$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa File: b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa (raw, json) Hash identifier: yPcTLYHYJlOhd5J7vJ9wAHP55grlzmlNtnt6WxFVpiY= Subject key identifier: 2A:AF:B3:2F:BA:B0:15:F0:F6:37:66:8F:09:CB:00:1A:A3:13:64:89 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C534006C7AA4130FE0C04C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa Signing time: Tue 04 Feb 2025 11:25:55 +0000 ROA not before: Tue 04 Feb 2025 11:25:55 +0000 ROA not after: Mon 05 May 2025 10:25:55 +0000 asID: 30036 IP address blocks: 173.29.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:00:6c:7a:a4:13:0f:e0:c0:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:25:55 2025 GMT Not After : May 5 10:25:55 2025 GMT Subject: CN=9582de76-9d0c-434c-af92-b575deb478cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:3e:eb:6a:e9:5b:71:bc:8a:4f:2f:b2:16: 45:8e:98:c2:ba:0e:c7:06:66:ca:a4:4d:f8:ca:0c: 3c:80:8e:48:fb:57:9c:80:42:78:de:32:58:9e:62: b2:e1:29:81:71:31:72:fc:bd:27:49:d7:4c:e6:36: 9a:7f:a3:8d:fc:07:1e:d5:f9:4d:14:8d:5b:d1:53: 62:6b:ed:74:a1:68:e0:71:15:43:d7:87:ab:7d:dd: 6f:69:54:7e:5b:eb:08:13:4e:ca:00:45:79:49:7d: c9:99:e0:b7:47:f9:b2:92:ed:4b:3d:bf:0b:0c:a2: f0:1a:75:48:c3:6f:d8:90:f7:c1:fb:3d:5e:24:f1: 44:7e:e1:46:ea:4e:51:6d:8e:b3:b2:4e:15:f3:fc: b1:71:81:cf:04:53:66:34:28:76:ec:74:9f:3b:86: 2a:e6:c8:9c:e9:24:9a:96:8b:be:8f:7e:c7:a0:d1: 71:b1:9b:9c:cc:19:8c:85:c8:2e:07:05:24:8c:9e: 8d:43:da:38:28:25:17:c3:ee:6d:8b:7d:c6:ea:bf: 71:f4:2a:84:b8:b7:e2:b9:95:28:1e:11:b4:5e:ec: 91:02:4e:70:33:a0:a1:50:31:c8:d8:0b:45:03:38: b1:ad:76:0a:8f:fa:20:13:57:fa:d4:e8:c7:75:c4: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AF:B3:2F:BA:B0:15:F0:F6:37:66:8F:09:CB:00:1A:A3:13:64:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:16:44:e8:b5:a9:8c:e9:ef:39:2a:d0:36:33:3a:7b:c1:02: 81:17:90:c4:d5:54:93:bb:4f:2f:e7:d8:42:3e:6d:7b:a6:b1: 20:b9:5e:45:96:ee:ae:10:32:8f:f0:7f:a0:5b:52:89:72:66: 2a:15:21:d2:c4:83:68:be:95:85:43:52:e9:71:db:4c:d1:fc: fc:c6:25:31:73:60:42:2f:fa:81:d8:fa:76:f2:ac:c0:7f:50: e6:9c:41:7c:97:e9:19:b9:af:cf:e5:fa:bd:0c:d5:92:dc:63: ea:6a:81:6c:d4:c0:90:f8:8e:d6:b7:5d:bd:0a:78:1d:6b:73: 8f:b7:39:63:34:78:5e:c6:0e:33:ca:0b:85:66:f3:91:0e:aa: 5b:0b:f2:56:c2:0a:50:d8:bb:9a:38:e1:14:0d:6d:a6:ad:de: e3:d8:e6:19:46:ce:9f:a9:1c:b4:e0:29:b2:44:89:3d:08:d7: 9a:51:4d:f0:78:ad:45:56:95:bd:d4:2d:43:65:8f:6a:14:98: d6:96:9d:a5:06:68:2a:36:04:c2:6f:c0:52:86:e9:f1:16:55: f3:c6:c8:c1:e8:27:48:e1:38:7e:2d:a9:4c:66:e6:ea:eb:11: b2:b5:3c:fc:8b:7a:15:c2:ab:45:b2:e9:8d:e5:4e:c1:be:5b: 79:5b:8f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFNABseqQTD+DATIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjU1NVoXDTI1MDUwNTEwMjU1NVowLzEtMCsGA1UEAxMk OTU4MmRlNzYtOWQwYy00MzRjLWFmOTItYjU3NWRlYjQ3OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo0+62rpW3G8ik8vshZFjpjCug7HBmbKpE34 ygw8gI5I+1ecgEJ43jJYnmKy4SmBcTFy/L0nSddM5jaaf6ON/Ace1flNFI1b0VNi a+10oWjgcRVD14erfd1vaVR+W+sIE07KAEV5SX3JmeC3R/myku1LPb8LDKLwGnVI w2/YkPfB+z1eJPFEfuFG6k5RbY6zsk4V8/yxcYHPBFNmNCh27HSfO4Yq5sic6SSa lou+j37HoNFxsZuczBmMhcguBwUkjJ6NQ9o4KCUXw+5ti33G6r9x9CqEuLfiuZUo HhG0XuyRAk5wM6ChUDHI2AtFAzixrXYKj/ogE1f61OjHdcTZQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqvsy+6sBXw9jdmjwnLABqjE2SJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjI3NzBkMWItMjlhZi0z ZjkxLWFkNWUtODcwNWYzNjdmZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgWROi1qYzp7zkq0DYzOnvBAoEXkMTVVJO7Ty/n2EI+bXumsSC5XkWW 7q4QMo/wf6BbUolyZioVIdLEg2i+lYVDUulx20zR/PzGJTFzYEIv+oHY+nbyrMB/ UOacQXyX6Rm5r8/l+r0M1ZLcY+pqgWzUwJD4jta3Xb0KeB1rc4+3OWM0eF7GDjPK C4Vm85EOqlsL8lbCClDYu5o44RQNbaat3uPY5hlGzp+pHLTgKbJEiT0I15pRTfB4 rUVWlb3ULUNlj2oUmNaWnaUGaCo2BMJvwFKG6fEWVfPGyMHoJ0jhOH4tqUxm5urr EbK1PPyLehXCq0Wy6Y3lTsG+W3lbj8M= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:51 2025 by rpki-client