$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2b8e47f-27b7-3330-b8c6-b39b2c8bd0d8.roa File: e2b8e47f-27b7-3330-b8c6-b39b2c8bd0d8.roa (raw, json) Hash identifier: LUV+79bC3KgvK/b2d/sYLrtiJ1e1dLfaFNVSo+20CCo= Subject key identifier: 5F:01:37:7C:1E:4D:47:EB:1D:86:40:AC:02:1F:30:57:5A:53:0A:C7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B735DD6812ED7C1054667380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2b8e47f-27b7-3330-b8c6-b39b2c8bd0d8.roa Signing time: Thu 30 Jan 2025 11:08:21 +0000 ROA not before: Thu 30 Jan 2025 11:08:21 +0000 ROA not after: Wed 30 Apr 2025 10:08:21 +0000 asID: 30036 IP address blocks: 173.29.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:35:dd:68:12:ed:7c:10:54:66:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:08:21 2025 GMT Not After : Apr 30 10:08:21 2025 GMT Subject: CN=e99f028b-0da7-433d-aa6c-69073c01d6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:e4:71:d7:23:bf:13:8c:91:7c:79:84:fe: 15:29:a5:69:14:65:91:94:a0:59:d3:39:88:a1:58: d5:95:0d:01:73:e7:ad:a7:26:ca:95:22:4d:36:13: a0:b7:38:f0:f9:06:f6:7a:29:32:7b:60:1a:95:3e: 64:93:c1:e7:90:d8:6b:46:25:0a:2b:5f:1b:b8:39: 32:8d:1e:51:5a:1a:4e:5e:75:c2:f2:aa:bc:b0:23: 0a:f3:a5:ee:b9:b2:0d:d6:15:30:27:3d:23:55:51: 54:aa:8d:0b:2b:72:18:e0:28:7b:be:a5:6c:29:9c: 51:43:c4:3b:9e:92:4d:ba:16:c9:59:34:00:e2:e8: 00:72:57:2a:2f:9a:d8:b2:2d:41:88:87:eb:16:22: 5f:c2:c6:30:4a:75:ce:1a:c8:76:fe:5a:a5:ad:46: 63:df:d3:40:e6:f8:31:0e:5c:05:6b:5f:62:25:54: d7:95:71:95:88:95:ba:bd:77:d0:00:81:d1:8f:aa: fe:af:1b:a8:f0:58:a6:5f:44:33:d1:b5:74:85:a3: 09:a5:47:5c:d7:30:a5:ec:ca:3c:d8:77:a5:3c:fc: 1e:00:21:ee:92:7f:73:42:fb:c0:21:ed:39:8f:cd: ff:ce:7d:09:33:0b:6c:70:ff:6e:6d:ea:d7:96:ce: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:01:37:7C:1E:4D:47:EB:1D:86:40:AC:02:1F:30:57:5A:53:0A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2b8e47f-27b7-3330-b8c6-b39b2c8bd0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c9:08:56:cb:59:96:b1:d0:cf:95:85:23:09:b2:49:06:60: 77:71:d6:9a:08:36:37:73:68:d3:a8:14:1e:3a:fe:c1:21:01: 8f:de:dd:00:9c:b9:a5:ce:eb:20:36:54:c2:d3:87:40:4d:90: a9:8e:de:bc:e5:72:10:f9:35:25:0f:2b:ae:f5:5a:48:61:8e: 16:26:02:bd:18:7f:18:c5:2e:88:c7:bf:7d:f0:b7:d6:ba:8c: 32:b2:8f:64:32:88:77:43:06:4b:5f:d4:bf:00:e0:a4:e7:40: 1a:72:b6:f4:f2:a9:b0:73:4f:31:e9:f2:83:de:b3:b1:5b:da: 5c:52:44:60:23:7d:31:5f:12:a0:bd:a2:46:60:e6:74:6f:96: 41:74:8f:f7:dd:02:98:bb:83:35:41:f6:32:05:0f:77:ea:1a: ee:dc:26:9c:d4:a2:25:55:a8:22:83:8e:ce:8f:8f:c6:14:f3: ed:c0:20:0d:17:90:0e:e9:05:5c:05:2c:f3:61:30:ef:6c:d2: 7d:84:e8:ed:5f:ba:2d:0f:a7:74:41:17:fe:ee:16:7b:15:84: b0:f6:ac:11:d8:ff:a1:74:ee:a5:74:77:44:24:60:ab:c3:2a: 0f:79:24:9f:00:23:00:ec:75:e4:a5:d5:f3:24:70:1f:cd:bb: 85:12:6f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nd1oEu18EFRmc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDgyMVoXDTI1MDQzMDEwMDgyMVowLzEtMCsGA1UEAxMk ZTk5ZjAyOGItMGRhNy00MzNkLWFhNmMtNjkwNzNjMDFkNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA377kcdcjvxOMkXx5hP4VKaVpFGWRlKBZ0zmI oVjVlQ0Bc+etpybKlSJNNhOgtzjw+Qb2eikye2AalT5kk8HnkNhrRiUKK18buDky jR5RWhpOXnXC8qq8sCMK86XuubIN1hUwJz0jVVFUqo0LK3IY4Ch7vqVsKZxRQ8Q7 npJNuhbJWTQA4ugAclcqL5rYsi1BiIfrFiJfwsYwSnXOGsh2/lqlrUZj39NA5vgx DlwFa19iJVTXlXGViJW6vXfQAIHRj6r+rxuo8FimX0Qz0bV0haMJpUdc1zCl7Mo8 2HelPPweACHukn9zQvvAIe05j83/zn0JMwtscP9uberXls6ewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8BN3weTUfrHYZArAIfMFdaUwrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTJiOGU0N2YtMjdiNy0z MzMwLWI4YzYtYjM5YjJjOGJkMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnJCFbLWZax0M+VhSMJskkGYHdx1poINjdzaNOoFB46/sEhAY/e3QCc uaXO6yA2VMLTh0BNkKmO3rzlchD5NSUPK671WkhhjhYmAr0YfxjFLojHv33wt9a6 jDKyj2QyiHdDBktf1L8A4KTnQBpytvTyqbBzTzHp8oPes7Fb2lxSRGAjfTFfEqC9 okZg5nRvlkF0j/fdApi7gzVB9jIFD3fqGu7cJpzUoiVVqCKDjs6Pj8YU8+3AIA0X kA7pBVwFLPNhMO9s0n2E6O1fui0Pp3RBF/7uFnsVhLD2rBHY/6F07qV0d0QkYKvD Kg95JJ8AIwDsdeSl1fMkcB/Nu4USb38= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:14 2025 by rpki-client