$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4eb0fff3-22b9-32b3-94c0-a7df9e00c6b7.roa File: 4eb0fff3-22b9-32b3-94c0-a7df9e00c6b7.roa (raw, json) Hash identifier: hgcxRqh1GeaIXPA69YoowS9bGiuyXLaxj7LXhh3pzuc= Subject key identifier: AD:B7:37:56:C2:EF:F9:6A:A4:5E:BE:72:5D:E7:C8:0B:BD:73:98:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BBDA1B8765FA4F022780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4eb0fff3-22b9-32b3-94c0-a7df9e00c6b7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:da:1b:87:65:fa:4f:02:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=38412511-1cfa-403b-aae6-3c0a4a5e588d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:6a:28:45:bd:48:12:86:6a:46:f0:1a:3a: e6:93:e0:5b:04:57:4e:f5:32:5b:98:fb:ea:ff:1c: 47:01:1c:b8:05:14:98:46:71:8d:b0:82:71:a4:72: 49:fd:c1:53:b7:c2:98:40:e4:ba:61:29:77:53:42: f4:18:7c:48:2b:ac:9c:7b:fe:ac:11:9d:5f:2e:e5: c1:bc:2e:4e:0d:c2:5e:76:ed:5b:fc:28:35:7a:11: 27:ed:37:b0:5b:2d:20:07:bd:08:bd:a5:6e:3b:45: dc:47:50:bb:ae:32:00:63:14:d0:e0:4a:81:44:c0: fd:44:45:ec:99:5d:5d:57:20:fe:b9:5f:d7:1b:eb: b5:30:ec:fb:0b:17:96:d5:56:e7:9b:80:42:fb:d9: 66:0a:a5:68:4d:c0:80:d3:c2:ba:e0:de:30:54:ba: 08:83:14:6b:27:0d:b4:17:6c:99:87:be:f3:87:36: a9:11:a3:0c:86:62:0f:7a:5c:01:36:5a:f6:ea:bd: bc:28:ac:bf:76:47:5e:6c:1c:fa:77:68:cc:85:a5: f6:9f:75:07:70:3d:93:45:dc:6f:bc:b1:3a:1c:51: 71:82:a4:b0:7b:91:35:25:42:d7:92:1c:74:ae:91: 9e:77:ef:5c:f1:db:ba:de:b7:5e:45:ad:fb:0a:fa: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:37:56:C2:EF:F9:6A:A4:5E:BE:72:5D:E7:C8:0B:BD:73:98:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4eb0fff3-22b9-32b3-94c0-a7df9e00c6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5b:9c:5f:90:2c:a9:bb:7a:7c:a0:80:71:a9:13:60:fd:67: ca:ce:cf:e1:46:4e:09:ff:fb:56:18:1f:bf:d2:71:19:28:f8: 0d:35:d8:d0:1e:9c:6a:47:7a:e5:8d:96:46:e1:47:2d:9c:a4: 36:3c:be:08:8a:d7:09:ec:b8:43:ad:2a:ee:84:1e:6d:7f:54: 35:82:1f:1e:8a:4f:f9:77:27:08:d6:d5:86:5b:e5:69:40:bb: d2:5e:06:d2:de:0e:11:da:f6:31:bf:f2:ca:d8:5e:73:d8:6b: 78:a8:76:e7:ae:e5:02:76:94:db:90:86:7a:46:09:43:5e:0a: 83:4e:7c:6a:bb:f9:e4:ab:3c:9c:18:ba:f2:d8:23:45:42:af: b6:64:6b:eb:1a:cf:38:d4:24:21:69:76:85:3f:1c:f6:fb:15: b3:78:d0:ba:3f:7a:fe:26:98:b9:de:08:5c:9c:99:fa:77:0f: 61:af:91:45:16:51:1d:b0:20:7a:ce:2c:7e:e8:ba:b5:46:08: a3:51:b1:74:84:b6:a7:a0:dd:3e:e3:89:cd:22:8c:41:dc:cc: c0:be:68:51:d3:9b:da:4b:1e:7b:32:e6:6f:96:ad:5f:f7:73: 68:cf:87:41:06:16:22:74:60:1d:71:86:fe:74:e4:9e:df:77: a4:d7:3f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLvaG4dl+k8CJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Mzg0MTI1MTEtMWNmYS00MDNiLWFhZTYtM2MwYTRhNWU1ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ZqKEW9SBKGakbwGjrmk+BbBFdO9TJbmPvq /xxHARy4BRSYRnGNsIJxpHJJ/cFTt8KYQOS6YSl3U0L0GHxIK6yce/6sEZ1fLuXB vC5ODcJedu1b/Cg1ehEn7TewWy0gB70IvaVuO0XcR1C7rjIAYxTQ4EqBRMD9REXs mV1dVyD+uV/XG+u1MOz7CxeW1Vbnm4BC+9lmCqVoTcCA08K64N4wVLoIgxRrJw20 F2yZh77zhzapEaMMhmIPelwBNlr26r28KKy/dkdebBz6d2jMhaX2n3UHcD2TRdxv vLE6HFFxgqSwe5E1JULXkhx0rpGed+9c8du63rdeRa37Cvp3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK23N1bC7/lqpF6+cl3nyAu9c5iTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGViMGZmZjMtMjJiOS0z MmIzLTk0YzAtYTdkZjllMDBjNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRbnF+QLKm7enyggHGpE2D9Z8rOz+FGTgn/+1YYH7/ScRko+A012NAe nGpHeuWNlkbhRy2cpDY8vgiK1wnsuEOtKu6EHm1/VDWCHx6KT/l3JwjW1YZb5WlA u9JeBtLeDhHa9jG/8srYXnPYa3iodueu5QJ2lNuQhnpGCUNeCoNOfGq7+eSrPJwY uvLYI0VCr7Zka+sazzjUJCFpdoU/HPb7FbN40Lo/ev4mmLneCFycmfp3D2GvkUUW UR2wIHrOLH7ourVGCKNRsXSEtqeg3T7jic0ijEHczMC+aFHTm9pLHnsy5m+WrV/3 c2jPh0EGFiJ0YB1xhv505J7fd6TXPxU= -----END CERTIFICATE-----Generated at Fri May 9 03:27:20 2025 by rpki-client