$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71f7c40b-1bd9-38a7-a7b7-c2cbbe2bd506.roa File: 71f7c40b-1bd9-38a7-a7b7-c2cbbe2bd506.roa (raw, json) Hash identifier: m9L/juOOSO1e6vrh2AAv2yK+vJOUmgEJMJQ6ZF/a9OY= Subject key identifier: D0:4E:FF:6C:E8:23:97:12:E1:04:92:4E:4F:6E:02:2A:08:92:AB:59 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784AEB547FAB73F18FF1A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71f7c40b-1bd9-38a7-a7b7-c2cbbe2bd506.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ae:b5:47:fa:b7:3f:18:ff:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4ae12f6e-3055-4069-ace4-48d13c1582b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:cb:2c:7d:be:a4:24:cc:e9:38:b8:b7:b8: dc:50:ab:08:f4:06:4e:8b:e1:8d:e1:fd:27:27:a4: 66:f3:50:1e:9a:f4:6c:a8:e5:7a:5d:32:82:cd:7e: 05:dd:40:9f:c0:c4:b7:d3:1a:97:dd:96:cf:07:3e: c8:eb:6d:1b:15:63:e9:e2:5e:ab:d7:a0:5b:a5:aa: 7f:3a:ba:d9:c5:1f:2f:3b:2c:39:8b:3e:66:c2:30: 92:6e:c4:2f:1d:aa:ca:a6:09:86:29:5b:6f:4a:72: 53:d2:a6:ba:87:d7:db:0b:a0:12:f3:6f:0e:2d:11: 67:40:32:ff:91:d4:55:06:44:45:9e:60:f9:55:c9: d5:dd:e4:b4:99:06:27:3d:e4:70:b1:fb:64:a0:b9: 3c:6a:84:3d:0a:b9:a9:3c:c8:ac:cb:3f:39:f6:93: 7a:bb:79:86:76:b8:33:32:1c:3a:24:23:4b:8d:0e: e9:dd:75:70:6a:fc:3e:52:d2:df:b9:62:25:01:03: 22:7d:a4:33:e3:79:3e:9f:5f:d8:ad:06:9e:35:dd: 94:ed:0d:a1:e7:7f:38:d4:45:a0:d6:e4:e6:c6:3c: 79:20:99:d8:46:37:24:3a:cb:e5:7d:db:d0:42:a8: d4:b6:98:bf:18:c7:32:9f:bd:3f:ee:dc:4e:b0:b2: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4E:FF:6C:E8:23:97:12:E1:04:92:4E:4F:6E:02:2A:08:92:AB:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71f7c40b-1bd9-38a7-a7b7-c2cbbe2bd506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9a:b4:53:c3:75:97:7e:b6:43:86:67:37:12:87:db:f7:f8: cd:ff:6b:46:7c:f3:d6:e7:9a:62:77:b2:83:7a:de:26:7f:da: b1:db:34:21:ed:05:56:14:19:72:40:82:10:4c:14:eb:c6:4b: 6b:78:b1:89:6a:e2:f6:b0:38:62:4b:5f:a0:f6:e3:2e:db:2c: ef:15:1f:3b:62:9d:1e:e9:e4:27:42:3e:0a:9b:6d:79:1a:6d: 06:11:6a:94:a3:fd:2e:db:f9:39:62:a2:cc:95:ec:89:df:5e: 4a:30:3e:20:e8:cf:3e:b5:17:0b:b8:de:d1:35:f1:c6:23:a1: 23:06:50:79:4a:97:5b:1c:67:78:60:9a:0c:e5:34:f8:64:ce: ca:d3:d8:01:a7:60:18:0a:3d:6f:d6:0c:25:96:f0:8b:70:b8: 99:0f:a5:71:b7:67:21:3e:54:a5:9c:0c:d0:04:44:7c:d0:7f: d6:93:3c:95:f3:a1:43:be:55:20:d5:95:25:2a:0b:d3:1e:6d: 61:65:56:73:8a:32:d4:22:aa:f9:f4:90:15:7c:99:38:92:8e: d6:bf:4a:08:21:99:fa:61:bb:a9:d4:8c:84:49:07:97:2d:35: 16:a8:aa:2a:48:25:17:a8:c1:3f:b6:bd:73:c2:c0:d0:c6:90: 23:cc:14:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhK61R/q3Pxj/GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGFlMTJmNmUtMzA1NS00MDY5LWFjZTQtNDhkMTNjMTU4MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyLLLH2+pCTM6Ti4t7jcUKsI9AZOi+GN4f0n J6Rm81AemvRsqOV6XTKCzX4F3UCfwMS30xqX3ZbPBz7I620bFWPp4l6r16Bbpap/ OrrZxR8vOyw5iz5mwjCSbsQvHarKpgmGKVtvSnJT0qa6h9fbC6AS828OLRFnQDL/ kdRVBkRFnmD5VcnV3eS0mQYnPeRwsftkoLk8aoQ9CrmpPMisyz859pN6u3mGdrgz Mhw6JCNLjQ7p3XVwavw+UtLfuWIlAQMifaQz43k+n1/YrQaeNd2U7Q2h53841EWg 1uTmxjx5IJnYRjckOsvlfdvQQqjUtpi/GMcyn70/7txOsLJWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBO/2zoI5cS4QSSTk9uAioIkqtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzFmN2M0MGItMWJkOS0z OGE3LWE3YjctYzJjYmJlMmJkNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyatFPDdZd+tkOGZzcSh9v3+M3/a0Z889bnmmJ3soN63iZ/2rHbNCHt BVYUGXJAghBMFOvGS2t4sYlq4vawOGJLX6D24y7bLO8VHztinR7p5CdCPgqbbXka bQYRapSj/S7b+TliosyV7InfXkowPiDozz61Fwu43tE18cYjoSMGUHlKl1scZ3hg mgzlNPhkzsrT2AGnYBgKPW/WDCWW8ItwuJkPpXG3ZyE+VKWcDNAERHzQf9aTPJXz oUO+VSDVlSUqC9MebWFlVnOKMtQiqvn0kBV8mTiSjta/Sgghmfphu6nUjIRJB5ct NRaoqipIJReowT+2vXPCwNDGkCPMFLU= -----END CERTIFICATE-----Generated at Fri May 9 11:20:09 2025 by rpki-client