$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa File: 3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa (raw, json) Hash identifier: V0WbpxFPDMyQparGkJo5NdSOpArg3N4SqNzOhRZczY4= Subject key identifier: 82:7E:8B:75:AB:F9:C2:FF:3B:95:CC:51:F9:5E:3B:B2:EA:FA:40:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C495AA11EA971B9E72CF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:95:aa:11:ea:97:1b:9e:72:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=2040ebab-fc9c-45eb-93c9-93f4d4ca8f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:46:c8:b6:2a:f8:01:79:07:14:18:db:e2:d8: bb:b4:a1:99:5d:2f:4c:59:af:2d:fb:71:d8:e1:93: 6a:ff:04:81:44:20:d3:66:fe:6e:87:cf:8b:2f:46: 13:d0:12:cc:68:fa:c9:0b:47:b2:e8:cf:fe:84:93: 14:56:d1:ec:d7:d9:32:6c:90:b1:1d:22:a6:76:cd: db:79:cc:d8:74:9e:f3:d1:af:aa:f7:07:f1:60:fd: b8:d4:82:5a:b1:2d:48:06:b1:4c:76:e5:51:46:8c: 5d:5e:90:d7:79:fe:7d:86:11:60:03:93:98:b7:f2: ac:18:5c:ba:91:31:8a:cd:23:9e:63:61:1e:2e:51: 01:e5:6e:2a:35:3b:ef:6c:60:78:c8:cb:34:28:34: 73:58:78:ae:fb:b7:a8:2c:98:b9:6c:d1:92:47:32: 05:29:3f:10:0c:b1:2f:39:9c:7c:db:8f:67:7a:01: 6b:23:70:1f:bf:19:74:d6:71:0c:01:17:85:6c:ad: cb:e8:63:45:8f:a4:0a:46:92:2d:a7:6c:ef:7c:db: da:d2:76:9e:f6:5e:59:0a:2b:7a:32:af:70:6a:0b: 73:3b:2d:f1:38:c2:b4:04:72:8d:7c:99:de:3f:00: 5f:12:81:d2:71:ab:b3:1e:45:c5:d4:78:da:cd:fe: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7E:8B:75:AB:F9:C2:FF:3B:95:CC:51:F9:5E:3B:B2:EA:FA:40:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:78:b1:56:37:1b:45:7e:00:6f:79:0a:aa:d2:82:9e:6e:11: 59:e0:00:68:48:19:38:05:54:14:96:91:75:36:e1:cd:2d:16: df:09:a2:aa:75:3e:b5:bb:40:64:bc:7e:05:fd:81:7d:15:7e: 77:d1:91:0b:2d:3d:40:c5:6a:40:88:52:f5:1e:d2:c5:87:4d: 80:58:8a:2f:33:b6:ad:c8:5c:59:8f:68:e8:94:11:37:d3:ef: 4d:10:73:70:50:06:79:1a:1d:a9:b8:c7:02:f5:22:19:52:97: 02:61:6c:27:4b:07:aa:ec:3b:b0:fa:98:6c:00:b0:c6:ef:08: 25:dc:6c:55:a2:d0:7e:cc:32:60:d7:f5:6b:48:75:67:5e:29: 22:82:84:20:7d:28:28:ae:b7:b3:e6:76:b7:7c:09:b2:13:f3: f9:a0:c9:36:10:e4:b0:e1:12:63:83:44:18:03:4f:f3:de:24: bb:a0:3d:af:9d:ea:13:55:3e:f1:a9:af:ea:a5:cb:d0:e4:ae: 0a:d8:3b:e3:bb:d8:0d:ca:5c:2c:ef:01:d5:86:a4:88:77:6c: 18:1f:66:7e:f1:48:04:6d:0c:6a:6e:34:43:76:7f:dc:de:1c: bb:9a:2a:54:3e:60:57:4c:5a:d5:14:dd:c0:a3:6e:ff:30:87: 0f:db:34:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJWqEeqXG55yzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MjA0MGViYWItZmM5Yy00NWViLTkzYzktOTNmNGQ0Y2E4ZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEbItir4AXkHFBjb4ti7tKGZXS9MWa8t+3HY 4ZNq/wSBRCDTZv5uh8+LL0YT0BLMaPrJC0ey6M/+hJMUVtHs19kybJCxHSKmds3b eczYdJ7z0a+q9wfxYP241IJasS1IBrFMduVRRoxdXpDXef59hhFgA5OYt/KsGFy6 kTGKzSOeY2EeLlEB5W4qNTvvbGB4yMs0KDRzWHiu+7eoLJi5bNGSRzIFKT8QDLEv OZx8249negFrI3Afvxl01nEMAReFbK3L6GNFj6QKRpItp2zvfNva0nae9l5ZCit6 Mq9wagtzOy3xOMK0BHKNfJnePwBfEoHScauzHkXF1Hjazf5g5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJ+i3Wr+cL/O5XMUfleO7Lq+kDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RjMWY2NzEtMjg4My0z Y2E3LTgzNGQtY2E0YWQ2YThjMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd4sVY3G0V+AG95CqrSgp5uEVngAGhIGTgFVBSWkXU24c0tFt8Joqp1 PrW7QGS8fgX9gX0VfnfRkQstPUDFakCIUvUe0sWHTYBYii8ztq3IXFmPaOiUETfT 700Qc3BQBnkaHam4xwL1IhlSlwJhbCdLB6rsO7D6mGwAsMbvCCXcbFWi0H7MMmDX 9WtIdWdeKSKChCB9KCiut7Pmdrd8CbIT8/mgyTYQ5LDhEmODRBgDT/PeJLugPa+d 6hNVPvGpr+qly9DkrgrYO+O72A3KXCzvAdWGpIh3bBgfZn7xSARtDGpuNEN2f9ze HLuaKlQ+YFdMWtUU3cCjbv8whw/bNDY= -----END CERTIFICATE-----Generated at Sun Apr 27 14:12:58 2025 by rpki-client