$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06cbe769-5420-3106-a78d-8b24bc476121.roa File: 06cbe769-5420-3106-a78d-8b24bc476121.roa (raw, json) Hash identifier: MDLhtXNpdWs5Ex4phkrY5cV+tmQ1bJD33gYkUYZaiag= Subject key identifier: 02:39:25:52:0C:FA:6F:6A:33:13:B5:68:86:E8:88:52:B5:1D:1F:82 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A389B2A46AD397F53100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06cbe769-5420-3106-a78d-8b24bc476121.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.29.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a3:89:b2:a4:6a:d3:97:f5:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=493ed160-2c11-4bb5-b28a-309129431949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a1:4f:ae:83:1e:2f:fd:2d:b1:63:7d:e2:e6: 09:41:16:ac:d7:80:93:34:72:e7:12:d3:52:c2:5f: 45:53:67:9f:68:4d:90:43:4c:6c:a8:dd:a5:7b:8c: 8f:ac:36:6e:b2:bb:72:96:33:40:30:f8:4f:9b:29: f2:43:87:0a:32:e6:0e:98:74:04:0b:09:c5:5b:a8: 90:0f:7a:bd:22:d9:6b:c1:29:7d:c9:e9:a3:c9:f5: 76:3a:f5:37:0c:ac:4e:37:7e:73:fb:2d:e7:e2:c0: 4e:4e:c4:83:5b:e9:73:fe:8c:c7:4a:6a:f1:6e:ec: 48:42:a1:1f:55:b0:e6:90:27:90:b3:e5:e7:6c:6b: b9:63:cf:8c:60:09:b4:ea:d5:72:02:c1:b9:40:eb: 17:ab:a2:1c:c6:14:e9:b5:ce:c1:7a:fe:9f:d0:df: 8a:98:e7:cd:ec:0d:f1:9c:0c:e8:09:f2:b2:b5:ba: f5:8e:77:da:5f:27:7d:49:ff:94:7f:7a:11:9c:dd: 65:2d:fb:f5:88:7d:90:7d:03:b3:53:f2:4c:96:eb: c9:c3:c7:d6:c3:66:a6:c4:26:42:f0:68:63:41:4b: 45:1e:cd:26:e8:78:14:cc:71:cb:0a:ec:81:24:b7: 6a:d7:c7:2b:cf:a3:70:5a:aa:00:7e:f6:11:6d:6d: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:39:25:52:0C:FA:6F:6A:33:13:B5:68:86:E8:88:52:B5:1D:1F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06cbe769-5420-3106-a78d-8b24bc476121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:57:de:1e:28:d0:9b:12:2e:ae:0e:c6:c5:27:e7:b0:68:77: 91:20:11:65:f2:bc:22:be:c5:17:c4:17:80:75:fb:16:2e:8a: f2:f6:c7:9a:53:0b:2b:7f:c3:88:d0:21:0a:59:bf:8e:4c:ee: 40:c1:4c:ba:5f:43:77:64:75:6a:62:c8:50:be:a9:41:2f:d2: 79:ed:3d:fd:9d:d9:85:b5:44:f5:c0:cc:73:fe:8c:ae:c7:be: cb:54:e8:24:c8:2e:f7:9f:c7:ab:46:c4:b0:8f:30:44:62:a9: cf:25:50:a8:87:51:00:65:c3:dc:0c:f7:bc:72:5a:68:3b:bd: cd:e7:8d:56:7c:48:d1:21:e3:4c:d9:e2:1a:5c:0f:4a:58:4d: 1a:f8:25:64:a7:18:6c:30:a1:b6:2e:da:79:5a:51:ff:77:26: 49:d8:23:d1:73:3f:33:0e:47:db:87:4c:9a:ca:61:bc:cf:34: e3:d6:c2:c5:6f:74:60:b9:ec:23:71:a9:d6:8d:68:7a:25:ad: ec:e6:5b:f5:d4:f8:3e:2b:8c:3a:b5:03:0b:f6:d0:54:72:24: 2e:cb:53:07:23:ee:3a:7a:74:3c:b9:96:0d:30:3c:56:3f:94: e4:03:f2:ce:91:8a:bb:33:3c:4a:b4:b7:3e:6b:24:9a:12:bb: 59:3b:f4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKOJsqRq05f1MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDkzZWQxNjAtMmMxMS00YmI1LWIyOGEtMzA5MTI5NDMxOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaFProMeL/0tsWN94uYJQRas14CTNHLnEtNS wl9FU2efaE2QQ0xsqN2le4yPrDZusrtyljNAMPhPmynyQ4cKMuYOmHQECwnFW6iQ D3q9ItlrwSl9yemjyfV2OvU3DKxON35z+y3n4sBOTsSDW+lz/ozHSmrxbuxIQqEf VbDmkCeQs+XnbGu5Y8+MYAm06tVyAsG5QOsXq6IcxhTptc7Bev6f0N+KmOfN7A3x nAzoCfKytbr1jnfaXyd9Sf+Uf3oRnN1lLfv1iH2QfQOzU/JMluvJw8fWw2amxCZC 8GhjQUtFHs0m6HgUzHHLCuyBJLdq18crz6NwWqoAfvYRbW3aKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI5JVIM+m9qMxO1aIboiFK1HR+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDZjYmU3NjktNTQyMC0z MTA2LWE3OGQtOGIyNGJjNDc2MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZX3h4o0JsSLq4OxsUn57Bod5EgEWXyvCK+xRfEF4B1+xYuivL2x5pT Cyt/w4jQIQpZv45M7kDBTLpfQ3dkdWpiyFC+qUEv0nntPf2d2YW1RPXAzHP+jK7H vstU6CTILvefx6tGxLCPMERiqc8lUKiHUQBlw9wM97xyWmg7vc3njVZ8SNEh40zZ 4hpcD0pYTRr4JWSnGGwwobYu2nlaUf93JknYI9FzPzMOR9uHTJrKYbzPNOPWwsVv dGC57CNxqdaNaHolrezmW/XU+D4rjDq1Awv20FRyJC7LUwcj7jp6dDy5lg0wPFY/ lOQD8s6RirszPEq0tz5rJJoSu1k79DI= -----END CERTIFICATE-----Generated at Thu May 8 23:49:38 2025 by rpki-client