$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3765f02-80e1-3132-8051-3dd9b15a7030.roa File: e3765f02-80e1-3132-8051-3dd9b15a7030.roa (raw, json) Hash identifier: ghchC7Vvv1w+u4//StMRqAHieMlkSF3ogW90+zbS7zE= Subject key identifier: 91:5A:53:12:2E:5C:E1:25:8F:59:AB:B8:30:36:1A:79:79:BA:13:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49592C32D8E2A627B1C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3765f02-80e1-3132-8051-3dd9b15a7030.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:95:92:c3:2d:8e:2a:62:7b:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=f81917fd-b43c-443c-834b-a3b523f0e6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:ce:19:2d:bc:f0:20:60:f4:c4:7d:4e:42: 6e:2f:4a:18:8d:9a:c9:8b:1c:a5:ca:91:7b:8d:28: 50:af:b6:80:c8:d5:e0:a8:06:fc:5b:7b:1e:0d:6f: 12:d5:7c:61:bc:d3:de:fa:b1:f1:a6:e9:d3:bb:79: 0e:c1:4d:aa:3a:e9:4f:bf:77:fe:eb:b0:89:e0:19: 0c:ab:1c:87:fd:4d:e5:f8:ff:36:b1:5d:8a:31:d1: 52:25:64:e2:3a:b9:f5:8f:1b:a0:29:f3:2d:bc:91: 67:58:8d:be:01:e7:e3:9d:11:e2:58:e8:72:cb:b4: b2:3f:71:18:38:6b:fb:02:87:62:cc:62:bb:e6:a6: 4e:6c:68:46:fa:c0:b7:f1:3d:ea:b3:0f:6c:07:1a: 0f:ee:dd:fb:66:06:16:e6:88:97:cc:e7:70:50:93: 2f:8e:70:63:21:2d:75:eb:0b:48:11:e0:65:a1:3e: 43:f3:c6:a0:41:6e:e2:2e:f6:73:51:8a:ec:e8:aa: 53:9d:1b:0d:33:d8:7e:ba:b8:0e:27:e1:57:ee:a4: 4a:02:45:2b:a2:a4:26:81:44:3b:80:c3:53:5f:52: 46:58:59:ec:55:67:df:e8:72:71:f2:2e:7a:fb:9c: 36:ca:29:fa:a6:14:71:a0:dd:67:49:ec:bf:42:1d: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5A:53:12:2E:5C:E1:25:8F:59:AB:B8:30:36:1A:79:79:BA:13:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3765f02-80e1-3132-8051-3dd9b15a7030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b8:68:da:27:23:19:8c:0a:47:2f:6e:68:f3:43:c4:85:04: b2:c7:d8:f4:a6:df:eb:8d:d0:51:63:a8:52:a1:2f:05:39:db: cf:cf:f4:f9:46:a8:3a:18:92:55:7d:21:1c:71:4d:3f:19:78: 5d:ff:d8:75:1f:b0:30:83:ff:fa:f0:0b:9f:70:6d:3d:bc:dc: 21:b3:47:fc:fa:7c:9d:7b:09:3c:bd:02:4f:bd:bc:c3:0e:3c: 0a:cc:5b:41:08:c9:bc:9d:fe:90:dc:6b:36:28:33:d4:b1:83: 41:da:04:96:a5:53:a4:46:8d:ed:f5:e0:af:47:89:44:ff:4d: f3:23:1a:50:54:64:3a:fd:e9:17:d5:5d:aa:98:25:05:1e:42: fc:8d:4a:3d:ce:ed:d4:44:b7:f9:fd:bb:e4:57:a5:40:f2:3d: 90:32:b3:63:82:41:ba:46:d3:95:bc:62:3e:1e:00:d1:9d:91: 5c:fa:39:01:9b:35:d2:da:b6:67:67:0d:d2:6a:6d:9f:57:9a: 0c:c5:d8:3a:1c:01:bc:cf:1a:3f:0a:a6:9b:76:b4:c0:37:6d: e1:97:21:86:98:0c:f7:0e:3d:3b:d5:26:26:a4:4e:fa:d1:d7: 89:bf:52:05:1b:f1:65:7e:d5:7f:4b:a8:49:30:4d:3d:0b:ea: f4:26:c6:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJWSwy2OKmJ7HEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjgxOTE3ZmQtYjQzYy00NDNjLTgzNGItYTNiNTIzZjBlNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3THOGS288CBg9MR9TkJuL0oYjZrJixylypF7 jShQr7aAyNXgqAb8W3seDW8S1XxhvNPe+rHxpunTu3kOwU2qOulPv3f+67CJ4BkM qxyH/U3l+P82sV2KMdFSJWTiOrn1jxugKfMtvJFnWI2+AefjnRHiWOhyy7SyP3EY OGv7AodizGK75qZObGhG+sC38T3qsw9sBxoP7t37ZgYW5oiXzOdwUJMvjnBjIS11 6wtIEeBloT5D88agQW7iLvZzUYrs6KpTnRsNM9h+urgOJ+FX7qRKAkUroqQmgUQ7 gMNTX1JGWFnsVWff6HJx8i56+5w2yin6phRxoN1nSey/Qh0u/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFaUxIuXOElj1mruDA2Gnl5uhNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTM3NjVmMDItODBlMS0z MTMyLTgwNTEtM2RkOWIxNWE3MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS4aNonIxmMCkcvbmjzQ8SFBLLH2PSm3+uN0FFjqFKhLwU528/P9PlG qDoYklV9IRxxTT8ZeF3/2HUfsDCD//rwC59wbT283CGzR/z6fJ17CTy9Ak+9vMMO PArMW0EIybyd/pDcazYoM9Sxg0HaBJalU6RGje314K9HiUT/TfMjGlBUZDr96RfV XaqYJQUeQvyNSj3O7dREt/n9u+RXpUDyPZAys2OCQbpG05W8Yj4eANGdkVz6OQGb NdLatmdnDdJqbZ9XmgzF2DocAbzPGj8Kppt2tMA3beGXIYaYDPcOPTvVJiakTvrR 14m/UgUb8WV+1X9LqEkwTT0L6vQmxgI= -----END CERTIFICATE-----Generated at Thu May 8 23:08:20 2025 by rpki-client