$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc12faa8-65c4-3b5a-bc09-6c9fa3fbba6a.roa File: fc12faa8-65c4-3b5a-bc09-6c9fa3fbba6a.roa (raw, json) Hash identifier: 3s8fIzppA6hW54qlLK27bffGpWWrPjNX9h7OtSiN62I= Subject key identifier: 1A:95:C4:1B:95:F8:DC:A7:39:6B:98:DC:6D:23:B6:8F:AA:B3:F1:FF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2620185EBC5D1F920FCF480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc12faa8-65c4-3b5a-bc09-6c9fa3fbba6a.roa Signing time: Mon 03 Feb 2025 11:11:11 +0000 ROA not before: Mon 03 Feb 2025 11:11:11 +0000 ROA not after: Sun 04 May 2025 10:11:11 +0000 asID: 30036 IP address blocks: 173.29.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:62:01:85:eb:c5:d1:f9:20:fc:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:11:11 2025 GMT Not After : May 4 10:11:11 2025 GMT Subject: CN=681aea12-f140-4e4f-a35b-f4cb5ccc0dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:e4:fc:aa:7f:c6:34:52:93:7a:e0:5b:8c: 7c:47:33:29:6b:2f:b4:0f:a2:5e:b3:1f:8b:1f:c0: f5:68:dd:a2:91:40:47:66:b5:40:a3:58:60:16:01: 9b:84:75:69:69:f0:b4:3d:54:0d:51:fb:b3:4d:09: 3d:fc:d7:00:10:04:c9:dc:19:65:5c:04:b8:c0:08: e6:5a:65:e5:1b:58:4a:01:6e:ae:5d:38:ed:b8:37: e9:67:a0:e5:17:24:f1:3d:30:02:11:ac:33:e5:e5: 1a:10:9a:f2:11:44:3a:7e:b1:47:7d:0f:d7:b9:6f: d9:a6:db:0d:df:0e:56:fd:5a:5a:2e:50:6a:c0:99: 34:30:14:ed:d8:eb:07:e6:f4:40:5a:32:76:65:2e: 40:39:e3:b9:ca:cb:29:31:3c:3d:c5:08:cf:4a:5c: 9d:2a:cb:39:34:ad:bd:a3:10:72:22:89:22:32:57: 50:eb:44:55:95:3f:5e:ff:52:67:d0:a4:27:4a:e0: af:09:55:fa:06:95:bc:a8:93:42:94:fd:85:57:bd: 50:6e:52:e7:03:06:37:a9:f0:c0:9e:79:d9:70:10: f9:7a:3c:0f:4a:67:7b:0b:79:a7:20:02:f2:ce:35: d2:ec:bb:c5:75:4b:97:8f:c3:af:eb:9a:c8:af:72: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:95:C4:1B:95:F8:DC:A7:39:6B:98:DC:6D:23:B6:8F:AA:B3:F1:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc12faa8-65c4-3b5a-bc09-6c9fa3fbba6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:03:37:33:4c:2b:43:48:41:bc:56:b0:c5:dd:89:1d:27:60: 05:4a:0e:da:b2:87:c3:c0:00:99:8d:aa:fb:dc:c9:89:94:a4: 57:4e:7c:d8:82:ea:bb:63:4f:6d:3b:b7:f2:6d:6c:53:8b:97: 27:f5:0e:dc:84:c2:6b:3d:78:a9:dc:03:63:25:b2:96:2d:24: 7c:43:43:b2:4d:07:aa:4e:0e:5f:0c:00:a7:29:9e:58:ca:5d: 5a:43:8b:5f:42:e3:97:4d:9d:24:c5:b8:2c:11:d2:df:de:77: 55:09:57:0f:88:6a:39:0a:15:3d:79:d8:8a:ec:41:93:67:4d: c9:e0:f3:eb:55:92:13:fd:41:f1:01:8b:b1:57:ee:6d:89:c4: f6:8d:a7:3c:4f:a0:93:49:af:d2:63:06:bf:32:05:92:ef:1e: fd:80:fb:96:83:ca:62:d2:db:b1:5f:53:98:b6:97:ec:45:ad: e5:d0:34:71:b9:e0:96:a8:ef:a9:24:15:11:35:ac:8c:2c:59: a7:f3:be:89:32:aa:ec:45:6f:b5:e0:97:5d:4e:67:ab:d7:c1: 7e:ce:bd:fa:bf:76:86:08:65:ab:1c:39:ca:e6:a3:6f:f3:17: cd:5e:89:8e:97:a6:c4:f0:04:5a:88:1b:d0:9f:82:f9:39:16: dc:ed:ac:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYgGF68XR+SD89IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTExMVoXDTI1MDUwNDEwMTExMVowLzEtMCsGA1UEAxMk NjgxYWVhMTItZjE0MC00ZTRmLWEzNWItZjRjYjVjY2MwZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Hk/Kp/xjRSk3rgW4x8RzMpay+0D6Jesx+L H8D1aN2ikUBHZrVAo1hgFgGbhHVpafC0PVQNUfuzTQk9/NcAEATJ3BllXAS4wAjm WmXlG1hKAW6uXTjtuDfpZ6DlFyTxPTACEawz5eUaEJryEUQ6frFHfQ/XuW/ZptsN 3w5W/VpaLlBqwJk0MBTt2OsH5vRAWjJ2ZS5AOeO5ysspMTw9xQjPSlydKss5NK29 oxByIokiMldQ60RVlT9e/1Jn0KQnSuCvCVX6BpW8qJNClP2FV71QblLnAwY3qfDA nnnZcBD5ejwPSmd7C3mnIALyzjXS7LvFdUuXj8Ov65rIr3IzTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqVxBuV+NynOWuY3G0jto+qs/H/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmMxMmZhYTgtNjVjNC0z YjVhLWJjMDktNmM5ZmEzZmJiYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8DNzNMK0NIQbxWsMXdiR0nYAVKDtqyh8PAAJmNqvvcyYmUpFdOfNiC 6rtjT207t/JtbFOLlyf1DtyEwms9eKncA2MlspYtJHxDQ7JNB6pODl8MAKcpnljK XVpDi19C45dNnSTFuCwR0t/ed1UJVw+IajkKFT152IrsQZNnTcng8+tVkhP9QfEB i7FX7m2JxPaNpzxPoJNJr9JjBr8yBZLvHv2A+5aDymLS27FfU5i2l+xFreXQNHG5 4Jao76kkFRE1rIwsWafzvokyquxFb7Xgl11OZ6vXwX7Ovfq/doYIZascOcrmo2/z F81eiY6XpsTwBFqIG9Cfgvk5FtztrKc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:04 2025 by rpki-client