBhDBe/JS4/3FG3vKiPY3 5ewcPNXHtHSZGXnbSUc9578zydOybxPYFMYGnUGC94me1vtxeycq9xRY8N5ksaqU peUcnpbmTZUocOaKehzJeYAA9JUmj66Pb3iZZ0vCF6SWRX+gmmZ5alum6drBRlpa gyXsv806q9UWkzCtEab31rVTIk6xXDK8FD2220c3v0BvnNLUii1wfFlK0mWdwKzn sRiWBSPCThSwQqK4FYEUCyuk2XuaQLNFingXppKT09ELYcYP4bfqUjeIsEBFFXoy /W44+/galBc1ZbIHkMF6x5NIoRy3KWyTcy+No6YmJJbzj/BYXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaMOOTfGpFzbRCFnuBPL/1ZBs6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY3NjQ2YmMtNjU5Mi0z Y2Q1LTkzNDctMTg0ZTg3ODU3NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUN9qEveBkrAE8eGb0Eh+YWnzj806yL/Hkx0VwvxYxDyEBxfOlX5mwx EQIc38/HWLPvnXugZ88TDeKDDT86UoQEIBpo+5hPkUpXWHu7Vrbp0WBC73eA5W7w HiCgSXWOQ2ghedrB5OmahnAI5ISx0pkWBF6bjAz1/fwxAPSfon4S0/XZoeR3Y5qG fPM9G6/SadB2bxqV5nsDQabJguyzhrssT87QH2HEYM0xvRqziD1eisERTcOsx8oa cDVr1mRoeXkWo4Nu2i4p1KAAgQEa7blbuDCsHsNUs/qSS2Y5JUu5+C0J0LUvEVoZ hskgHnQKid5mnQpPr8DRf0RSTFTuQ5o= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:11 2025 by rpki-client