$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa File: 7ddf2659-7157-340a-a60b-bc3915120be3.roa (raw, json) Hash identifier: dd5pPDm+FW0hWtrZf4T9lHtxissRA2nkCJwnI1YFN+k= Subject key identifier: 6F:8E:E2:E0:D9:D5:08:45:2D:C5:9A:30:9A:7B:DB:D0:07:58:0F:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C532A591E85D487AB56DC4E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa Signing time: Tue 04 Feb 2025 11:23:11 +0000 ROA not before: Tue 04 Feb 2025 11:23:11 +0000 ROA not after: Mon 05 May 2025 10:23:11 +0000 asID: 30036 IP address blocks: 173.29.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:32:a5:91:e8:5d:48:7a:b5:6d:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:23:11 2025 GMT Not After : May 5 10:23:11 2025 GMT Subject: CN=cf62162b-f8a2-4d01-ad99-258ca9c7ae4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:5a:3d:6a:07:3e:ac:35:be:2f:c0:56:ee: ea:be:e8:f7:76:70:09:10:de:17:02:84:ee:66:76: aa:25:fd:85:04:d5:13:40:a7:ef:9d:05:50:d2:c2: 3a:57:89:3a:dc:db:dd:f8:90:bf:55:15:ca:bf:d9: 62:e9:38:30:52:ce:7f:6d:32:37:7e:1a:87:ae:b6: 8c:28:cc:00:a8:60:c2:c6:06:c1:90:0f:df:5e:3a: 3d:49:b3:25:13:0c:57:b4:d1:e3:e4:58:50:da:e8: 90:cd:9d:24:48:59:7e:31:62:96:4c:55:ca:9c:89: 7e:86:bc:02:31:7c:c3:07:39:2b:29:ae:cf:cb:92: 87:1b:98:12:6d:2c:0f:ea:ac:64:5c:83:59:98:18: c0:29:c2:d4:b6:ed:49:91:67:22:f5:9d:01:39:94: 44:e3:46:45:37:e6:42:27:48:5b:f7:dd:42:d7:f4: f4:c6:46:80:6e:31:22:ef:1f:59:ee:3d:2b:8d:1b: 42:71:db:53:ec:4b:f4:62:4c:a8:52:c1:20:0f:e0: fe:cd:7b:20:dc:c7:3e:77:c1:05:33:a9:7e:39:88: 79:ee:5d:71:f5:6e:0b:a7:1a:90:de:c6:32:35:42: a3:5f:20:86:d2:06:ec:3b:8c:99:f1:ec:30:e0:ff: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8E:E2:E0:D9:D5:08:45:2D:C5:9A:30:9A:7B:DB:D0:07:58:0F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5d:a4:63:3f:7b:ff:bd:88:24:fe:4a:f5:c6:bd:66:04:c9: 28:0b:45:d7:0d:17:fc:83:f8:37:e8:91:08:8f:e4:79:3a:65: ae:52:3b:11:76:1b:5e:cb:ea:ff:5d:fe:04:e8:67:3b:90:53: d5:a6:fd:77:a9:1b:6f:f0:42:bf:a1:68:7a:d4:53:e2:e4:85: d6:a5:61:2b:5f:7f:e7:b1:33:41:85:ca:85:4e:63:fe:64:2b: e2:17:75:5b:92:11:fa:67:b1:14:ce:c6:9f:02:9b:39:4a:05: 9b:91:a5:b9:05:4f:0b:46:31:bc:35:62:7f:e8:91:78:81:df: d2:01:5f:78:86:53:67:21:9c:f9:33:cf:a2:8e:82:08:24:a2: ca:eb:55:ad:dc:ad:37:e2:b0:88:d3:a8:06:ae:95:8f:68:57: 9c:ab:4e:ee:e1:f9:9c:86:38:fa:fb:c8:3f:2c:be:20:ff:b4: 93:66:80:56:80:0f:e4:7d:91:ae:21:79:3c:f2:47:90:28:0d: 07:f3:19:68:c0:56:38:24:bd:f0:4a:e1:12:4d:ed:6d:42:04: 98:e5:ae:c0:c4:7a:be:9f:4e:77:b5:0e:11:12:8d:1d:eb:72: 82:e3:7e:ad:ad:87:5d:04:e3:e5:4d:51:b7:f3:44:c0:90:0c: 0d:5e:e8:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFMqWR6F1IerVtxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjMxMVoXDTI1MDUwNTEwMjMxMVowLzEtMCsGA1UEAxMk Y2Y2MjE2MmItZjhhMi00ZDAxLWFkOTktMjU4Y2E5YzdhZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkVaPWoHPqw1vi/AVu7qvuj3dnAJEN4XAoTu ZnaqJf2FBNUTQKfvnQVQ0sI6V4k63Nvd+JC/VRXKv9li6TgwUs5/bTI3fhqHrraM KMwAqGDCxgbBkA/fXjo9SbMlEwxXtNHj5FhQ2uiQzZ0kSFl+MWKWTFXKnIl+hrwC MXzDBzkrKa7Py5KHG5gSbSwP6qxkXINZmBjAKcLUtu1JkWci9Z0BOZRE40ZFN+ZC J0hb991C1/T0xkaAbjEi7x9Z7j0rjRtCcdtT7Ev0YkyoUsEgD+D+zXsg3Mc+d8EF M6l+OYh57l1x9W4LpxqQ3sYyNUKjXyCG0gbsO4yZ8eww4P+MaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+O4uDZ1QhFLcWaMJp729AHWA9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2RkZjI2NTktNzE1Ny0z NDBhLWE2MGItYmMzOTE1MTIwYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9dpGM/e/+9iCT+SvXGvWYEySgLRdcNF/yD+DfokQiP5Hk6Za5SOxF2 G17L6v9d/gToZzuQU9Wm/XepG2/wQr+haHrUU+LkhdalYStff+exM0GFyoVOY/5k K+IXdVuSEfpnsRTOxp8CmzlKBZuRpbkFTwtGMbw1Yn/okXiB39IBX3iGU2chnPkz z6KOgggkosrrVa3crTfisIjTqAaulY9oV5yrTu7h+ZyGOPr7yD8sviD/tJNmgFaA D+R9ka4heTzyR5AoDQfzGWjAVjgkvfBK4RJN7W1CBJjlrsDEer6fTne1DhESjR3r coLjfq2th10E4+VNUbfzRMCQDA1e6EI= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:19 2025 by rpki-client