$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa File: 6debec62-1e74-3d75-b612-7239f8322514.roa (raw, json) Hash identifier: YxzXmsBtNFtH6mTmtTgyS489GFHYLoJgRobC7uE4nYM= Subject key identifier: 43:8A:B5:33:46:1F:C7:02:F8:C0:24:CD:B0:33:D5:B2:60:A8:3B:10 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2C3BFB367A34712FD780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2c:3b:fb:36:7a:34:71:2f:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5c1fb0f3-ffba-4f47-ab75-b0c0f3a27d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:e6:08:38:79:a3:9c:1c:4a:15:f5:dd:bf: db:e0:af:77:16:32:8f:27:d4:d4:c2:89:e7:63:f5: 8f:57:7c:63:92:dd:d2:73:bd:7a:52:4c:57:df:42: 3a:b8:db:e1:c4:fd:6b:68:62:6b:3a:85:fe:e1:4b: 53:ae:3e:78:ee:05:dc:36:60:03:1a:60:80:6a:78: 84:02:84:19:35:a0:7d:b2:dd:38:b0:1d:31:24:52: 8a:69:bc:59:4a:ec:99:8a:7c:53:d9:4a:3b:2a:9c: 83:8b:9d:c1:38:30:46:79:aa:bb:7d:2e:00:36:39: 25:4c:c3:10:29:0f:dc:c4:be:77:1f:ea:f9:78:e5: 68:f1:c9:25:2f:ff:78:3d:ac:0f:04:e3:59:70:02: 07:96:29:cf:46:e1:56:a8:75:bf:8c:ef:25:9b:93: 91:31:6c:84:57:c6:00:e5:c7:38:2a:df:60:2c:7a: fc:fd:a0:c1:f6:bc:2f:78:c7:cc:33:81:31:17:95: 02:0f:2d:84:60:60:5d:e1:10:a3:cc:2c:8f:36:8a: 87:63:e3:c6:3d:79:5a:c5:35:6e:cb:04:27:b7:3b: 39:98:4d:90:5d:f6:ed:dc:50:73:dc:12:78:47:7f: 14:89:d1:6d:eb:3b:0b:13:ae:9c:6e:77:10:cc:fc: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:B5:33:46:1F:C7:02:F8:C0:24:CD:B0:33:D5:B2:60:A8:3B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:94:37:77:2e:e7:3b:e2:71:3f:b5:7c:d5:ee:b0:7c:87:b1: a7:61:57:d3:65:45:61:46:2d:53:e9:f4:42:73:ed:62:e2:c5: e9:82:a0:d3:07:c2:26:a7:5d:a7:7a:b0:2d:d0:3c:a4:55:5b: a8:72:08:3e:b8:1b:28:b9:47:37:fa:c4:69:b0:ee:ab:a9:88: 74:b4:65:ce:2e:46:91:39:d3:b2:80:4f:9f:50:cb:0f:c8:ca: c6:cc:19:45:de:37:74:1c:c4:e3:41:24:f1:f4:1e:39:f2:a9: 6e:58:4d:43:7f:78:73:dc:56:c6:b3:76:85:29:a4:7f:df:78: 1d:e8:f4:e2:1d:0a:d4:b6:1a:b2:d1:f6:20:3a:93:ca:c8:86: 34:8f:61:f2:be:98:d9:7f:bf:01:23:84:ca:c7:4d:29:e5:5c: 8d:aa:91:94:86:bf:e3:d2:3c:1d:4a:dd:5f:25:e3:58:94:8f: 7c:31:63:18:41:ca:f0:b5:be:16:82:74:cd:dc:9d:0c:6a:4b: 9f:62:5e:ef:ef:6c:ba:ab:08:c6:0a:0f:29:f8:b1:55:c5:02: 8d:6a:28:42:f2:98:33:4b:f0:10:01:75:76:6f:d3:58:32:5d: a4:9b:55:87:7f:2f:94:ab:ef:5c:90:b2:f5:ce:c7:00:07:81: 8f:8c:31:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuiw7+zZ6NHEv14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWMxZmIwZjMtZmZiYS00ZjQ3LWFiNzUtYjBjMGYzYTI3ZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0XmCDh5o5wcShX13b/b4K93FjKPJ9TUwonn Y/WPV3xjkt3Sc716UkxX30I6uNvhxP1raGJrOoX+4UtTrj547gXcNmADGmCAaniE AoQZNaB9st04sB0xJFKKabxZSuyZinxT2Uo7KpyDi53BODBGeaq7fS4ANjklTMMQ KQ/cxL53H+r5eOVo8cklL/94PawPBONZcAIHlinPRuFWqHW/jO8lm5ORMWyEV8YA 5cc4Kt9gLHr8/aDB9rwveMfMM4ExF5UCDy2EYGBd4RCjzCyPNoqHY+PGPXlaxTVu ywQntzs5mE2QXfbt3FBz3BJ4R38UidFt6zsLE66cbncQzPwLhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOKtTNGH8cC+MAkzbAz1bJgqDsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmRlYmVjNjItMWU3NC0z ZDc1LWI2MTItNzIzOWY4MzIyNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGUN3cu5zvicT+1fNXusHyHsadhV9NlRWFGLVPp9EJz7WLixemCoNMH wianXad6sC3QPKRVW6hyCD64Gyi5Rzf6xGmw7qupiHS0Zc4uRpE507KAT59Qyw/I ysbMGUXeN3QcxONBJPH0HjnyqW5YTUN/eHPcVsazdoUppH/feB3o9OIdCtS2GrLR 9iA6k8rIhjSPYfK+mNl/vwEjhMrHTSnlXI2qkZSGv+PSPB1K3V8l41iUj3wxYxhB yvC1vhaCdM3cnQxqS59iXu/vbLqrCMYKDyn4sVXFAo1qKELymDNL8BABdXZv01gy XaSbVYd/L5Sr71yQsvXOxwAHgY+MMSQ= -----END CERTIFICATE-----Generated at Fri May 9 21:43:34 2025 by rpki-client