$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e455feb0-be56-3319-8f48-36e76a13bdbc.roa File: e455feb0-be56-3319-8f48-36e76a13bdbc.roa (raw, json) Hash identifier: II87jM5uPXRlPtHAR0ufxhlLvxp3yNhww39oO6KgkuU= Subject key identifier: B3:54:D8:17:99:CB:DF:1E:60:8A:6D:8A:BA:A6:BD:82:05:7B:F2:49 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C263F6954E5AB750F7277260 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e455feb0-be56-3319-8f48-36e76a13bdbc.roa Signing time: Mon 03 Feb 2025 11:15:07 +0000 ROA not before: Mon 03 Feb 2025 11:15:07 +0000 ROA not after: Sun 04 May 2025 10:15:07 +0000 asID: 30036 IP address blocks: 173.29.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:63:f6:95:4e:5a:b7:50:f7:27:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:15:07 2025 GMT Not After : May 4 10:15:07 2025 GMT Subject: CN=d62a96a1-f914-42d7-83bf-f5ed63a025f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:d1:56:ad:85:4d:5e:ae:c4:0b:95:88:c7: 5b:cd:6e:ab:da:5c:d3:a1:74:77:70:72:31:64:71: f9:b4:c3:44:53:be:fb:5d:88:00:2c:60:8d:a4:94: 4a:05:8a:f3:b7:6b:91:65:c1:1a:e3:65:f3:a0:d4: 86:3f:d4:9d:be:ce:d4:07:e5:21:c7:37:47:ad:37: fd:9c:fb:8f:6c:f2:94:58:64:fb:63:f2:d2:f6:fa: 16:22:53:3c:b7:f7:d4:3f:37:5e:4c:7c:9c:0a:0a: 01:70:a9:8c:7c:92:8a:f0:2f:23:25:40:d3:21:df: ee:3d:cb:ab:dd:5b:48:67:15:e4:b0:78:dc:0f:52: df:7f:2c:23:f0:ac:ce:dd:a3:37:59:17:90:2c:54: 28:32:79:11:7b:4f:23:d9:cd:41:45:99:af:56:a1: c2:0d:b8:b3:bf:c8:9c:73:7c:b5:6e:08:56:60:1e: 75:8c:21:cd:9e:0d:8a:e1:5d:d7:95:a9:30:4a:e9: 2f:ed:f7:80:70:c8:65:a0:0f:29:d6:5f:80:47:fa: fb:b4:44:5b:30:23:c5:e8:8e:7e:ad:d3:57:ff:e5: 31:57:ee:f1:f6:87:44:6d:05:08:a0:a8:42:ac:c7: 46:5a:60:c0:42:5a:f5:0f:b3:12:4b:7a:1e:3a:bc: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:54:D8:17:99:CB:DF:1E:60:8A:6D:8A:BA:A6:BD:82:05:7B:F2:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e455feb0-be56-3319-8f48-36e76a13bdbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b4:11:65:9d:2a:ec:f2:a0:19:50:14:5c:93:6a:d5:fc:53: ff:5e:3a:18:45:06:c0:1e:bb:fc:c0:67:74:6c:dd:02:40:a3: 0d:29:a6:9d:01:07:78:88:bb:fb:e8:f5:72:ce:11:c7:8a:30: 21:ce:14:7e:66:ff:37:63:aa:61:8f:76:83:fb:aa:9e:f7:b3: 6e:be:a5:f4:10:fb:37:f1:c4:57:99:83:5f:f1:97:58:15:fb: 25:34:19:4f:73:c6:ee:73:7f:e7:06:95:6a:29:f0:c9:59:f0: 3c:5c:ba:ad:e5:29:bc:2f:97:04:79:64:c0:75:25:29:e5:19: eb:f4:b2:ed:af:0c:19:14:bd:e9:03:26:d7:18:63:34:ca:8e: 44:51:45:07:fb:be:d7:72:63:53:f4:ff:d3:58:5a:73:2d:a7: fa:b4:73:b3:7c:ea:f5:69:10:df:f3:26:b1:74:43:d2:f0:89: ab:b3:0a:b5:19:8f:29:7d:9c:47:5d:ec:29:52:a1:11:d1:87: ed:bd:f6:2c:66:be:f2:13:9a:27:f9:6d:0d:09:8d:b3:ee:b5: 15:c0:37:de:7f:2f:5a:cd:be:12:ef:0e:e7:89:4e:d6:00:9c: a8:b5:3d:9c:f1:19:fb:f4:f8:93:63:c1:ba:f5:90:82:04:1e: 28:ca:58:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCY/aVTlq3UPcncmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTUwN1oXDTI1MDUwNDEwMTUwN1owLzEtMCsGA1UEAxMk ZDYyYTk2YTEtZjkxNC00MmQ3LTgzYmYtZjVlZDYzYTAyNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxHRVq2FTV6uxAuViMdbzW6r2lzToXR3cHIx ZHH5tMNEU777XYgALGCNpJRKBYrzt2uRZcEa42XzoNSGP9Sdvs7UB+UhxzdHrTf9 nPuPbPKUWGT7Y/LS9voWIlM8t/fUPzdeTHycCgoBcKmMfJKK8C8jJUDTId/uPcur 3VtIZxXksHjcD1Lffywj8KzO3aM3WReQLFQoMnkRe08j2c1BRZmvVqHCDbizv8ic c3y1bghWYB51jCHNng2K4V3XlakwSukv7feAcMhloA8p1l+AR/r7tERbMCPF6I5+ rdNX/+UxV+7x9odEbQUIoKhCrMdGWmDAQlr1D7MSS3oeOrxrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNU2BeZy98eYIptirqmvYIFe/JJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTQ1NWZlYjAtYmU1Ni0z MzE5LThmNDgtMzZlNzZhMTNiZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG20EWWdKuzyoBlQFFyTatX8U/9eOhhFBsAeu/zAZ3Rs3QJAow0ppp0B B3iIu/vo9XLOEceKMCHOFH5m/zdjqmGPdoP7qp73s26+pfQQ+zfxxFeZg1/xl1gV +yU0GU9zxu5zf+cGlWop8MlZ8Dxcuq3lKbwvlwR5ZMB1JSnlGev0su2vDBkUvekD JtcYYzTKjkRRRQf7vtdyY1P0/9NYWnMtp/q0c7N86vVpEN/zJrF0Q9LwiauzCrUZ jyl9nEdd7ClSoRHRh+299ixmvvITmif5bQ0JjbPutRXAN95/L1rNvhLvDueJTtYA nKi1PZzxGfv0+JNjwbr1kIIEHijKWAc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:38 2025 by rpki-client