$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa File: a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa (raw, json) Hash identifier: 0fsG6Q7p5lf3Nf1/QuGDQKTnkPzoISwRJFmYM9rgAsI= Subject key identifier: 3B:77:21:97:48:03:C0:9C:C2:57:34:75:A2:CE:9B:A4:3B:F9:7D:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4F7FCFE00AAFCC8FD8300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa Signing time: Tue 22 Apr 2025 09:37:42 +0000 ROA not before: Tue 22 Apr 2025 09:37:42 +0000 ROA not after: Mon 21 Jul 2025 09:37:42 +0000 asID: 19905 IP address blocks: 173.21.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:f7:fc:fe:00:aa:fc:c8:fd:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:42 2025 GMT Not After : Jul 21 09:37:42 2025 GMT Subject: CN=5676c954-844e-4cda-b601-90b409c315cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:a6:46:da:67:cb:40:b4:6a:89:8b:08:7c: c0:71:74:57:d0:98:68:c7:10:be:bf:68:92:5a:1b: 5c:8a:26:de:5a:88:5a:73:70:d7:2d:e6:d3:74:9f: ee:ad:19:06:d4:b9:a9:7d:96:fe:f1:cb:f5:09:7c: ec:92:77:8f:a0:75:c7:dc:d0:a7:bc:f4:60:29:49: 33:76:ee:71:50:91:16:c4:77:e5:43:6b:c1:11:b1: 13:7a:61:0b:49:2f:52:73:38:ba:a5:55:82:a2:b0: 62:19:0e:27:ef:03:c3:46:e0:cd:e9:cf:0d:08:4f: 79:f5:66:7b:4e:e7:ce:ba:02:d3:08:49:34:ad:b1: 19:b8:2d:64:c5:9a:69:a3:c9:e0:af:3a:39:14:34: cf:10:15:17:11:e9:78:c5:c9:c5:14:47:ec:5f:53: d8:00:81:fa:ec:27:6b:ca:e3:f9:fb:46:45:e3:91: c1:0b:58:01:e7:4f:9d:71:06:21:76:51:44:a0:34: 36:6c:bf:bd:ea:07:84:51:a9:78:8b:77:84:1d:3a: cd:94:d6:38:39:4b:2e:fd:9b:8c:6f:4f:ff:d5:0e: 78:7a:88:26:52:5d:43:43:d3:5f:65:b5:c0:a9:60: 28:60:a8:82:bd:6c:23:d4:e3:fc:6b:3b:75:c8:77: c2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:77:21:97:48:03:C0:9C:C2:57:34:75:A2:CE:9B:A4:3B:F9:7D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:70:c9:2b:74:bf:00:df:55:52:ab:69:78:29:6f:7e:86:ca: 8d:b5:65:ce:91:f8:db:e4:b6:14:22:33:96:4b:20:47:25:30: 4b:58:d2:3f:22:bb:b7:59:44:87:9e:8e:63:bb:fd:55:89:5a: 0a:18:b9:ea:23:4e:e4:95:64:2e:7a:cd:c3:f8:0c:df:18:a1: 05:ce:6d:d7:92:82:ad:7a:10:9a:95:0e:b8:ce:15:1a:e8:51: cd:aa:0b:55:c8:06:55:97:58:39:bc:4b:19:a1:12:c3:5e:73: 50:fc:bd:8a:20:13:41:83:ce:68:47:41:12:b9:2b:e7:1c:bc: 53:5c:49:82:29:6d:0c:9c:f8:96:f5:7e:45:72:ba:ca:fa:3d: 86:89:99:82:06:fb:99:7d:49:cd:0a:07:c2:cc:54:3e:b6:03: 2c:a9:67:81:19:90:f8:cd:70:f1:6b:4a:4e:3a:83:95:61:be: 6f:b7:b5:17:62:ed:94:58:f3:d8:fe:74:1d:42:b8:14:6e:4f: 99:d1:0c:01:7d:db:75:23:fa:56:a3:ca:74:ac:8d:7f:a5:12: af:d1:ce:7e:b5:7f:ac:d2:78:ce:7e:5d:59:9f:43:55:d9:5c: 20:ef:b2:54:23:05:08:f9:5b:2a:12:0c:16:0a:cc:59:d8:5e: 3d:8b:52:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9Pf8/gCq/Mj9gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5Mzc0MloXDTI1MDcyMTA5Mzc0MlowLzEtMCsGA1UEAxMk NTY3NmM5NTQtODQ0ZS00Y2RhLWI2MDEtOTBiNDA5YzMxNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcimRtpny0C0aomLCHzAcXRX0JhoxxC+v2iS WhtciibeWohac3DXLebTdJ/urRkG1LmpfZb+8cv1CXzsknePoHXH3NCnvPRgKUkz du5xUJEWxHflQ2vBEbETemELSS9Sczi6pVWCorBiGQ4n7wPDRuDN6c8NCE959WZ7 TufOugLTCEk0rbEZuC1kxZppo8ngrzo5FDTPEBUXEel4xcnFFEfsX1PYAIH67Cdr yuP5+0ZF45HBC1gB50+dcQYhdlFEoDQ2bL+96geEUal4i3eEHTrNlNY4OUsu/ZuM b0//1Q54eogmUl1DQ9NfZbXAqWAoYKiCvWwj1OP8azt1yHfCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDt3IZdIA8Ccwlc0daLOm6Q7+X25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTQwZWM4NWEtZDZiZS0z NTEwLWI4MWMtZWNiZTNlZGUyMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNwySt0vwDfVVKraXgpb36Gyo21Zc6R+NvkthQiM5ZLIEclMEtY0j8i u7dZRIeejmO7/VWJWgoYueojTuSVZC56zcP4DN8YoQXObdeSgq16EJqVDrjOFRro Uc2qC1XIBlWXWDm8SxmhEsNec1D8vYogE0GDzmhHQRK5K+ccvFNcSYIpbQyc+Jb1 fkVyusr6PYaJmYIG+5l9Sc0KB8LMVD62AyypZ4EZkPjNcPFrSk46g5Vhvm+3tRdi 7ZRY89j+dB1CuBRuT5nRDAF923Uj+lajynSsjX+lEq/Rzn61f6zSeM5+XVmfQ1XZ XCDvslQjBQj5WyoSDBYKzFnYXj2LUoU= -----END CERTIFICATE-----Generated at Tue May 6 22:43:51 2025 by rpki-client