$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa File: fa243cfe-a92e-3e35-a136-c32c50a344e0.roa (raw, json) Hash identifier: r49svZQFsIoB+HYdCRhfeSofcZRt38yi0OWp1U8Pnuw= Subject key identifier: 37:00:E5:78:6B:44:8C:8A:EF:87:65:E8:56:21:6D:98:2B:13:E1:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784AE824DDF57D67FAB1F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ae:82:4d:df:57:d6:7f:ab:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=32a7b608-de60-4f55-9a9e-3216e42a36ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:d2:29:ff:f4:76:f3:0c:49:3d:78:0d:a5: df:7c:96:30:6f:bf:a7:28:16:52:60:3a:27:22:51: a3:31:e4:17:1c:12:ad:88:68:90:a7:57:96:8b:0d: 9a:d0:6f:d6:00:e6:d6:b1:41:22:b0:d6:fb:84:f9: 46:98:58:1e:56:85:96:d8:72:ee:aa:08:99:7f:ed: 1e:dc:fd:aa:c1:39:d3:55:6d:c5:2b:59:85:1e:7f: 57:9f:64:00:ba:c4:e5:1b:06:5a:89:cc:88:39:76: d8:52:85:53:de:c6:30:1b:87:93:7f:c7:16:72:42: 66:88:bb:37:48:74:42:f6:56:58:28:0b:3c:54:48: 2f:49:b7:d3:0b:67:78:d4:54:3f:0a:92:6a:d8:e5: 63:e9:da:13:00:71:e0:f8:bc:db:9e:3e:73:07:d0: ae:9e:bc:e4:6c:b9:4e:72:70:9c:64:af:a9:db:c5: c0:97:89:94:d5:f8:a7:e3:dc:59:6b:5e:57:a6:5f: eb:08:38:b2:be:b6:25:04:3a:4d:52:e7:5a:61:a9: 9c:4a:a2:43:6f:87:7b:39:04:54:b0:23:e4:7e:82: ba:34:57:64:63:06:37:cd:aa:76:fd:59:97:ee:e0: f8:7d:bc:cf:a4:97:70:d2:bf:69:31:78:78:d1:91: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:00:E5:78:6B:44:8C:8A:EF:87:65:E8:56:21:6D:98:2B:13:E1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:02:8e:1d:e0:23:3b:59:90:62:8b:88:b1:22:f2:1d:bc:ee: f7:08:a5:1b:66:69:73:a4:6e:32:63:4b:12:3d:48:1b:62:ff: 12:d8:d6:57:b7:5d:0e:62:46:01:93:3d:d2:fd:dc:c6:0f:b7: ea:5e:85:33:a8:69:7a:5f:47:83:bb:83:f7:92:6a:81:04:64: 65:cf:78:cc:aa:16:c4:90:0a:e2:6d:c2:a3:78:f5:13:4c:bb: db:e9:21:4e:49:69:47:39:66:f0:dc:10:1e:68:00:16:a4:85: db:c4:c0:f9:e3:89:b2:a6:49:bd:ef:57:7d:3f:5d:94:d3:82: 6b:c3:00:40:f5:03:b4:d5:a2:1e:10:d9:2b:e5:1a:cc:9f:73: e5:68:b5:0a:c7:e0:cf:96:31:ab:76:0a:f8:fd:5f:67:70:f8: 23:9a:3b:4e:88:f0:67:65:ee:fc:3a:2c:1e:71:1b:d7:70:a7: 41:57:00:42:7a:99:b9:59:73:a3:5a:c3:8e:c9:80:e5:88:64: 36:0f:0f:fe:9e:40:25:1a:0c:d6:8d:46:ad:f5:8c:c3:0b:c7: 39:1b:78:1e:4d:69:1e:2a:8d:a7:6c:a3:d9:46:41:34:17:66: fd:1e:75:0a:1a:2d:67:23:d8:52:fb:bd:21:39:45:64:f4:f2: 47:b0:12:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhK6CTd9X1n+rHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzJhN2I2MDgtZGU2MC00ZjU1LTlhOWUtMzIxNmU0MmEzNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj47SKf/0dvMMST14DaXffJYwb7+nKBZSYDon IlGjMeQXHBKtiGiQp1eWiw2a0G/WAObWsUEisNb7hPlGmFgeVoWW2HLuqgiZf+0e 3P2qwTnTVW3FK1mFHn9Xn2QAusTlGwZaicyIOXbYUoVT3sYwG4eTf8cWckJmiLs3 SHRC9lZYKAs8VEgvSbfTC2d41FQ/CpJq2OVj6doTAHHg+Lzbnj5zB9CunrzkbLlO cnCcZK+p28XAl4mU1fin49xZa15Xpl/rCDiyvrYlBDpNUudaYamcSqJDb4d7OQRU sCPkfoK6NFdkYwY3zap2/VmX7uD4fbzPpJdw0r9pMXh40ZHXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcA5XhrRIyK74dl6FYhbZgrE+ERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmEyNDNjZmUtYTkyZS0z ZTM1LWExMzYtYzMyYzUwYTM0NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADECjh3gIztZkGKLiLEi8h287vcIpRtmaXOkbjJjSxI9SBti/xLY1le3 XQ5iRgGTPdL93MYPt+pehTOoaXpfR4O7g/eSaoEEZGXPeMyqFsSQCuJtwqN49RNM u9vpIU5JaUc5ZvDcEB5oABakhdvEwPnjibKmSb3vV30/XZTTgmvDAED1A7TVoh4Q 2SvlGsyfc+VotQrH4M+WMat2Cvj9X2dw+COaO06I8Gdl7vw6LB5xG9dwp0FXAEJ6 mblZc6Naw47JgOWIZDYPD/6eQCUaDNaNRq31jMMLxzkbeB5NaR4qjadso9lGQTQX Zv0edQoaLWcj2FL7vSE5RWT08kewEj0= -----END CERTIFICATE-----Generated at Fri May 9 01:14:31 2025 by rpki-client