$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b01f988b-cc08-366f-82ff-45b062326830.roa File: b01f988b-cc08-366f-82ff-45b062326830.roa (raw, json) Hash identifier: PXaFMB9/FKHFQP0QakAVCbRBEmOL0r9fbKWpryPWVcI= Subject key identifier: 93:66:D4:A6:F7:C1:E9:DC:AD:6C:E0:14:0E:7B:33:54:09:1D:B7:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5776FEB2D96D64C6C28F600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b01f988b-cc08-366f-82ff-45b062326830.roa Signing time: Tue 04 Feb 2025 13:41:47 +0000 ROA not before: Tue 04 Feb 2025 13:41:47 +0000 ROA not after: Mon 05 May 2025 12:41:47 +0000 asID: 30036 IP address blocks: 173.29.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:6f:eb:2d:96:d6:4c:6c:28:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:41:47 2025 GMT Not After : May 5 12:41:47 2025 GMT Subject: CN=25ed526f-b5d7-4e23-90e4-918c3e6eefec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ba:99:ef:26:75:00:6d:66:15:80:19:7d:e3: d5:4f:da:28:c4:f7:89:be:f5:0e:21:9e:b9:eb:6e: 33:39:34:9b:e0:e2:98:a1:65:62:c8:dc:e7:c6:dd: de:5f:31:6a:d6:22:29:a8:f4:df:29:e7:76:8c:16: 88:0c:ab:63:d1:ea:3b:92:cb:b9:9b:fd:80:7b:2a: 59:0a:55:36:b4:c3:bc:c1:d8:57:6b:22:29:e9:ad: d0:6c:d3:9b:81:e2:5b:4c:26:6f:1d:43:fe:fc:d8: d7:21:c2:18:0e:4e:7e:69:a7:cb:a6:ce:f6:f4:17: c4:0f:a6:ac:88:97:31:85:58:3f:8f:13:4f:e1:dc: ed:55:38:6e:8b:92:f2:24:44:57:f8:be:9d:fa:5b: dc:10:d4:ef:2d:e6:44:14:3b:27:51:4e:03:69:da: bc:14:f5:d1:ca:d6:76:3c:20:0c:82:8e:8e:36:b1: 98:f5:90:e7:51:1d:e9:14:09:70:00:1c:86:25:ba: 53:eb:de:48:37:f1:c5:36:ba:be:e0:20:e3:d0:58: 22:75:31:46:d1:73:67:99:92:68:9d:a1:1a:87:8c: 3c:ff:33:93:d4:61:34:e9:20:ae:ae:e2:01:34:93: bd:b0:77:a3:04:c8:a7:20:cf:e1:6b:ac:19:ad:e7: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:66:D4:A6:F7:C1:E9:DC:AD:6C:E0:14:0E:7B:33:54:09:1D:B7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b01f988b-cc08-366f-82ff-45b062326830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d2:72:2e:f1:ca:50:5a:3c:17:b7:44:9f:7e:bf:42:57:90: 18:38:51:73:b5:23:93:6b:dd:eb:32:b9:e9:98:9c:7e:0f:50: 6e:2c:cd:66:a3:4d:11:d3:8c:d6:90:7d:6a:99:d0:d5:06:43: c0:f1:1e:a4:1b:76:4f:77:55:09:54:f1:5d:1d:ee:ab:37:5d: f8:72:0f:24:00:7d:d6:c9:3c:37:4e:26:f5:00:b2:6e:46:0e: a3:6c:57:32:57:9d:03:b9:1d:0c:16:d6:bc:c8:44:58:0e:a3: cb:1d:98:d0:0f:bf:8a:fb:17:64:c0:c5:e1:9d:53:eb:72:88: 64:db:9a:25:e5:27:4a:29:d3:25:c3:93:63:bc:25:03:a9:e5: eb:b6:a1:21:0c:da:e7:c2:ed:d0:e1:6c:17:b8:59:94:75:0e: 03:51:a1:c0:42:95:0a:ed:94:4d:55:aa:25:6d:4e:65:eb:4b: 24:66:fb:75:8e:13:ca:7f:3f:46:2f:63:6c:d1:06:93:de:a2: 67:a2:32:13:b9:f8:4d:e5:42:42:3d:0d:99:c5:0a:17:d8:13: c4:99:ca:2a:ea:55:5f:35:55:a0:1b:59:e0:fc:3c:c4:73:0a: 54:f5:f8:1f:1d:86:ec:8a:b3:a3:86:bf:f6:0b:ea:96:34:48: f3:4d:cd:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFd2/rLZbWTGwo9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDE0N1oXDTI1MDUwNTEyNDE0N1owLzEtMCsGA1UEAxMk MjVlZDUyNmYtYjVkNy00ZTIzLTkwZTQtOTE4YzNlNmVlZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bqZ7yZ1AG1mFYAZfePVT9ooxPeJvvUOIZ65 624zOTSb4OKYoWViyNznxt3eXzFq1iIpqPTfKed2jBaIDKtj0eo7ksu5m/2AeypZ ClU2tMO8wdhXayIp6a3QbNObgeJbTCZvHUP+/NjXIcIYDk5+aafLps729BfED6as iJcxhVg/jxNP4dztVThui5LyJERX+L6d+lvcENTvLeZEFDsnUU4Dadq8FPXRytZ2 PCAMgo6ONrGY9ZDnUR3pFAlwAByGJbpT695IN/HFNrq+4CDj0FgidTFG0XNnmZJo naEah4w8/zOT1GE06SCuruIBNJO9sHejBMinIM/ha6wZrefYzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNm1Kb3wencrWzgFA57M1QJHbehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjAxZjk4OGItY2MwOC0z NjZmLTgyZmYtNDViMDYyMzI2ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvSci7xylBaPBe3RJ9+v0JXkBg4UXO1I5Nr3esyuemYnH4PUG4szWaj TRHTjNaQfWqZ0NUGQ8DxHqQbdk93VQlU8V0d7qs3XfhyDyQAfdbJPDdOJvUAsm5G DqNsVzJXnQO5HQwW1rzIRFgOo8sdmNAPv4r7F2TAxeGdU+tyiGTbmiXlJ0op0yXD k2O8JQOp5eu2oSEM2ufC7dDhbBe4WZR1DgNRocBClQrtlE1VqiVtTmXrSyRm+3WO E8p/P0YvY2zRBpPeomeiMhO5+E3lQkI9DZnFChfYE8SZyirqVV81VaAbWeD8PMRz ClT1+B8dhuyKs6OGv/YL6pY0SPNNzTk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:40 2025 by rpki-client