$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6ec1c7e-81e9-351f-b32b-fcb5dacdacdb.roa File: a6ec1c7e-81e9-351f-b32b-fcb5dacdacdb.roa (raw, json) Hash identifier: FBugbeEP//nnH+kqe0mURzUKUG3iiVbrCLjTWMaTGR8= Subject key identifier: E2:3D:F1:44:34:88:B5:97:B9:86:5B:E4:11:3F:47:50:E8:2D:93:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848F5B97C328091C7CCA6ACF100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6ec1c7e-81e9-351f-b32b-fcb5dacdacdb.roa Signing time: Fri 21 Feb 2025 20:33:40 +0000 ROA not before: Fri 21 Feb 2025 20:33:40 +0000 ROA not after: Thu 22 May 2025 19:33:40 +0000 asID: 30036 IP address blocks: 173.29.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:b9:7c:32:80:91:c7:cc:a6:ac:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 21 20:33:40 2025 GMT Not After : May 22 19:33:40 2025 GMT Subject: CN=197a6837-5047-42f1-a9e6-b77dc597bbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:9d:83:9d:f6:82:5f:7c:f9:18:9a:2f:39: e8:7d:71:b4:cc:e3:5d:d3:f8:d4:a1:b2:23:07:e1: 30:8a:0b:f6:92:00:3f:48:b4:c7:2d:28:fe:97:ab: c0:42:a5:4c:a1:1f:a4:79:77:c6:5f:fd:b8:e3:79: f6:de:9d:69:b5:89:fb:19:63:01:84:79:5d:10:16: b7:d8:89:23:13:5b:27:1c:95:1a:f8:27:26:97:b1: 3f:d6:d6:92:8e:85:07:bf:c1:40:32:9a:d4:57:1e: 9d:57:50:79:7d:7e:d7:6d:3e:8e:84:58:81:28:09: 9d:6a:5a:4e:05:79:36:dd:3b:49:38:7e:fc:bb:59: 68:2d:33:4e:16:d7:4b:f7:f9:9d:32:7a:5a:c9:8d: 96:29:99:42:74:7b:13:88:53:7c:51:67:89:6c:19: d4:7e:d7:87:cc:eb:69:62:fa:1c:89:69:83:5c:90: dc:ab:c1:30:23:4a:07:fc:01:53:cc:75:37:7b:01: 04:1e:27:8e:62:cd:5e:ce:c6:ea:dc:b4:4a:96:e4: 85:94:94:31:e0:8e:f4:17:6e:d1:48:5b:1e:36:c0: da:9a:6e:bf:c9:c4:42:00:bf:77:b8:f6:76:fa:8f: b1:17:a7:fd:3c:13:14:92:be:cc:aa:65:56:71:99: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3D:F1:44:34:88:B5:97:B9:86:5B:E4:11:3F:47:50:E8:2D:93:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6ec1c7e-81e9-351f-b32b-fcb5dacdacdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ad:b2:a3:7a:e1:f4:0f:ba:d3:6c:86:ce:e2:fe:6b:31:e5: fc:1c:40:bb:5c:b8:30:d9:97:c6:80:fb:26:02:42:de:50:65: bc:56:a7:88:4a:9d:25:c8:4e:bb:ed:de:ca:3e:7d:4b:05:5c: 4a:f8:ee:57:0a:0b:52:18:46:98:1a:2a:87:41:64:20:cd:25: 7a:5b:51:f5:1f:4c:dd:f0:8a:68:33:f2:97:46:1f:11:1b:f1: 60:02:89:67:8d:fb:1a:04:2c:95:51:0d:90:6a:9f:b7:9d:d8: 9b:3b:60:7c:48:ef:ae:36:ce:5b:eb:6b:8b:f3:90:68:7a:e9: 28:34:8b:54:87:3f:a8:46:51:02:60:cf:68:7c:c1:77:da:64: b7:cc:1b:42:6b:96:3e:a5:af:5b:bc:dc:d5:ba:43:80:c4:4b: 42:ef:9e:4a:f1:c1:c0:36:e7:d8:4f:ef:ef:6a:2e:4a:84:f3: 71:b5:17:35:52:ae:3d:e3:1f:b7:b0:1a:42:f3:0d:c7:32:68: e1:4d:3c:a7:49:ca:80:23:cb:2d:d2:ef:56:a5:1d:da:5c:43: 21:f5:95:3f:9a:3d:cf:04:04:4c:9c:fb:9e:b7:75:83:cc:e7: 2a:ab:a2:fc:3b:29:60:2b:02:cd:27:11:13:fc:e9:44:65:76: 0f:f3:24:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj1uXwygJHHzKas8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIyMTIwMzM0MFoXDTI1MDUyMjE5MzM0MFowLzEtMCsGA1UEAxMk MTk3YTY4MzctNTA0Ny00MmYxLWE5ZTYtYjc3ZGM1OTdiYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8mdg532gl98+RiaLznofXG0zONd0/jUobIj B+Ewigv2kgA/SLTHLSj+l6vAQqVMoR+keXfGX/2443n23p1ptYn7GWMBhHldEBa3 2IkjE1snHJUa+Ccml7E/1taSjoUHv8FAMprUVx6dV1B5fX7XbT6OhFiBKAmdalpO BXk23TtJOH78u1loLTNOFtdL9/mdMnpayY2WKZlCdHsTiFN8UWeJbBnUfteHzOtp YvociWmDXJDcq8EwI0oH/AFTzHU3ewEEHieOYs1ezsbq3LRKluSFlJQx4I70F27R SFseNsDamm6/ycRCAL93uPZ2+o+xF6f9PBMUkr7MqmVWcZnvxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI98UQ0iLWXuYZb5BE/R1DoLZP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTZlYzFjN2UtODFlOS0z NTFmLWIzMmItZmNiNWRhY2RhY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqtsqN64fQPutNshs7i/msx5fwcQLtcuDDZl8aA+yYCQt5QZbxWp4hK nSXITrvt3so+fUsFXEr47lcKC1IYRpgaKodBZCDNJXpbUfUfTN3wimgz8pdGHxEb 8WACiWeN+xoELJVRDZBqn7ed2Js7YHxI7642zlvra4vzkGh66Sg0i1SHP6hGUQJg z2h8wXfaZLfMG0Jrlj6lr1u83NW6Q4DES0LvnkrxwcA259hP7+9qLkqE83G1FzVS rj3jH7ewGkLzDccyaOFNPKdJyoAjyy3S71alHdpcQyH1lT+aPc8EBEyc+563dYPM 5yqrovw7KWArAs0nERP86URldg/zJHg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:25 2025 by rpki-client