$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa File: 3d429698-2bfc-3eae-8d85-55492090ea2a.roa (raw, json) Hash identifier: FRrn/ewYDDzHrFX9HaMMOmLxjsdH982DFGnvYGq/lE8= Subject key identifier: 08:60:67:E5:60:30:0D:E6:D0:F0:FB:83:C5:44:57:B4:D7:A3:8E:D7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A31B5668C14CDFE318B3C3B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.21.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:66:8c:14:cd:fe:31:8b:3c:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=bac24215-096a-4fbd-bbbc-1c3af2a890c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:64:83:4a:e7:80:98:4d:01:0b:1d:d5:d3: 52:1b:57:af:84:59:dc:8c:53:fc:82:46:a8:81:bd: 2d:d8:3e:91:1e:9b:01:85:d9:3f:81:88:3f:80:65: 07:89:97:a6:12:40:3e:df:c9:8e:c1:7f:84:62:fa: 66:61:77:fc:ec:86:36:88:ca:cc:c8:8b:f3:e4:1f: 2a:e0:88:cd:4d:40:c5:86:34:2c:ec:39:94:84:9f: ab:bf:0a:4e:24:ab:de:6a:1d:35:04:6c:4f:d9:4d: a9:15:19:71:6f:22:e2:59:e9:ef:63:47:11:79:47: 7a:84:c6:45:42:e0:8a:80:3a:67:0b:ad:75:06:3b: 55:b8:81:77:fa:91:b6:51:7b:59:77:94:df:18:02: 14:c9:2d:ad:50:33:ae:34:c0:01:bb:70:93:22:83: 99:da:32:38:0e:de:5d:ae:05:f4:4c:9b:6f:5e:d4: 5e:ca:cc:ed:1c:2e:37:a0:50:7b:a1:e8:fc:34:68: 83:b6:b6:db:b5:dc:77:10:fa:5b:4c:52:b2:7a:ab: 6c:18:9a:b6:a2:3a:15:09:6a:ab:bd:7d:ec:f6:5d: 41:f6:45:a8:6d:e6:08:1e:75:1d:56:29:5c:a3:71: 2e:42:b9:d8:dd:bc:d0:73:a0:2e:46:90:e6:57:3f: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:60:67:E5:60:30:0D:E6:D0:F0:FB:83:C5:44:57:B4:D7:A3:8E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c0:e5:9b:25:1f:b4:00:1d:0e:98:57:ac:ed:b2:b9:48:f6: 8d:49:10:b6:f5:8a:32:68:cd:db:d3:19:71:a6:87:87:98:46: 6e:22:9c:68:15:12:bc:ef:7e:6c:c8:a8:c0:f1:ac:79:9c:33: 65:0e:56:c2:af:d0:34:5d:3f:bd:67:74:2e:a1:db:70:7e:47: 86:55:e3:96:f8:24:08:ae:04:16:97:af:bf:de:f0:c5:42:0b: 25:ed:08:b5:f1:43:70:54:23:6b:2c:6b:cc:01:a7:63:8b:47: 1b:ba:e4:ba:22:b4:f6:a0:01:e7:b0:ea:3e:1c:8e:cc:b8:2e: a7:a5:53:eb:4d:c5:79:0b:17:31:ce:f5:96:22:cc:6f:cd:b0: 05:3f:45:3d:43:ed:4e:94:03:2d:0a:8e:d5:86:8e:82:25:8a: ab:02:12:74:5b:85:7c:55:50:49:72:12:a3:5d:d1:ed:50:6a: a3:52:91:02:c9:be:82:8d:e8:db:ed:d1:2f:4f:2f:3b:68:03: 74:80:aa:c9:48:13:32:9e:f0:8f:88:f2:75:82:6c:0b:66:f8: 51:f7:69:ac:67:54:40:e4:cb:89:f6:76:2a:60:1e:ac:98:cc: b9:09:98:84:d5:cf:0c:c3:a7:bd:15:fa:35:67:bd:16:c4:84: 8c:90:89:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWaMFM3+MYs8O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk YmFjMjQyMTUtMDk2YS00ZmJkLWJiYmMtMWMzYWYyYTg5MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphJkg0rngJhNAQsd1dNSG1evhFncjFP8gkao gb0t2D6RHpsBhdk/gYg/gGUHiZemEkA+38mOwX+EYvpmYXf87IY2iMrMyIvz5B8q 4IjNTUDFhjQs7DmUhJ+rvwpOJKveah01BGxP2U2pFRlxbyLiWenvY0cReUd6hMZF QuCKgDpnC611BjtVuIF3+pG2UXtZd5TfGAIUyS2tUDOuNMABu3CTIoOZ2jI4Dt5d rgX0TJtvXtReysztHC43oFB7oej8NGiDtrbbtdx3EPpbTFKyeqtsGJq2ojoVCWqr vX3s9l1B9kWobeYIHnUdVilco3EuQrnY3bzQc6AuRpDmVz+g2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhgZ+VgMA3m0PD7g8VEV7TXo47XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q0Mjk2OTgtMmJmYy0z ZWFlLThkODUtNTU0OTIwOTBlYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrA5ZslH7QAHQ6YV6ztsrlI9o1JELb1ijJozdvTGXGmh4eYRm4inGgV ErzvfmzIqMDxrHmcM2UOVsKv0DRdP71ndC6h23B+R4ZV45b4JAiuBBaXr7/e8MVC CyXtCLXxQ3BUI2ssa8wBp2OLRxu65LoitPagAeew6j4cjsy4LqelU+tNxXkLFzHO 9ZYizG/NsAU/RT1D7U6UAy0KjtWGjoIliqsCEnRbhXxVUElyEqNd0e1QaqNSkQLJ voKN6Nvt0S9PLztoA3SAqslIEzKe8I+I8nWCbAtm+FH3aaxnVEDky4n2dipgHqyY zLkJmITVzwzDp70V+jVnvRbEhIyQie8= -----END CERTIFICATE-----Generated at Sun Jun 29 22:50:54 2025 by rpki-client