$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa File: c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa (raw, json) Hash identifier: d8OaoUdXko2Xfb33Bzhw4R/LOhhq5AKTV6w9DSP9Vc8= Subject key identifier: 38:10:42:39:B0:BB:86:7C:7E:79:3B:17:90:38:DD:51:57:21:FE:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C260C99586EEB22CA92EF000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa Signing time: Mon 03 Feb 2025 11:08:43 +0000 ROA not before: Mon 03 Feb 2025 11:08:43 +0000 ROA not after: Sun 04 May 2025 10:08:43 +0000 asID: 30036 IP address blocks: 173.29.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:60:c9:95:86:ee:b2:2c:a9:2e:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:08:43 2025 GMT Not After : May 4 10:08:43 2025 GMT Subject: CN=26c014f4-6f6e-4720-846e-e7df693552a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:dc:64:b1:86:bb:c8:38:e0:96:23:b4:e2: 7c:69:b4:d4:fe:a6:47:36:ed:44:65:11:95:f8:d1: 1f:29:71:dc:71:b9:b6:56:9d:3c:80:19:d0:f2:6c: 7e:c5:57:ad:27:e5:94:45:78:48:58:17:5a:74:52: 47:c8:1f:84:1c:eb:49:07:af:80:72:a7:73:e8:87: 13:29:d0:51:c8:2f:99:32:39:cd:ed:99:db:66:e1: 78:19:d4:f2:1f:d4:0d:81:9f:8e:90:0d:46:6c:0f: 36:d3:1f:68:a3:fc:cb:b1:54:3b:d9:73:0a:4c:b0: bf:ee:9a:1d:4f:f2:7f:ed:97:bd:81:a7:bb:16:93: 49:e2:a3:ea:35:74:b4:e7:77:c5:50:ab:b4:9e:35: d8:c3:2c:52:eb:43:69:d3:8a:84:31:34:72:83:47: 12:ba:0a:3f:b5:c1:f1:a9:50:d9:44:26:d1:d8:c9: a3:36:24:40:1f:78:6d:3c:c9:12:aa:ae:95:be:10: 19:6f:78:d0:92:f1:a2:e4:13:d2:59:14:e7:65:de: 96:a1:c5:e2:84:c2:4c:69:91:6b:ed:6d:1f:89:f1: 6b:34:a9:03:b7:d6:e7:9a:71:51:95:89:e4:fb:6e: 0b:3d:fc:9e:d1:d6:14:c4:2e:b7:64:25:cc:de:d3: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:10:42:39:B0:BB:86:7C:7E:79:3B:17:90:38:DD:51:57:21:FE:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a1:62:40:89:21:03:52:17:51:57:1d:31:95:85:ad:f9:d5: 7e:5e:8b:2a:8a:d8:1b:7e:c7:f7:de:07:e7:93:17:18:17:2a: 4f:1b:0d:d6:84:fd:5e:dc:a2:b8:74:d0:f7:b1:75:91:c1:ac: 92:46:f8:42:2f:05:b5:ff:32:54:82:28:87:0e:d9:c8:00:a1: 57:0d:c0:c6:6f:b1:be:81:da:b4:1f:4e:67:c7:9c:de:b6:01: b5:d8:71:cb:6e:8e:ad:b1:f5:0b:b3:1c:2d:7e:cf:7f:dd:af: 57:84:77:fe:2c:98:64:2a:c2:5e:b4:3f:e8:8c:27:74:68:8b: 85:52:56:67:77:06:35:d1:6d:2b:22:74:33:ff:70:3b:eb:1d: 1c:51:ef:39:a2:c7:8b:d4:af:10:17:90:97:24:ad:8e:51:ac: 53:a4:85:33:56:ec:f1:d2:73:68:53:d4:af:2d:5d:2b:2c:f2: 1a:0e:6c:84:b5:f2:6c:49:10:3d:17:91:d0:04:7c:cb:b0:ef: a8:04:6f:24:ee:6f:a0:78:b9:fc:12:9d:7f:3e:fc:27:55:46: 40:d2:d2:29:64:e6:61:67:25:be:18:06:dd:73:a2:f4:2c:87: cf:3d:a9:f7:fa:5d:0d:a6:87:b9:b5:9e:85:f7:40:5f:38:00: 20:3c:a5:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYMmVhu6yLKku8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDg0M1oXDTI1MDUwNDEwMDg0M1owLzEtMCsGA1UEAxMk MjZjMDE0ZjQtNmY2ZS00NzIwLTg0NmUtZTdkZjY5MzU1MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTPcZLGGu8g44JYjtOJ8abTU/qZHNu1EZRGV +NEfKXHccbm2Vp08gBnQ8mx+xVetJ+WURXhIWBdadFJHyB+EHOtJB6+Acqdz6IcT KdBRyC+ZMjnN7ZnbZuF4GdTyH9QNgZ+OkA1GbA820x9oo/zLsVQ72XMKTLC/7pod T/J/7Ze9gae7FpNJ4qPqNXS053fFUKu0njXYwyxS60Np04qEMTRyg0cSugo/tcHx qVDZRCbR2MmjNiRAH3htPMkSqq6VvhAZb3jQkvGi5BPSWRTnZd6WocXihMJMaZFr 7W0fifFrNKkDt9bnmnFRlYnk+24LPfye0dYUxC63ZCXM3tNKRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgQQjmwu4Z8fnk7F5A43VFXIf6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMxYWM5MDEtMmQ4Ny0z YWNiLThhYTQtMmFmMWViNGU2NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGhYkCJIQNSF1FXHTGVha351X5eiyqK2Bt+x/feB+eTFxgXKk8bDdaE /V7corh00PexdZHBrJJG+EIvBbX/MlSCKIcO2cgAoVcNwMZvsb6B2rQfTmfHnN62 AbXYcctujq2x9QuzHC1+z3/dr1eEd/4smGQqwl60P+iMJ3Roi4VSVmd3BjXRbSsi dDP/cDvrHRxR7zmix4vUrxAXkJckrY5RrFOkhTNW7PHSc2hT1K8tXSss8hoObIS1 8mxJED0XkdAEfMuw76gEbyTub6B4ufwSnX8+/CdVRkDS0ilk5mFnJb4YBt1zovQs h889qff6XQ2mh7m1noX3QF84ACA8pYE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:50 2025 by rpki-client