$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa File: b6bab816-d4d8-3af5-adf4-707f711c713e.roa (raw, json) Hash identifier: drNOJYELxjyU8NP9FVYqrrbjb3zlcRMGgiqTkPPE96Y= Subject key identifier: E8:59:EB:21:C4:19:01:C8:95:21:41:E7:AB:04:20:5F:7B:BC:66:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C532F2FB8483A9CE1EF54F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa Signing time: Tue 04 Feb 2025 11:23:47 +0000 ROA not before: Tue 04 Feb 2025 11:23:47 +0000 ROA not after: Mon 05 May 2025 10:23:47 +0000 asID: 30036 IP address blocks: 173.29.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:32:f2:fb:84:83:a9:ce:1e:f5:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:23:47 2025 GMT Not After : May 5 10:23:47 2025 GMT Subject: CN=33f1dd8d-d7a1-45e5-8727-fd69ef5b6d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5b:b6:e0:7a:f0:31:7e:64:c0:35:68:4b:d6: c7:e3:14:cf:71:6f:6a:3d:f7:96:9f:37:19:03:17: 41:75:f0:3f:9f:1a:19:e7:66:14:b3:ba:c1:ea:6f: 14:a3:39:85:c6:f7:fa:18:a8:a8:f5:18:62:c5:00: 8e:54:4c:eb:cf:1b:33:eb:86:8c:ec:d7:86:6f:8d: 46:e1:1b:7f:be:5e:02:bb:a5:24:12:0c:ca:83:b2: 82:45:5d:dd:fa:f2:c9:72:a2:eb:f2:da:25:36:47: 55:0b:15:2d:8f:e7:d2:83:71:21:07:94:b5:38:3a: d0:06:5e:56:15:ae:0b:5a:ca:a0:8e:52:36:06:90: 8f:da:fc:a6:d3:9f:10:61:b0:76:14:e8:db:0e:8d: 3d:5d:c3:55:8e:89:68:8f:1e:d0:e4:fe:03:b9:62: 0e:7e:ed:4e:84:e8:38:3f:47:54:70:25:52:90:96: 75:87:f2:13:1d:17:e4:ff:89:76:ad:e9:43:27:87: 43:a6:80:d7:70:92:2e:2d:53:6f:ce:ee:54:0c:80: 46:8f:55:5d:34:eb:1b:1b:a4:bc:7e:39:52:0d:83: ed:7c:8c:7b:72:f2:6b:54:48:43:65:72:4c:7e:b3: a2:83:3f:ae:98:f9:b9:29:8f:58:ab:dd:7a:24:c3: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:EB:21:C4:19:01:C8:95:21:41:E7:AB:04:20:5F:7B:BC:66:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f3:72:a9:b4:6b:84:ee:d5:8e:0a:ce:1f:15:9f:45:51:3d: 9f:fb:91:fa:f5:51:31:fe:aa:c0:b8:27:43:8b:e8:50:02:89: a3:2b:ff:66:a1:aa:19:75:28:4b:9b:2d:83:1a:f3:3f:03:e4: 07:80:2c:cb:b1:a4:a2:be:b9:cc:86:45:93:f5:37:02:3e:a9: 72:bc:db:10:bc:73:52:c3:53:cc:0e:c6:94:4d:e2:6e:e3:0b: ea:73:3c:c2:5f:73:40:06:b2:b4:31:00:7f:6d:8b:89:4b:1c: 20:ee:fc:a6:2e:11:ae:8a:61:46:70:35:d4:60:bd:3c:b9:d5: b7:73:47:ae:d7:88:13:5a:09:16:25:1b:cf:ea:30:0b:b3:13: 9b:e0:88:3f:56:da:55:72:f4:54:24:e9:66:d2:44:ca:18:17: b8:95:5a:c0:ce:7d:be:de:47:26:52:1f:bb:ed:57:f9:08:59: 7a:43:40:b1:ff:cf:8e:e0:ef:a1:ae:82:55:5e:b2:a4:9a:a9: 30:e8:02:fa:29:cd:85:db:13:ea:4d:40:9c:2d:e9:3c:01:b8: 65:2c:11:8b:dc:3e:5a:d3:de:47:a8:af:fe:fe:0f:5a:43:55: ea:9a:eb:6f:03:3a:24:52:ca:70:e1:9c:a5:29:39:0d:ae:0d: 3b:69:d8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFMvL7hIOpzh71T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjM0N1oXDTI1MDUwNTEwMjM0N1owLzEtMCsGA1UEAxMk MzNmMWRkOGQtZDdhMS00NWU1LTg3MjctZmQ2OWVmNWI2ZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1u24HrwMX5kwDVoS9bH4xTPcW9qPfeWnzcZ AxdBdfA/nxoZ52YUs7rB6m8UozmFxvf6GKio9RhixQCOVEzrzxsz64aM7NeGb41G 4Rt/vl4Cu6UkEgzKg7KCRV3d+vLJcqLr8tolNkdVCxUtj+fSg3EhB5S1ODrQBl5W Fa4LWsqgjlI2BpCP2vym058QYbB2FOjbDo09XcNVjolojx7Q5P4DuWIOfu1OhOg4 P0dUcCVSkJZ1h/ITHRfk/4l2relDJ4dDpoDXcJIuLVNvzu5UDIBGj1VdNOsbG6S8 fjlSDYPtfIx7cvJrVEhDZXJMfrOigz+umPm5KY9Yq916JMOWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhZ6yHEGQHIlSFB56sEIF97vGbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjZiYWI4MTYtZDRkOC0z YWY1LWFkZjQtNzA3ZjcxMWM3MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbzcqm0a4Tu1Y4Kzh8Vn0VRPZ/7kfr1UTH+qsC4J0OL6FACiaMr/2ah qhl1KEubLYMa8z8D5AeALMuxpKK+ucyGRZP1NwI+qXK82xC8c1LDU8wOxpRN4m7j C+pzPMJfc0AGsrQxAH9ti4lLHCDu/KYuEa6KYUZwNdRgvTy51bdzR67XiBNaCRYl G8/qMAuzE5vgiD9W2lVy9FQk6WbSRMoYF7iVWsDOfb7eRyZSH7vtV/kIWXpDQLH/ z47g76GuglVesqSaqTDoAvopzYXbE+pNQJwt6TwBuGUsEYvcPlrT3keor/7+D1pD Veqa628DOiRSynDhnKUpOQ2uDTtp2H0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:48 2025 by rpki-client