$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f733a87-9188-3636-84a9-f8393e70f775.roa File: 9f733a87-9188-3636-84a9-f8393e70f775.roa (raw, json) Hash identifier: RZJqiyD78/U52GUtBhff7vrk2788jgg7H3w7asmTO+E= Subject key identifier: 81:17:18:C7:35:64:F4:1B:87:E3:57:CB:C5:FC:8F:58:2C:15:41:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2640758992AA39473708D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f733a87-9188-3636-84a9-f8393e70f775.roa Signing time: Mon 03 Feb 2025 11:15:15 +0000 ROA not before: Mon 03 Feb 2025 11:15:15 +0000 ROA not after: Sun 04 May 2025 10:15:15 +0000 asID: 30036 IP address blocks: 173.29.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:64:07:58:99:2a:a3:94:73:70:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:15:15 2025 GMT Not After : May 4 10:15:15 2025 GMT Subject: CN=653597f3-4405-4c25-b741-2542c992074b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:82:bd:f7:30:35:51:0c:9d:bb:5a:fc:31:4d: cc:78:8b:3c:3b:49:8f:73:9a:c4:bf:2c:43:d2:ba: 1c:4b:d9:28:17:0c:52:cc:29:b5:c4:7b:77:c1:62: 7a:9e:6e:50:a7:8a:73:e6:cd:06:38:8d:cf:43:26: 18:93:a5:37:aa:40:0e:49:85:57:6d:0c:8c:2d:47: a1:cf:52:1c:bf:e3:cd:1a:8e:17:ac:e4:78:e4:f1: 37:32:58:16:0e:c3:e1:25:6e:1b:05:14:ac:25:19: 53:a1:0b:86:78:4a:d8:a9:db:6a:b9:c3:7b:fe:98: 20:f6:13:97:7f:52:74:d3:4f:6a:f0:0e:37:70:3e: b6:98:25:cf:3e:c6:0f:6b:34:85:48:08:bf:8d:aa: ca:68:6e:fb:cf:04:23:39:0a:55:51:26:50:ff:5d: e2:c4:a6:9c:05:61:bf:51:27:ab:a5:46:f6:6a:65: 79:d0:32:53:d0:8f:09:0a:6d:00:26:13:90:b5:68: 59:d4:66:69:25:34:50:e5:40:9a:c2:3c:9f:48:9f: 71:7f:18:df:db:26:de:0d:c1:c8:5d:81:b6:6e:70: 55:d1:20:31:cf:b8:40:de:c5:7d:bd:1e:29:f7:a5: b7:09:87:53:ef:f3:7e:33:1b:65:b8:40:2b:62:2f: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:17:18:C7:35:64:F4:1B:87:E3:57:CB:C5:FC:8F:58:2C:15:41:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f733a87-9188-3636-84a9-f8393e70f775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4b:e3:57:f6:79:a8:a9:71:9f:f7:e3:1c:26:61:fa:37:06: 7a:46:8c:0d:00:de:05:a5:62:1c:3d:d4:42:66:ac:67:4d:a1: 6f:93:95:36:27:d1:a5:6f:4a:3c:34:8e:53:21:4e:81:9a:2c: bc:8d:8f:1c:6a:29:79:02:87:3f:0f:27:d2:d4:96:c9:46:59: 57:1b:0f:e7:2f:2f:15:63:4c:9a:5b:71:84:62:b4:95:96:66: 44:58:38:36:bf:62:48:40:4d:db:63:42:86:fa:31:01:0e:55: f8:42:d9:66:de:e8:21:16:65:b7:2d:10:23:9e:96:a8:74:d0: 51:37:ff:43:9d:0e:53:78:05:d7:9f:b0:36:a4:53:87:8a:eb: 32:f4:83:a0:d7:2c:28:5f:66:16:51:a8:5d:c0:53:fd:a6:4b: 15:fb:c1:60:02:25:94:0f:20:c6:29:c2:d1:c9:4d:a3:23:73: 76:21:d7:5e:9a:cd:13:2e:76:81:8b:04:3b:6a:09:11:f3:2e: dc:30:49:84:75:e4:f9:a8:81:a0:08:84:15:4b:0d:98:6e:ef: 31:7d:ce:a2:02:5a:f0:2b:5d:ef:44:05:45:39:0a:ac:a5:c3: 74:80:7c:fa:55:22:0f:1e:d9:e2:02:45:9f:1f:2c:f1:8f:78: 52:7c:a7:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCZAdYmSqjlHNwjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTUxNVoXDTI1MDUwNDEwMTUxNVowLzEtMCsGA1UEAxMk NjUzNTk3ZjMtNDQwNS00YzI1LWI3NDEtMjU0MmM5OTIwNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoK99zA1UQydu1r8MU3MeIs8O0mPc5rEvyxD 0rocS9koFwxSzCm1xHt3wWJ6nm5Qp4pz5s0GOI3PQyYYk6U3qkAOSYVXbQyMLUeh z1Icv+PNGo4XrOR45PE3MlgWDsPhJW4bBRSsJRlToQuGeErYqdtqucN7/pgg9hOX f1J0009q8A43cD62mCXPPsYPazSFSAi/jarKaG77zwQjOQpVUSZQ/13ixKacBWG/ USerpUb2amV50DJT0I8JCm0AJhOQtWhZ1GZpJTRQ5UCawjyfSJ9xfxjf2ybeDcHI XYG2bnBV0SAxz7hA3sV9vR4p96W3CYdT7/N+MxtluEArYi8lswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEXGMc1ZPQbh+NXy8X8j1gsFUHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWY3MzNhODctOTE4OC0z NjM2LTg0YTktZjgzOTNlNzBmNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhL41f2eaipcZ/34xwmYfo3BnpGjA0A3gWlYhw91EJmrGdNoW+TlTYn 0aVvSjw0jlMhToGaLLyNjxxqKXkChz8PJ9LUlslGWVcbD+cvLxVjTJpbcYRitJWW ZkRYODa/YkhATdtjQob6MQEOVfhC2Wbe6CEWZbctECOelqh00FE3/0OdDlN4Bdef sDakU4eK6zL0g6DXLChfZhZRqF3AU/2mSxX7wWACJZQPIMYpwtHJTaMjc3Yh116a zRMudoGLBDtqCRHzLtwwSYR15PmogaAIhBVLDZhu7zF9zqICWvArXe9EBUU5Cqyl w3SAfPpVIg8e2eICRZ8fLPGPeFJ8p28= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:29 2025 by rpki-client