$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa File: 09de78f4-20f4-3844-a639-a328eb5db662.roa (raw, json) Hash identifier: fNLahJbBQlReUyrqKm4hGCjjfCdBA+2BBYQn7VZsN6Q= Subject key identifier: E6:30:60:49:C5:E0:3E:E4:5C:5C:31:C6:D2:51:C9:4B:40:42:5B:DF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3F5F845262EE45C68D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3f:5f:84:52:62:ee:45:c6:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=069361bd-7525-4348-a138-01cb37d493a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:a1:f1:57:1c:c6:8d:c3:a3:bc:0d:d9:4e: 24:99:a6:4f:83:1b:71:fc:9c:5a:44:63:a2:9e:bb: ac:77:35:77:cc:07:d8:89:68:c9:09:7f:cf:c6:0c: e2:93:75:9c:c4:77:4c:3a:86:44:8b:8c:a4:ae:7a: 35:e6:7a:27:6e:d4:d4:6c:95:d4:1d:b0:a9:75:47: 76:7b:be:9c:c3:2c:9f:f9:b8:6c:9f:1a:6a:80:e6: a8:e6:85:02:80:e3:d3:cb:e1:67:a0:d0:99:e4:6b: e5:d2:00:9c:7f:59:cb:85:f8:98:1a:61:b6:71:25: a4:5e:09:b7:a1:dd:bd:13:8e:c0:16:69:71:64:d7: 1b:f5:d5:9f:4e:96:1f:32:66:33:ed:ae:0b:23:6f: 6f:14:44:78:1e:bc:be:8c:26:8a:ea:80:35:77:a6: f7:36:3d:54:06:cb:47:27:b8:2d:ff:03:22:ac:69: 56:03:72:d6:21:e2:34:ed:20:56:58:13:25:6b:9c: 97:22:a6:fc:85:d6:24:b1:cd:0b:c8:1c:16:04:ba: 60:5e:33:f1:6b:8c:26:46:c2:47:3e:9e:5a:95:38: 96:f5:cb:9a:a5:7a:8a:9d:ac:38:45:55:df:61:14: f5:7b:2c:02:b7:b5:fd:86:84:3e:6f:77:88:0d:18: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:30:60:49:C5:E0:3E:E4:5C:5C:31:C6:D2:51:C9:4B:40:42:5B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:38:c1:12:27:97:4f:1c:d8:c7:b7:8f:ce:3f:3a:79:f6:1a: 58:89:15:d2:5a:66:a3:17:42:b4:f3:35:5c:d6:69:f9:c8:65: 0f:15:29:1a:a3:b5:94:19:29:48:ca:6a:1c:c0:d0:c5:0f:e6: 33:2c:e5:dc:20:9d:19:c3:3a:22:00:e2:b0:28:12:85:27:21: 01:d4:2a:f7:64:84:4c:7f:af:7b:e3:75:b4:f8:79:e2:9c:f5: cc:4b:7b:9c:73:1b:f6:21:0d:3f:c8:0a:20:93:d7:7b:2e:82: ad:77:22:df:a5:3c:07:d3:3f:6b:e0:ad:12:b3:e0:28:3c:d3: b6:8b:1a:09:a1:d1:52:f1:45:7a:a1:d4:f0:e0:7d:e2:62:22: 1b:13:f5:36:cd:c6:f3:2c:98:7e:45:c2:cd:d0:e7:4e:17:c1: 24:33:05:6d:99:8d:65:ed:87:0f:6a:4d:be:e3:73:12:41:3c: 7a:bf:c4:f1:1c:e5:32:b0:66:74:5c:c5:75:36:e5:cd:db:a9: 36:6d:4f:ce:85:21:02:5a:50:ce:86:4a:07:25:79:20:56:37: 10:e1:02:8e:b1:6b:65:60:9e:7b:99:0a:90:16:82:6b:92:74: f7:5e:23:5f:e5:10:18:ad:ad:82:41:6a:21:cd:91:52:92:d4: 19:3b:01:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj9fhFJi7kXGjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDY5MzYxYmQtNzUyNS00MzQ4LWExMzgtMDFjYjM3ZDQ5M2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOOh8Vccxo3Do7wN2U4kmaZPgxtx/JxaRGOi nrusdzV3zAfYiWjJCX/Pxgzik3WcxHdMOoZEi4ykrno15nonbtTUbJXUHbCpdUd2 e76cwyyf+bhsnxpqgOao5oUCgOPTy+FnoNCZ5Gvl0gCcf1nLhfiYGmG2cSWkXgm3 od29E47AFmlxZNcb9dWfTpYfMmYz7a4LI29vFER4Hry+jCaK6oA1d6b3Nj1UBstH J7gt/wMirGlWA3LWIeI07SBWWBMla5yXIqb8hdYksc0LyBwWBLpgXjPxa4wmRsJH Pp5alTiW9cuapXqKnaw4RVXfYRT1eywCt7X9hoQ+b3eIDRhVCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYwYEnF4D7kXFwxxtJRyUtAQlvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDlkZTc4ZjQtMjBmNC0z ODQ0LWE2MzktYTMyOGViNWRiNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB04wRInl08c2Me3j84/Onn2GliJFdJaZqMXQrTzNVzWafnIZQ8VKRqj tZQZKUjKahzA0MUP5jMs5dwgnRnDOiIA4rAoEoUnIQHUKvdkhEx/r3vjdbT4eeKc 9cxLe5xzG/YhDT/ICiCT13sugq13It+lPAfTP2vgrRKz4Cg807aLGgmh0VLxRXqh 1PDgfeJiIhsT9TbNxvMsmH5Fws3Q504XwSQzBW2ZjWXthw9qTb7jcxJBPHq/xPEc 5TKwZnRcxXU25c3bqTZtT86FIQJaUM6GSgcleSBWNxDhAo6xa2VgnnuZCpAWgmuS dPdeI1/lEBitrYJBaiHNkVKS1Bk7AZ8= -----END CERTIFICATE-----Generated at Mon Apr 28 09:08:23 2025 by rpki-client