$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1c5fff-b5ad-3005-849d-44d53d6e0345.roa File: 2e1c5fff-b5ad-3005-849d-44d53d6e0345.roa (raw, json) Hash identifier: +bwJZ6CoBRg5j+0uDC1ErYZ6LPUzYdljF1dABqsq00o= Subject key identifier: 12:54:4D:6F:86:B0:B2:71:A1:F6:EB:28:68:00:31:77:52:1D:DC:BF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C495B8BCB04FD972838E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1c5fff-b5ad-3005-849d-44d53d6e0345.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:95:b8:bc:b0:4f:d9:72:83:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=1126f4ac-90df-4509-bb32-0abb9fca7050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:48:81:56:8e:94:29:91:b7:6b:02:1d:f9:71: 53:7e:ea:93:d7:2c:ea:12:93:48:33:31:27:82:c0: 6a:8c:5b:35:60:89:ab:57:cf:1d:a3:39:ff:30:a7: fb:3a:f5:e3:28:ce:1a:85:91:6f:5b:a8:a1:18:4a: bc:e4:bc:8f:e6:03:39:21:a0:95:16:98:3a:e8:38: bb:99:55:d1:de:04:b8:75:d9:8c:8d:f3:5a:a6:ed: 31:92:f2:8a:6e:9d:9c:88:88:1f:d8:92:ae:5f:53: 18:2f:70:15:5f:0b:ec:c3:27:f8:8c:3f:6f:5d:c2: 86:c2:3a:83:18:49:f7:73:a3:b2:2f:02:53:00:7d: 18:e5:11:8d:09:f5:6b:71:94:e3:6b:42:ec:91:fa: 5e:53:36:bf:83:4d:d5:3e:f6:cc:0f:10:92:1d:18: 26:37:48:eb:d4:cd:eb:08:00:98:b7:87:a2:0c:ed: 3c:bd:a0:5c:a3:e6:9d:15:2e:66:23:7e:ec:aa:0f: 33:57:be:d7:91:e6:aa:5d:8c:7f:62:4b:f3:9b:5a: 31:bb:2a:10:71:0c:34:83:95:02:81:fb:86:9d:15: 92:42:62:3c:f3:5d:64:3b:67:f4:15:97:0a:5e:01: 75:25:4a:d1:aa:23:a3:86:0d:b0:56:83:39:6b:fe: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:4D:6F:86:B0:B2:71:A1:F6:EB:28:68:00:31:77:52:1D:DC:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1c5fff-b5ad-3005-849d-44d53d6e0345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:86:e2:7e:a2:07:a8:6d:6c:4c:52:a6:90:1b:e3:c3:1a:4a: 27:0b:c0:9d:fc:a1:e7:df:f2:b7:9a:36:23:2f:eb:40:48:f8: 23:09:86:57:ee:a6:c1:ab:e5:e2:2c:f6:2f:4c:c1:b5:7f:d7: 2e:4e:9c:5f:a9:ba:f9:65:bb:35:4d:b5:36:58:11:d4:8c:7f: 9b:5b:86:69:6d:b6:5c:eb:ba:3c:29:59:ae:52:7e:56:fb:94: 96:97:71:aa:c9:ef:73:8b:ea:d1:60:55:d0:00:41:e5:92:24: dc:d7:d2:42:4f:c0:0c:05:27:c8:e7:52:0e:ea:c5:02:fa:67: 69:b1:c5:b7:16:bd:0b:8b:7e:a9:a8:13:a3:63:64:18:dc:58: 69:38:e9:6c:be:17:bd:d9:18:fb:a4:85:7a:b1:87:56:3c:f1: 1c:c7:c4:0a:30:77:99:79:89:df:ed:b6:5f:a0:35:e1:31:39: 9f:a2:85:f7:58:66:b9:6b:57:88:00:05:c5:c1:2e:99:a5:02: e5:dd:74:ab:f5:f6:ba:86:82:2c:c4:07:96:aa:c0:71:b8:54: bd:41:2c:78:65:69:9f:03:d1:92:b2:45:dd:ac:40:e6:a7:ca: 51:4c:9a:07:4b:1e:c7:73:81:2d:a6:29:ca:6e:ea:00:59:bb: b1:25:d2:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJW4vLBP2XKDjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MTEyNmY0YWMtOTBkZi00NTA5LWJiMzItMGFiYjlmY2E3MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEiBVo6UKZG3awId+XFTfuqT1yzqEpNIMzEn gsBqjFs1YImrV88dozn/MKf7OvXjKM4ahZFvW6ihGEq85LyP5gM5IaCVFpg66Di7 mVXR3gS4ddmMjfNapu0xkvKKbp2ciIgf2JKuX1MYL3AVXwvswyf4jD9vXcKGwjqD GEn3c6OyLwJTAH0Y5RGNCfVrcZTja0LskfpeUza/g03VPvbMDxCSHRgmN0jr1M3r CACYt4eiDO08vaBco+adFS5mI37sqg8zV77XkeaqXYx/Ykvzm1oxuyoQcQw0g5UC gfuGnRWSQmI8811kO2f0FZcKXgF1JUrRqiOjhg2wVoM5a/6fuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJUTW+GsLJxofbrKGgAMXdSHdy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmUxYzVmZmYtYjVhZC0z MDA1LTg0OWQtNDRkNTNkNmUwMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2G4n6iB6htbExSppAb48MaSicLwJ38oeff8reaNiMv60BI+CMJhlfu psGr5eIs9i9MwbV/1y5OnF+puvlluzVNtTZYEdSMf5tbhmlttlzrujwpWa5Sflb7 lJaXcarJ73OL6tFgVdAAQeWSJNzX0kJPwAwFJ8jnUg7qxQL6Z2mxxbcWvQuLfqmo E6NjZBjcWGk46Wy+F73ZGPukhXqxh1Y88RzHxAowd5l5id/ttl+gNeExOZ+ihfdY ZrlrV4gABcXBLpmlAuXddKv19rqGgizEB5aqwHG4VL1BLHhlaZ8D0ZKyRd2sQOan ylFMmgdLHsdzgS2mKcpu6gBZu7El0qI= -----END CERTIFICATE-----Generated at Sun Jun 15 16:00:07 2025 by rpki-client