$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdcd0f93-8c7e-306d-81a3-d67b55639ff1.roa File: fdcd0f93-8c7e-306d-81a3-d67b55639ff1.roa (raw, json) Hash identifier: u9P68E72NUiKe8Sz5k8pd0f99VzWjqZ92zPhp0rJqH0= Subject key identifier: A5:7A:BA:00:EE:45:28:3F:EF:F8:A4:83:C0:CF:06:AD:C4:9E:14:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4900C84CA1EDD1B518380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdcd0f93-8c7e-306d-81a3-d67b55639ff1.roa Signing time: Tue 22 Apr 2025 09:36:53 +0000 ROA not before: Tue 22 Apr 2025 09:36:53 +0000 ROA not after: Mon 21 Jul 2025 09:36:53 +0000 asID: 19905 IP address blocks: 173.29.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:90:0c:84:ca:1e:dd:1b:51:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:36:53 2025 GMT Not After : Jul 21 09:36:53 2025 GMT Subject: CN=e8862b7e-25b2-4a20-a4ef-d7b7a27ba3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:47:b0:c5:8f:4e:84:24:7d:64:3c:08:00: 39:67:bd:84:d4:8d:a2:8f:0d:a2:87:95:61:c3:07: a2:a6:56:b9:cf:c5:34:c8:4c:8e:5e:9f:20:23:f2: d3:21:6d:75:81:56:76:30:29:fb:04:2b:cb:a7:b5: af:ed:80:97:d0:ce:cb:42:85:58:5e:9b:a0:65:b3: d0:4d:b1:b5:a6:f8:15:84:77:52:84:9c:3b:42:31: 18:97:00:b6:a0:8a:c4:c3:83:c4:65:01:0d:a4:54: 14:31:ec:a1:e9:2a:57:c2:5e:9d:14:76:40:1b:f7: f0:75:88:5c:d2:1d:7c:04:71:69:06:45:a4:04:fd: 37:83:c1:f6:e8:93:3f:c2:07:18:07:5b:9f:ee:7d: 8b:75:7b:2a:ec:e2:94:2a:0b:37:5a:1d:37:cf:43: e9:d9:25:2d:d5:ae:9f:5e:67:b9:42:e3:fb:77:ee: ff:8e:d7:17:74:2e:77:06:db:7f:e2:f8:59:9a:3a: 80:87:00:d9:e7:20:79:73:ae:bd:4a:93:22:22:05: db:1a:10:2c:2a:5e:05:eb:f2:b8:17:67:df:67:a8: 78:ee:16:e5:3e:c2:10:30:69:c9:4e:1b:43:13:38: 83:65:13:c0:59:48:d3:0b:c3:73:a9:b1:ac:84:e3: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:BA:00:EE:45:28:3F:EF:F8:A4:83:C0:CF:06:AD:C4:9E:14:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdcd0f93-8c7e-306d-81a3-d67b55639ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4c:ce:a7:da:90:09:e9:02:75:23:81:96:99:9f:de:e1:f4: 0c:e1:f4:cc:51:3d:b5:39:2f:f1:4d:12:9f:70:bf:d0:75:d5: de:11:42:2b:20:8f:75:c0:9c:37:03:54:65:2e:66:3e:b5:86: 60:02:f3:77:1e:87:64:fb:7d:a2:dc:4a:64:cc:53:81:4c:7f: 51:fd:82:63:f2:d1:08:84:a0:85:8f:38:0d:d3:1b:f2:2f:bd: a5:e2:c9:5d:f2:28:e2:82:7b:c1:97:c1:5e:a0:9b:88:e2:b4: 31:99:eb:61:a9:14:b8:fe:75:ed:23:da:d7:c1:8d:02:c9:69: d3:10:2f:90:99:7f:23:be:10:53:24:68:9a:6c:14:62:c5:36: 87:7d:0a:30:7d:9b:58:c0:52:74:0f:bb:35:59:47:19:93:a7: 76:3c:f4:48:c0:bf:a6:d2:d3:86:9c:a1:96:a2:42:fa:7e:20: 0f:dd:6a:cb:f6:bf:0f:a8:bd:e4:ab:a2:41:3d:94:12:6d:47: 4f:e7:46:1c:87:71:30:f7:ce:0b:ef:1d:db:c8:4b:36:85:0c: 17:26:db:92:ae:89:d7:21:22:1f:1c:4d:11:27:4f:c1:09:e4: 5a:59:0b:e3:34:5b:7c:10:fd:34:4a:49:c7:a8:0f:3d:7a:fd: c4:c3:ea:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9JAMhMoe3RtRg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5MzY1M1oXDTI1MDcyMTA5MzY1M1owLzEtMCsGA1UEAxMk ZTg4NjJiN2UtMjViMi00YTIwLWE0ZWYtZDdiN2EyN2JhM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxupHsMWPToQkfWQ8CAA5Z72E1I2ijw2ih5Vh wweipla5z8U0yEyOXp8gI/LTIW11gVZ2MCn7BCvLp7Wv7YCX0M7LQoVYXpugZbPQ TbG1pvgVhHdShJw7QjEYlwC2oIrEw4PEZQENpFQUMeyh6SpXwl6dFHZAG/fwdYhc 0h18BHFpBkWkBP03g8H26JM/wgcYB1uf7n2LdXsq7OKUKgs3Wh03z0Pp2SUt1a6f Xme5QuP7d+7/jtcXdC53Btt/4vhZmjqAhwDZ5yB5c669SpMiIgXbGhAsKl4F6/K4 F2ffZ6h47hblPsIQMGnJThtDEziDZRPAWUjTC8NzqbGshOPntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV6ugDuRSg/7/ikg8DPBq3EnhQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmRjZDBmOTMtOGM3ZS0z MDZkLTgxYTMtZDY3YjU1NjM5ZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5MzqfakAnpAnUjgZaZn97h9Azh9MxRPbU5L/FNEp9wv9B11d4RQisg j3XAnDcDVGUuZj61hmAC83ceh2T7faLcSmTMU4FMf1H9gmPy0QiEoIWPOA3TG/Iv vaXiyV3yKOKCe8GXwV6gm4jitDGZ62GpFLj+de0j2tfBjQLJadMQL5CZfyO+EFMk aJpsFGLFNod9CjB9m1jAUnQPuzVZRxmTp3Y89EjAv6bS04acoZaiQvp+IA/dasv2 vw+oveSrokE9lBJtR0/nRhyHcTD3zgvvHdvISzaFDBcm25KuidchIh8cTREnT8EJ 5FpZC+M0W3wQ/TRKSceoDz16/cTD6rA= -----END CERTIFICATE-----Generated at Wed May 7 15:43:32 2025 by rpki-client