$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf629ed3-5c32-33e7-a6df-988589df11b5.roa File: cf629ed3-5c32-33e7-a6df-988589df11b5.roa (raw, json) Hash identifier: AsEMJM08KWpdrmny39nZrvWzrG/4Izcxl2l1Tdb6f0s= Subject key identifier: 27:B8:25:CC:14:06:61:B1:9B:F5:36:27:9D:C8:8C:EF:7B:87:A8:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5776D7DE51B038FEA19F370 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf629ed3-5c32-33e7-a6df-988589df11b5.roa Signing time: Tue 04 Feb 2025 13:41:46 +0000 ROA not before: Tue 04 Feb 2025 13:41:46 +0000 ROA not after: Mon 05 May 2025 12:41:46 +0000 asID: 30036 IP address blocks: 173.29.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:6d:7d:e5:1b:03:8f:ea:19:f3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:41:46 2025 GMT Not After : May 5 12:41:46 2025 GMT Subject: CN=f3ced8bd-2012-417b-a930-878dda6f1b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:11:20:11:16:af:93:b2:d1:d9:94:11:dc: 22:5b:65:dc:05:8f:3e:88:99:e3:52:59:99:a8:6f: 68:82:e9:d5:da:7a:31:31:80:59:f3:f0:47:67:e0: c8:5d:69:3a:3b:8f:b2:52:51:a5:94:70:a6:bd:83: a6:dc:2a:7f:a4:42:70:d9:da:b5:73:bf:dc:c9:55: 6a:1f:1f:99:2e:5f:44:be:34:ea:dd:57:6e:67:04: b2:17:f1:5e:eb:ad:cd:4e:f5:77:ed:75:07:53:3b: a3:82:99:7f:de:70:a6:a6:b7:0e:fd:f8:ec:7c:41: 11:5d:39:f5:c7:1f:9e:51:17:4b:33:ce:9f:cc:a3: 70:62:ed:5c:73:ac:a4:a1:08:7d:76:90:cd:48:61: fd:ab:0a:c9:58:1a:31:36:f0:b0:aa:a4:c4:bd:e9: 75:e3:57:7e:10:b1:4f:5b:9c:23:8f:b9:8c:b4:c8: 6a:05:c3:7e:82:1f:3a:45:8f:5f:eb:73:af:dc:22: 75:88:52:cd:a2:98:6a:d7:e4:b4:7c:fe:84:eb:70: 98:d8:5c:ab:a0:2f:ee:a0:fd:3d:17:ed:cc:92:0c: 60:75:62:72:37:fc:8c:43:2f:52:e0:b8:83:78:f7: bf:20:f4:a2:d7:d3:7d:ef:e7:54:85:90:8c:bd:a6: ab:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:25:CC:14:06:61:B1:9B:F5:36:27:9D:C8:8C:EF:7B:87:A8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf629ed3-5c32-33e7-a6df-988589df11b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:05:77:8d:01:b3:76:75:fe:e1:04:dc:eb:e2:14:c4:9d:31: b3:75:71:de:e5:13:b8:e3:0b:85:09:f9:69:0a:85:4b:21:d6: 99:3a:5c:af:a2:17:ed:de:9f:a9:b9:46:e1:58:e2:75:e2:5a: fe:14:6d:c1:bc:5f:cd:1e:f6:7e:1d:70:46:ca:40:1d:21:e4: 95:f8:7a:f2:f3:50:81:9b:1f:88:ae:d6:91:c1:f6:29:99:6a: b2:9a:26:e0:49:58:d4:1e:1d:ee:8f:6a:9c:e7:4b:64:fd:1b: ae:ef:a0:33:2e:26:5f:ce:fa:79:ed:ae:f2:cb:13:55:16:ee: 9c:1d:c4:f5:6c:9b:84:d9:6f:f7:be:59:48:a5:69:da:74:bf: 5e:9e:e1:70:db:cb:af:f8:13:b6:62:f0:6b:16:37:56:15:82: 08:3c:73:72:d2:b5:6b:2e:26:4b:7c:ce:00:f0:55:e3:13:a3: cf:8e:e5:10:ad:33:78:02:e4:00:25:57:68:6e:18:6a:53:c0: 2e:f4:00:79:bd:77:00:52:00:67:09:3c:08:b0:3c:66:b6:df: 16:2d:7e:9a:dc:17:55:b4:f4:57:38:1f:06:42:0b:48:b5:73: 9d:47:01:76:46:de:28:d4:3a:e5:5d:a0:df:e9:1f:3c:ab:6b: fa:5e:78:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFd2195RsDj+oZ83AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDE0NloXDTI1MDUwNTEyNDE0NlowLzEtMCsGA1UEAxMk ZjNjZWQ4YmQtMjAxMi00MTdiLWE5MzAtODc4ZGRhNmYxYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ERIBEWr5Oy0dmUEdwiW2XcBY8+iJnjUlmZ qG9ogunV2noxMYBZ8/BHZ+DIXWk6O4+yUlGllHCmvYOm3Cp/pEJw2dq1c7/cyVVq Hx+ZLl9EvjTq3VduZwSyF/Fe663NTvV37XUHUzujgpl/3nCmprcO/fjsfEERXTn1 xx+eURdLM86fzKNwYu1cc6ykoQh9dpDNSGH9qwrJWBoxNvCwqqTEvel141d+ELFP W5wjj7mMtMhqBcN+gh86RY9f63Ov3CJ1iFLNophq1+S0fP6E63CY2FyroC/uoP09 F+3MkgxgdWJyN/yMQy9S4LiDePe/IPSi19N97+dUhZCMvaarwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe4JcwUBmGxm/U2J53IjO97h6gAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y2MjllZDMtNWMzMi0z M2U3LWE2ZGYtOTg4NTg5ZGYxMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8Fd40Bs3Z1/uEE3OviFMSdMbN1cd7lE7jjC4UJ+WkKhUsh1pk6XK+i F+3en6m5RuFY4nXiWv4UbcG8X80e9n4dcEbKQB0h5JX4evLzUIGbH4iu1pHB9imZ arKaJuBJWNQeHe6PapznS2T9G67voDMuJl/O+nntrvLLE1UW7pwdxPVsm4TZb/e+ WUiladp0v16e4XDby6/4E7Zi8GsWN1YVggg8c3LStWsuJkt8zgDwVeMTo8+O5RCt M3gC5AAlV2huGGpTwC70AHm9dwBSAGcJPAiwPGa23xYtfprcF1W09Fc4HwZCC0i1 c51HAXZG3ijUOuVdoN/pHzyra/peeD0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:27 2025 by rpki-client