$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c45503ad-0e4a-3ed6-a57c-7a82c505ef0b.roa File: c45503ad-0e4a-3ed6-a57c-7a82c505ef0b.roa (raw, json) Hash identifier: 9G0IWmmvMxN3l1SpOWPY0yMcjp533mc3yZze40h6lj8= Subject key identifier: AB:2A:9C:8D:E9:35:90:34:63:5E:56:22:0F:6D:29:9E:F1:D6:F1:E5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BD53EE3818A189586C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c45503ad-0e4a-3ed6-a57c-7a82c505ef0b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.29.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bd:53:ee:38:18:a1:89:58:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ec65b541-115f-4cd1-98cd-193ce7793bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:fe:93:40:a3:20:c8:02:b9:40:0c:39:b2: b8:2a:43:7e:01:6f:37:32:16:83:6d:ff:94:28:d4: 52:2a:17:39:ec:f0:fb:dc:18:02:15:b5:c0:2e:8a: 67:15:d9:88:db:f8:0b:c0:20:45:9d:8b:55:46:53: f4:80:30:5f:15:28:1f:e5:1f:5e:02:c9:d3:fb:e1: 43:bd:2a:cf:42:d8:76:ef:cf:e5:be:bd:dc:ac:b8: 44:15:32:be:fd:94:4f:1d:a4:11:d2:31:70:e6:84: 0e:65:71:f7:a5:1b:2a:aa:86:9e:fa:26:4b:37:c8: 62:b6:d1:c9:0c:cb:7b:45:02:11:54:38:7f:13:58: 8e:95:05:22:aa:c0:2f:c5:0d:6d:8c:68:7c:6b:42: fc:b1:2d:74:de:68:5a:d3:6f:64:96:b1:b4:fe:69: 58:48:d7:54:df:c8:f0:24:07:ef:b6:0c:e5:cd:e5: 09:c2:16:71:ba:d2:67:c4:c7:2a:78:d3:46:39:6a: 95:70:be:ef:64:9c:df:48:e3:e2:73:05:36:1c:ec: f5:05:5d:23:4c:28:65:6e:84:f1:5d:9a:ef:41:da: a4:fc:84:f6:3c:54:4a:e5:bf:84:da:1a:22:ac:76: 2b:95:1b:98:03:ea:7d:67:85:d3:7c:af:aa:26:9c: eb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:9C:8D:E9:35:90:34:63:5E:56:22:0F:6D:29:9E:F1:D6:F1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c45503ad-0e4a-3ed6-a57c-7a82c505ef0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:85:37:40:e8:43:e6:b4:03:ff:3b:51:4b:00:e0:45:14:d5: 6b:8e:c4:c2:cb:4b:4d:a3:d5:4d:ea:f1:5f:81:eb:2d:48:c5: e4:49:cb:b2:51:66:5b:4c:a5:cf:48:98:0a:ee:81:81:33:8f: 60:2a:57:7e:e7:03:c7:3d:ff:eb:ed:99:ab:5a:d5:a6:ad:80: e6:2e:72:e2:61:b4:84:19:1c:c5:91:00:2e:9e:4f:4e:ad:7a: 61:af:d9:83:01:4f:0f:74:99:4d:90:0c:5f:22:47:aa:ab:9d: 44:68:7a:66:03:f1:5e:5d:c2:e8:33:c9:eb:50:b5:9b:e0:ec: 69:8d:40:2a:46:c6:a7:bb:c4:31:8e:14:77:48:8e:d7:23:2a: 67:6e:de:90:8c:54:06:5d:74:80:0e:56:a1:5a:52:16:8e:54: 18:62:0c:ed:b8:81:4d:01:37:b1:13:6c:f4:34:ab:65:74:ec: b9:a4:0e:a6:ad:bf:02:01:1d:b3:f2:1c:17:18:64:3a:b8:0b: 52:0e:7e:b6:32:1d:5e:49:da:20:0d:18:a1:6e:01:cf:b5:63: e0:9d:fe:6a:6d:6f:de:e1:16:6a:26:db:6d:41:6b:3f:51:41: f8:3f:c2:95:7f:57:b3:9e:33:2e:b1:9b:4f:c6:8e:2d:b4:98: 27:9f:51:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhL1T7jgYoYlYbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWM2NWI1NDEtMTE1Zi00Y2QxLTk4Y2QtMTkzY2U3NzkzYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ3+k0CjIMgCuUAMObK4KkN+AW83MhaDbf+U KNRSKhc57PD73BgCFbXALopnFdmI2/gLwCBFnYtVRlP0gDBfFSgf5R9eAsnT++FD vSrPQth278/lvr3crLhEFTK+/ZRPHaQR0jFw5oQOZXH3pRsqqoae+iZLN8hittHJ DMt7RQIRVDh/E1iOlQUiqsAvxQ1tjGh8a0L8sS103mha029klrG0/mlYSNdU38jw JAfvtgzlzeUJwhZxutJnxMcqeNNGOWqVcL7vZJzfSOPicwU2HOz1BV0jTChlboTx XZrvQdqk/IT2PFRK5b+E2hoirHYrlRuYA+p9Z4XTfK+qJpzruwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsqnI3pNZA0Y15WIg9tKZ7x1vHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzQ1NTAzYWQtMGU0YS0z ZWQ2LWE1N2MtN2E4MmM1MDVlZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuFN0DoQ+a0A/87UUsA4EUU1WuOxMLLS02j1U3q8V+B6y1IxeRJy7JR ZltMpc9ImArugYEzj2AqV37nA8c9/+vtmata1aatgOYucuJhtIQZHMWRAC6eT06t emGv2YMBTw90mU2QDF8iR6qrnURoemYD8V5dwugzyetQtZvg7GmNQCpGxqe7xDGO FHdIjtcjKmdu3pCMVAZddIAOVqFaUhaOVBhiDO24gU0BN7ETbPQ0q2V07LmkDqat vwIBHbPyHBcYZDq4C1IOfrYyHV5J2iANGKFuAc+1Y+Cd/mptb97hFmom221Baz9R Qfg/wpV/V7OeMy6xm0/Gji20mCefUYs= -----END CERTIFICATE-----Generated at Thu May 8 22:59:11 2025 by rpki-client