$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa File: c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa (raw, json) Hash identifier: QzG5AW2Y9Y/YCmeWTG/jhTiVaXs6GOqcx3kZOjIoEW4= Subject key identifier: D1:3E:F9:E3:86:B1:C1:2C:34:AF:59:5D:68:D9:1E:12:04:C4:37:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF5D9273A67F70C3282880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.29.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:5d:92:73:a6:7f:70:c3:28:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=5794fa70-a3f4-4b39-87fa-b144d0f063b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b5:e7:61:44:2a:84:ab:a8:d0:e5:c9:a2:c6: d2:86:9c:f2:87:de:bc:1b:6d:ea:46:7d:92:d2:74: 33:9d:2c:d7:9b:c3:5e:c5:0d:01:91:de:0d:9a:e3: f3:3b:56:c3:53:bd:15:65:df:80:1d:77:8d:66:ed: 87:07:e4:df:b3:a5:57:e9:65:87:c1:2b:e9:81:34: 72:51:63:0b:62:e9:c9:a3:b6:ff:3c:5a:e6:1e:7b: 2c:99:75:19:28:7d:db:ed:1b:e6:b2:76:f5:f5:1b: 1e:08:3a:0a:53:3e:25:7d:e2:4a:51:9a:4f:e4:d1: 7f:b9:e9:67:cd:5e:3b:c4:d3:2e:c5:47:59:4f:1d: c8:84:72:fe:3f:dc:b4:72:5f:bb:96:5a:8e:55:1d: ff:53:cf:c1:ce:99:65:f9:db:72:a7:a5:ad:00:c9: bc:29:ce:cb:22:aa:dc:12:7d:30:7e:3a:9d:b6:43: 60:36:65:4a:b8:bc:9a:a3:83:3e:c5:eb:fe:e2:36: 4d:25:0f:b2:cd:65:7a:33:56:c5:b2:3e:4e:66:48: e8:e9:e3:d1:9a:83:7c:07:5c:98:30:48:bc:48:4f: 05:09:6b:60:1e:b3:13:7d:37:40:df:b8:27:7f:b8: 6b:2c:d3:43:14:ea:10:0a:68:6c:a8:6d:a5:23:c6: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3E:F9:E3:86:B1:C1:2C:34:AF:59:5D:68:D9:1E:12:04:C4:37:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:56:a5:81:c6:da:5c:43:3f:4e:6d:2c:78:74:d3:18:24:8a: d3:ca:9e:83:a0:1d:e2:19:ba:c3:bb:d5:02:bb:b6:49:17:97: b7:0b:32:a6:17:02:ec:7b:68:5b:ff:9a:82:d5:73:be:07:1c: a0:e4:c2:6b:7c:0a:03:0f:c4:aa:e7:b7:73:83:0e:ed:f4:b8: 39:50:95:4c:28:d7:71:98:dd:ce:0d:f1:d0:bb:2a:51:5a:f6: 2c:de:d1:16:1b:a0:32:96:50:0b:72:1e:90:3b:f4:48:c9:7f: af:ac:78:60:f3:53:18:df:98:2f:83:03:96:20:98:bd:34:6b: 5b:24:63:46:1c:ca:44:46:56:b3:4c:d2:02:3e:a0:67:03:05: f7:29:1f:43:65:9d:3f:e5:6d:75:06:01:47:e6:21:e7:ac:99: 37:ed:2a:e5:1b:10:ea:97:05:0f:cc:ee:10:af:0f:84:4c:d1: 4b:93:17:0f:74:0e:a0:0b:08:0a:1f:26:ce:8b:f4:53:6f:8a: 03:87:a9:22:cc:e1:cd:05:9f:93:49:be:4e:55:ae:62:31:25: 3b:5e:31:78:24:a4:31:38:79:43:92:a7:31:c2:7f:80:d8:8c: 68:d9:65:b4:64:c8:96:ef:95:46:32:8a:c8:60:51:e0:40:5d: 62:83:64:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh712Sc6Z/cMMoKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NTc5NGZhNzAtYTNmNC00YjM5LTg3ZmEtYjE0NGQwZjA2M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbXnYUQqhKuo0OXJosbShpzyh968G23qRn2S 0nQznSzXm8NexQ0Bkd4NmuPzO1bDU70VZd+AHXeNZu2HB+Tfs6VX6WWHwSvpgTRy UWMLYunJo7b/PFrmHnssmXUZKH3b7Rvmsnb19RseCDoKUz4lfeJKUZpP5NF/ueln zV47xNMuxUdZTx3IhHL+P9y0cl+7llqOVR3/U8/Bzpll+dtyp6WtAMm8Kc7LIqrc En0wfjqdtkNgNmVKuLyao4M+xev+4jZNJQ+yzWV6M1bFsj5OZkjo6ePRmoN8B1yY MEi8SE8FCWtgHrMTfTdA37gnf7hrLNNDFOoQCmhsqG2lI8arCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE++eOGscEsNK9ZXWjZHhIExDejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzg3NmMxYmMtMDBmZC0z YjE1LWE3OGItZDVlODhkOTkxNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZWpYHG2lxDP05tLHh00xgkitPKnoOgHeIZusO71QK7tkkXl7cLMqYX Aux7aFv/moLVc74HHKDkwmt8CgMPxKrnt3ODDu30uDlQlUwo13GY3c4N8dC7KlFa 9ize0RYboDKWUAtyHpA79EjJf6+seGDzUxjfmC+DA5YgmL00a1skY0YcykRGVrNM 0gI+oGcDBfcpH0NlnT/lbXUGAUfmIeesmTftKuUbEOqXBQ/M7hCvD4RM0UuTFw90 DqALCAofJs6L9FNvigOHqSLM4c0Fn5NJvk5VrmIxJTteMXgkpDE4eUOSpzHCf4DY jGjZZbRkyJbvlUYyishgUeBAXWKDZJw= -----END CERTIFICATE-----Generated at Fri May 9 19:25:25 2025 by rpki-client