$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa File: 37a79c5b-0d91-3047-97be-167216f2c126.roa (raw, json) Hash identifier: 18qybhNVWhsTFRsaYrDVoqV0gy7OW0GOu15LVlQjiMg= Subject key identifier: 1E:2F:30:C3:48:A2:87:0A:71:51:00:74:1C:A8:3B:07:7A:61:AC:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA177BEC4C39D95D9FA220 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:17:7b:ec:4c:39:d9:5d:9f:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2fd1cf21-3103-4894-a10f-65064c76ade3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c4:ec:a6:d2:50:37:20:70:d7:64:01:b1:8a: 13:60:4a:3b:6a:4a:39:9a:18:48:51:8c:3b:87:36: e0:a0:ca:b9:0f:3f:21:58:3d:27:7b:d3:f9:84:99: 07:4f:ee:10:17:d8:fd:a2:b8:0d:88:ab:7e:ef:6a: 52:8c:59:fc:af:ec:d6:bc:fb:fb:aa:ea:44:04:95: 96:e2:6d:b9:84:04:61:d3:20:5b:08:85:5d:73:13: 67:48:b4:35:5f:0a:7f:83:06:11:53:6e:6c:61:20: f9:26:aa:6e:0c:f5:d1:b0:e7:f2:94:b4:23:73:ca: bc:58:99:56:ae:10:b5:f6:c3:a3:16:34:8e:49:3b: 9d:22:d3:9d:d1:7f:e3:ad:b9:41:f1:4a:cf:93:4f: 96:2d:43:5e:b7:a6:8b:f0:6a:e1:e7:13:6d:3a:e0: 6a:be:a7:97:d4:27:07:56:99:d7:f8:ce:9c:d7:1f: aa:9d:88:d1:98:d9:73:40:1b:85:e7:a8:1d:94:94: c9:54:26:4e:00:97:c7:b3:46:96:fb:02:a6:74:f5: 7c:5f:d7:cd:ac:c5:ea:bc:2f:8c:0b:96:88:26:95: e8:e9:f5:3b:5d:c4:3d:5a:0c:31:26:fd:e8:e1:05: 60:93:69:28:50:8f:7f:b1:62:23:a4:39:64:ba:b4: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2F:30:C3:48:A2:87:0A:71:51:00:74:1C:A8:3B:07:7A:61:AC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:50:44:fe:82:7d:8c:17:2d:a5:8d:62:b5:68:a2:c2:70:6c: 2b:31:f3:29:62:9d:ce:e2:54:5a:49:ed:96:f6:b1:f0:b0:57: 46:64:37:3b:3b:2e:ed:25:ba:f5:ed:92:e2:c3:c4:38:b0:17: d3:85:48:30:66:91:27:6c:5a:1c:26:fb:9e:04:d8:f5:20:87: 0c:2b:78:83:ff:c4:ca:f3:99:e1:87:3e:af:6b:b8:e9:35:34: a9:7f:3b:f3:77:c9:d7:bf:ff:ed:32:8c:64:fe:16:2a:5f:5e: 21:d8:44:67:5a:89:0e:7d:4a:bb:56:c9:d8:d2:db:16:5f:3c: 72:97:c1:94:6e:b5:46:fa:ac:51:7a:2c:2a:e2:77:fc:69:5a: a3:8a:11:71:cf:e4:2f:fd:88:95:a3:6d:da:c1:2b:37:f8:e0: c8:a3:01:a8:84:3b:4a:55:50:65:d0:e9:93:f1:cc:03:c2:d0: 72:5a:13:8c:4e:80:09:60:ff:a7:41:d9:4f:48:ef:61:7b:d2: fc:18:1b:f7:72:aa:db:81:67:59:df:d7:b9:32:c2:47:21:67: ec:4e:05:6a:f1:c7:a3:6a:38:03:f8:67:35:9e:6f:f9:3d:e1: 01:b4:6d:1c:66:1a:5c:bf:fc:df:c5:03:f9:55:28:92:51:46: c4:8b:59:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhd77Ew52V2foiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmZkMWNmMjEtMzEwMy00ODk0LWExMGYtNjUwNjRjNzZhZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsTsptJQNyBw12QBsYoTYEo7ako5mhhIUYw7 hzbgoMq5Dz8hWD0ne9P5hJkHT+4QF9j9orgNiKt+72pSjFn8r+zWvPv7qupEBJWW 4m25hARh0yBbCIVdcxNnSLQ1Xwp/gwYRU25sYSD5JqpuDPXRsOfylLQjc8q8WJlW rhC19sOjFjSOSTudItOd0X/jrblB8UrPk0+WLUNet6aL8Grh5xNtOuBqvqeX1CcH VpnX+M6c1x+qnYjRmNlzQBuF56gdlJTJVCZOAJfHs0aW+wKmdPV8X9fNrMXqvC+M C5aIJpXo6fU7XcQ9WgwxJv3o4QVgk2koUI9/sWIjpDlkurQxGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4vMMNIoocKcVEAdByoOwd6YayTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzdhNzljNWItMGQ5MS0z MDQ3LTk3YmUtMTY3MjE2ZjJjMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVQRP6CfYwXLaWNYrVoosJwbCsx8ylinc7iVFpJ7Zb2sfCwV0ZkNzs7 Lu0luvXtkuLDxDiwF9OFSDBmkSdsWhwm+54E2PUghwwreIP/xMrzmeGHPq9ruOk1 NKl/O/N3yde//+0yjGT+FipfXiHYRGdaiQ59SrtWydjS2xZfPHKXwZRutUb6rFF6 LCrid/xpWqOKEXHP5C/9iJWjbdrBKzf44MijAaiEO0pVUGXQ6ZPxzAPC0HJaE4xO gAlg/6dB2U9I72F70vwYG/dyqtuBZ1nf17kywkchZ+xOBWrxx6NqOAP4ZzWeb/k9 4QG0bRxmGly//N/FA/lVKJJRRsSLWag= -----END CERTIFICATE-----Generated at Sat Apr 26 20:58:36 2025 by rpki-client