$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa File: e1286f83-b066-3ef9-aa8b-3557d8930371.roa (raw, json) Hash identifier: HR/SLKjgRtgFpFr7b97WDWpXfukzCge6b4pdQ/Ou9EU= Subject key identifier: 31:DE:E9:B5:D9:34:DE:48:FD:68:24:96:F8:F3:63:EB:1F:AF:71:CF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784AE93AA283A67C598AE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ae:93:aa:28:3a:67:c5:98:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2dfb894f-109f-451a-85b0-22b1000cb2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:f4:4b:f7:1a:39:56:d8:0f:24:90:cf:79: 6d:73:16:61:15:c2:05:c7:01:ad:3f:c9:45:45:b9: c7:6a:7d:aa:45:31:ec:d3:15:fa:17:0e:44:7e:d8: c5:6b:d4:b2:24:cf:9b:56:3c:dd:6e:18:7f:1b:8c: 42:82:35:4b:dc:ca:63:e7:bb:a4:ea:a9:8f:06:78: 03:f4:64:e1:b3:5f:8b:3f:d9:3a:9c:b9:1a:cc:1e: 38:80:14:8d:6e:ac:40:8d:17:1d:70:cc:7a:00:06: 97:77:b1:27:9f:9e:12:e3:96:8f:6c:58:7b:6d:6f: c4:e8:29:a1:e9:82:58:95:6d:d4:53:4c:67:ee:00: 7a:fc:cf:3c:f2:a6:e8:23:2d:14:b9:12:c6:78:d6: 1e:a9:ae:85:44:d2:04:17:2d:01:44:12:8a:ba:df: 7e:8d:40:70:d1:31:98:e0:ee:09:6a:0c:a7:68:e5: 07:d6:b6:fb:cf:81:10:54:8a:2b:3a:b6:8b:9b:ef: b7:d5:4e:a4:07:f6:ce:67:d5:3b:0a:3d:b2:cb:b8: ce:81:d9:58:7e:ad:76:e5:a7:47:2f:59:68:74:11: cf:b1:5d:c5:da:18:cf:58:c6:5d:00:21:ef:43:d5: ef:ea:50:67:c7:57:fc:66:a5:c6:52:02:60:4a:b1: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DE:E9:B5:D9:34:DE:48:FD:68:24:96:F8:F3:63:EB:1F:AF:71:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:65:bc:23:d1:c9:f5:55:b7:d7:42:15:dc:23:38:5d:c5:8b: 2e:18:ca:1f:b7:9d:7a:81:9e:05:81:8e:5d:20:91:91:99:68: df:69:44:52:dc:5d:30:58:68:26:b1:21:fc:5e:ad:be:81:5a: 1b:69:6a:90:87:c1:30:6b:9f:e9:1b:14:6e:66:6d:98:04:29: 54:28:54:d0:9c:8b:b7:13:42:cb:ac:ee:3e:da:44:48:42:8e: 18:b4:18:82:1d:26:ec:75:be:7f:8a:d8:83:ff:8b:f2:cf:92: e2:19:dc:14:71:b2:22:9a:14:7f:ab:b4:d2:f5:be:8d:2b:d8: d8:d3:ed:51:5e:9e:a2:e4:77:e8:5e:44:97:73:51:1a:14:3f: 71:95:1e:51:85:87:0c:b8:e3:11:24:1c:80:4a:ed:2e:30:79: 51:bf:8b:e6:9c:c0:c5:7a:65:b2:e2:75:44:ce:61:eb:01:bc: 6c:ba:7c:86:89:d8:f4:2e:10:4f:e7:79:6b:a6:8a:c5:e2:af: 19:ee:af:b5:42:5d:c1:67:cb:de:3d:f7:a9:1b:7b:f0:de:85: bf:5b:68:f6:14:be:a8:a2:e4:be:3f:61:55:68:68:72:8b:4e: ee:29:19:03:77:18:a6:18:a9:e3:b8:f1:d1:5f:04:c7:95:22: 8c:cb:db:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhK6Tqig6Z8WYroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmRmYjg5NGYtMTA5Zi00NTFhLTg1YjAtMjJiMTAwMGNiMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjv0S/caOVbYDySQz3ltcxZhFcIFxwGtP8lF RbnHan2qRTHs0xX6Fw5EftjFa9SyJM+bVjzdbhh/G4xCgjVL3Mpj57uk6qmPBngD 9GThs1+LP9k6nLkazB44gBSNbqxAjRcdcMx6AAaXd7Enn54S45aPbFh7bW/E6Cmh 6YJYlW3UU0xn7gB6/M888qboIy0UuRLGeNYeqa6FRNIEFy0BRBKKut9+jUBw0TGY 4O4JagynaOUH1rb7z4EQVIorOraLm++31U6kB/bOZ9U7Cj2yy7jOgdlYfq125adH L1lodBHPsV3F2hjPWMZdACHvQ9Xv6lBnx1f8ZqXGUgJgSrGdXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHe6bXZNN5I/WgklvjzY+sfr3HPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTEyODZmODMtYjA2Ni0z ZWY5LWFhOGItMzU1N2Q4OTMwMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxlvCPRyfVVt9dCFdwjOF3Fiy4Yyh+3nXqBngWBjl0gkZGZaN9pRFLc XTBYaCaxIfxerb6BWhtpapCHwTBrn+kbFG5mbZgEKVQoVNCci7cTQsus7j7aREhC jhi0GIIdJux1vn+K2IP/i/LPkuIZ3BRxsiKaFH+rtNL1vo0r2NjT7VFenqLkd+he RJdzURoUP3GVHlGFhwy44xEkHIBK7S4weVG/i+acwMV6ZbLidUTOYesBvGy6fIaJ 2PQuEE/neWumisXirxnur7VCXcFny94996kbe/Dehb9baPYUvqii5L4/YVVoaHKL Tu4pGQN3GKYYqeO48dFfBMeVIozL24g= -----END CERTIFICATE-----Generated at Sat May 10 06:37:08 2025 by rpki-client