$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa File: 845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa (raw, json) Hash identifier: dEs8SbAZjhZCI199m7767aFfAtvjJy15l6+0ner9FMo= Subject key identifier: C0:50:F8:7F:03:C5:39:78:BD:24:1E:B3:3B:68:B5:CC:67:A3:21:05 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FDC648D04FEC021C6F40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fd:c6:48:d0:4f:ec:02:1c:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f67ff7c0-8359-41af-b7e7-07fb5f9b11a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:55:48:e2:3c:8e:30:22:da:ac:02:d3:38: ed:55:87:dc:ec:15:f1:12:1a:ec:5d:c0:22:61:cb: 31:32:22:5b:da:57:f6:77:2d:e7:a9:a9:f2:0f:da: bd:4c:28:72:ea:d1:92:cf:42:1d:0a:cd:61:80:fb: c4:49:59:f5:72:df:c8:95:34:06:fc:6d:c3:d0:29: 04:76:7f:e0:08:0d:f5:34:9e:22:01:5a:61:fd:03: 86:ce:b7:04:6e:d8:00:50:fd:1b:c8:6c:fa:c8:2f: 1e:e7:ee:00:e0:96:b3:e8:3a:64:b1:03:e6:42:4c: 35:d0:ab:90:a6:7a:15:93:cd:d9:9b:ea:6c:60:4f: 42:90:83:0d:6d:bc:45:33:54:c4:db:ce:f7:b5:0b: cb:17:3d:0b:eb:e2:d9:1d:18:f3:82:81:95:f4:42: dd:60:4c:8d:8e:d0:be:ed:e3:e3:1f:d2:28:b4:64: e9:ef:98:dd:58:c4:5b:8a:95:ed:f7:45:52:99:b9: d5:ff:6e:35:b2:0a:12:8f:bd:1c:94:29:4e:7f:74: 9e:c0:10:c0:82:59:58:e9:c0:b6:9c:7f:8f:22:ef: 08:50:ad:08:4c:6a:47:fd:9f:62:a5:76:b6:96:b2: 1a:fd:c5:77:61:c6:f1:9c:cb:db:26:4e:f3:ba:fa: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:50:F8:7F:03:C5:39:78:BD:24:1E:B3:3B:68:B5:CC:67:A3:21:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:af:21:24:d7:ba:6d:ec:aa:f7:03:bd:91:a7:47:50:99:e4: 98:f3:45:03:27:46:22:40:d9:80:a7:0a:a9:2a:b9:00:3f:dc: bd:4a:48:8a:91:8f:8f:90:a7:7b:61:7e:68:68:7c:e3:06:9f: 59:87:a6:9a:67:97:e3:1d:fc:d0:c8:81:61:16:19:7e:93:6f: 70:8c:c7:98:1b:25:f1:6c:ac:82:36:55:59:c1:81:39:3e:3a: 4d:a7:42:3d:bd:c3:22:58:e3:fb:2e:ac:78:6a:0b:c1:06:83: 4f:c7:f7:1a:24:20:64:59:a0:85:34:16:ac:c5:05:6e:87:94: 6e:59:cd:6e:19:99:0a:e4:5d:8a:cb:3b:72:b2:ca:ee:1a:87: 6b:33:2e:fa:e9:81:87:cf:db:bb:2a:b0:cd:1f:80:d7:37:b7: 22:d6:8e:f2:86:65:b9:f1:5b:db:e7:71:e1:f5:22:b0:27:22: 28:31:1b:83:1a:55:45:12:d1:10:21:0e:0b:39:9e:76:de:be: 98:cb:74:fc:ae:f5:18:95:50:a7:5a:1a:0a:6a:9b:40:d6:46: 05:27:39:08:45:61:b9:06:5e:2e:d3:e7:5f:b3:65:cc:3c:3c: 55:46:ca:e2:c2:93:e5:19:79:9b:15:5d:52:a9:88:90:c0:70: be:16:dc:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf3GSNBP7AIcb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjY3ZmY3YzAtODM1OS00MWFmLWI3ZTctMDdmYjVmOWIxMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcVVSOI8jjAi2qwC0zjtVYfc7BXxEhrsXcAi YcsxMiJb2lf2dy3nqanyD9q9TChy6tGSz0IdCs1hgPvESVn1ct/IlTQG/G3D0CkE dn/gCA31NJ4iAVph/QOGzrcEbtgAUP0byGz6yC8e5+4A4Jaz6DpksQPmQkw10KuQ pnoVk83Zm+psYE9CkIMNbbxFM1TE2873tQvLFz0L6+LZHRjzgoGV9ELdYEyNjtC+ 7ePjH9IotGTp75jdWMRbipXt90VSmbnV/241sgoSj70clClOf3SewBDAgllY6cC2 nH+PIu8IUK0ITGpH/Z9ipXa2lrIa/cV3YcbxnMvbJk7zuvrsSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBQ+H8DxTl4vSQesztotcxnoyEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ1ODQwZjgtYTNlZC0z ZDY3LWFjZTMtMTBiMTNlOWM0N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOvISTXum3sqvcDvZGnR1CZ5JjzRQMnRiJA2YCnCqkquQA/3L1KSIqR j4+Qp3thfmhofOMGn1mHpppnl+Md/NDIgWEWGX6Tb3CMx5gbJfFsrII2VVnBgTk+ Ok2nQj29wyJY4/surHhqC8EGg0/H9xokIGRZoIU0FqzFBW6HlG5ZzW4ZmQrkXYrL O3Kyyu4ah2szLvrpgYfP27sqsM0fgNc3tyLWjvKGZbnxW9vnceH1IrAnIigxG4Ma VUUS0RAhDgs5nnbevpjLdPyu9RiVUKdaGgpqm0DWRgUnOQhFYbkGXi7T51+zZcw8 PFVGyuLCk+UZeZsVXVKpiJDAcL4W3Kw= -----END CERTIFICATE-----Generated at Thu May 8 22:53:29 2025 by rpki-client