$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64161a67-5185-3656-b3f8-a68db923de30.roa File: 64161a67-5185-3656-b3f8-a68db923de30.roa (raw, json) Hash identifier: ENefFOLiPGbFSGtuKKhr3sRzNy7ij5GSO1/u6mjsHEg= Subject key identifier: 59:16:DA:FF:A8:AF:22:C5:E6:18:48:63:E5:6C:36:B9:99:11:1C:14 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57768DE8983D4BEB6F16800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64161a67-5185-3656-b3f8-a68db923de30.roa Signing time: Tue 04 Feb 2025 13:41:44 +0000 ROA not before: Tue 04 Feb 2025 13:41:44 +0000 ROA not after: Mon 05 May 2025 12:41:44 +0000 asID: 30036 IP address blocks: 173.29.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:68:de:89:83:d4:be:b6:f1:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:41:44 2025 GMT Not After : May 5 12:41:44 2025 GMT Subject: CN=8bd900cf-4cfe-4149-9851-aed2319c0af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:01:11:40:38:26:fa:2b:7c:54:e1:dd:c6: 47:35:65:6b:c9:1c:e2:23:10:a4:96:63:33:a2:95: 54:00:ff:fc:6a:a3:92:64:ce:ad:9d:2d:cc:f9:04: 56:f5:67:2a:fa:b4:2d:7f:42:cf:04:c9:a7:14:82: 17:da:45:90:57:d5:a0:36:7d:30:4f:d4:dd:56:cb: ce:c4:e1:26:92:66:56:27:d2:93:dd:77:00:cc:95: d8:84:f6:9a:78:c9:aa:dd:c8:34:36:2f:87:99:e4: 3b:5e:b2:f4:8b:90:d2:24:cf:30:bb:2e:80:64:4c: 12:5e:0d:d9:bd:ec:ac:d0:49:1c:b1:13:c8:16:d2: 51:7e:c6:cf:03:81:d0:5c:67:fa:a8:66:9a:3a:5a: e9:33:a9:ea:0d:cc:67:b4:13:e1:14:e6:4b:cd:42: 11:d7:25:b9:1a:9f:b4:3e:73:3a:cf:6c:69:ac:ca: 8d:1d:db:5d:ac:18:21:c3:41:13:39:c4:e3:c1:4e: cc:f8:c1:bd:ad:5f:85:fd:cc:5f:ee:ad:06:2b:8f: 79:1c:7f:7d:b6:10:cf:d8:3d:14:c7:55:38:28:a8: a1:fa:db:9e:3f:30:c2:15:45:a0:bc:b9:0b:26:4b: 59:08:57:be:cf:c7:8e:b2:14:e2:54:0d:03:85:68: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:16:DA:FF:A8:AF:22:C5:E6:18:48:63:E5:6C:36:B9:99:11:1C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64161a67-5185-3656-b3f8-a68db923de30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:6f:a9:39:b1:82:39:9d:d6:7c:e9:93:33:da:51:dc:09:61: 68:66:d3:2f:10:82:f4:f6:43:93:de:ea:a1:f4:b0:11:da:06: 71:5d:d4:33:41:25:1c:71:de:26:06:07:2e:31:1b:3f:fd:5a: ca:32:ab:2b:ff:4e:8e:4c:fb:e6:7f:c4:49:de:69:d2:d5:64: 95:ef:3a:d4:b6:79:04:84:79:00:38:4a:2f:85:61:a8:cd:51: bf:bd:71:53:fc:b3:20:7f:b8:77:25:32:97:39:6e:f2:03:f1: dc:95:d0:4a:0c:9f:f5:fa:ec:70:ff:dd:b4:12:14:7f:31:02: 32:c4:0b:3e:f2:2b:34:9b:17:2c:b7:e4:e2:b7:85:6b:47:84: 16:4b:7f:d1:3b:fb:bf:4b:51:e5:4c:c1:29:d1:c0:fc:a6:b5: d5:4e:d9:fc:2f:bc:b3:93:fb:18:05:07:35:88:5f:f7:80:2f: b6:d6:2e:85:2c:30:93:01:ac:5c:14:e6:43:8c:d4:a6:0b:4c: 85:55:c3:21:fc:bc:43:92:62:c9:73:5d:38:e2:ce:03:b7:54: a2:08:80:27:c8:1d:b6:e8:94:b7:3b:a0:6a:7a:a4:ba:2b:7d: 14:50:b0:68:b8:db:bb:3b:fa:fd:27:e4:84:50:16:d4:36:44: 3f:d8:6a:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFd2jeiYPUvrbxaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDE0NFoXDTI1MDUwNTEyNDE0NFowLzEtMCsGA1UEAxMk OGJkOTAwY2YtNGNmZS00MTQ5LTk4NTEtYWVkMjMxOWMwYWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozIBEUA4JvorfFTh3cZHNWVryRziIxCklmMz opVUAP/8aqOSZM6tnS3M+QRW9Wcq+rQtf0LPBMmnFIIX2kWQV9WgNn0wT9TdVsvO xOEmkmZWJ9KT3XcAzJXYhPaaeMmq3cg0Ni+HmeQ7XrL0i5DSJM8wuy6AZEwSXg3Z veys0EkcsRPIFtJRfsbPA4HQXGf6qGaaOlrpM6nqDcxntBPhFOZLzUIR1yW5Gp+0 PnM6z2xprMqNHdtdrBghw0ETOcTjwU7M+MG9rV+F/cxf7q0GK495HH99thDP2D0U x1U4KKih+tuePzDCFUWgvLkLJktZCFe+z8eOshTiVA0DhWhTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkW2v+oryLF5hhIY+VsNrmZERwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjQxNjFhNjctNTE4NS0z NjU2LWIzZjgtYTY4ZGI5MjNkZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARvqTmxgjmd1nzpkzPaUdwJYWhm0y8QgvT2Q5Pe6qH0sBHaBnFd1DNB JRxx3iYGBy4xGz/9Wsoyqyv/To5M++Z/xEneadLVZJXvOtS2eQSEeQA4Si+FYajN Ub+9cVP8syB/uHclMpc5bvID8dyV0EoMn/X67HD/3bQSFH8xAjLECz7yKzSbFyy3 5OK3hWtHhBZLf9E7+79LUeVMwSnRwPymtdVO2fwvvLOT+xgFBzWIX/eAL7bWLoUs MJMBrFwU5kOM1KYLTIVVwyH8vEOSYslzXTjizgO3VKIIgCfIHbbolLc7oGp6pLor fRRQsGi427s7+v0n5IRQFtQ2RD/YaqY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:02 2025 by rpki-client