$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/412fd2f4-b385-33ce-b491-ba86f905066a.roa File: 412fd2f4-b385-33ce-b491-ba86f905066a.roa (raw, json) Hash identifier: iMGggeps1YMf/rmANFhm9Q4d3w1OpoKsPFm2O3vJU0s= Subject key identifier: C0:0B:EE:37:F9:D2:07:B5:46:CE:8A:0A:5B:80:56:91:03:38:92:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A121D3AB826ABC47ECE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/412fd2f4-b385-33ce-b491-ba86f905066a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a1:21:d3:ab:82:6a:bc:47:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=351962a6-d484-4754-a28e-c465a2192997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:d1:b0:92:16:2e:00:4d:ea:fa:b9:8b:eb: 01:17:10:14:68:24:fe:06:f1:d7:8b:4c:29:e6:2c: 71:bf:9d:ed:fb:0a:09:9f:3a:4d:a2:05:80:27:d8: e0:44:37:bd:80:fb:78:2b:cc:70:c6:42:3b:20:da: ad:a3:96:8d:d4:5c:09:08:8e:bd:89:ab:0c:93:fb: 79:f6:8c:38:56:06:a6:eb:59:cc:58:1f:d2:c7:99: 8b:48:3c:5e:a1:a1:85:a9:bc:a6:3d:40:80:28:99: ea:e3:32:18:6e:39:95:aa:61:04:5a:8b:9c:58:ef: 10:42:93:a3:3b:49:96:92:31:68:6d:06:68:90:ce: 97:cd:66:65:bb:f0:44:37:3e:f0:f8:30:e3:81:b4: 4b:8f:ca:05:2a:76:fe:57:2f:25:e6:90:98:85:bb: f3:3d:bb:4f:ad:b6:48:e7:08:15:69:fb:08:8a:09: bf:76:f3:8b:8c:07:4a:0f:f7:aa:2e:47:cf:6b:54: c6:bb:b5:9d:55:33:33:f9:0f:bd:66:cf:d0:65:d1: 77:16:b5:25:c0:fe:5a:c4:b0:27:e0:4a:fe:f4:7d: 5d:2a:ec:63:a8:dc:1f:bf:ab:6f:d3:c5:83:20:45: 3c:f3:26:2b:81:66:33:3f:1b:a8:c0:d1:92:29:31: 2f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0B:EE:37:F9:D2:07:B5:46:CE:8A:0A:5B:80:56:91:03:38:92:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/412fd2f4-b385-33ce-b491-ba86f905066a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:81:37:eb:a6:bf:57:2a:d7:d2:80:0d:ac:39:15:50:ad:c9: a8:9d:a8:f3:ee:4b:ed:98:59:21:bd:72:0b:63:91:05:95:9a: 98:22:39:92:e8:de:14:ec:0a:62:d8:33:99:35:e7:e5:bf:e4: 43:0c:24:1d:b5:54:00:60:d4:ac:2f:10:4e:17:06:e3:c4:5c: 23:1b:79:e2:59:9a:2e:27:36:8d:41:9d:34:db:19:71:91:ba: 83:ef:7b:c2:6a:78:53:68:ba:b2:1f:20:17:6a:22:f5:1e:0a: 50:a5:2a:f1:82:b7:b2:a8:28:54:68:ec:92:37:27:93:15:c1: f5:66:36:76:91:1e:97:7c:0b:7b:80:f3:4d:de:df:be:23:22: 7a:92:72:cf:1f:63:f8:81:3b:2b:08:60:e6:36:9d:99:03:69: f2:14:78:e4:6e:50:ed:23:94:f2:64:89:ab:99:cb:96:8d:e1: 1f:9e:b6:74:3c:17:4b:1f:fb:54:b7:60:56:e0:1e:37:db:03: e9:d9:73:f7:de:4e:c5:5a:f1:b6:ed:08:e5:2d:65:9d:17:e8: 7a:b1:56:68:de:07:2f:ff:e4:b0:a3:65:2c:5d:1b:32:ed:5f: be:ea:c7:18:c2:3e:06:7b:b3:1f:c1:af:22:59:41:65:55:c8: e8:da:90:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKEh06uCarxH7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzUxOTYyYTYtZDQ4NC00NzU0LWEyOGUtYzQ2NWEyMTkyOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqLRsJIWLgBN6vq5i+sBFxAUaCT+BvHXi0wp 5ixxv53t+woJnzpNogWAJ9jgRDe9gPt4K8xwxkI7INqto5aN1FwJCI69iasMk/t5 9ow4Vgam61nMWB/Sx5mLSDxeoaGFqbymPUCAKJnq4zIYbjmVqmEEWoucWO8QQpOj O0mWkjFobQZokM6XzWZlu/BENz7w+DDjgbRLj8oFKnb+Vy8l5pCYhbvzPbtPrbZI 5wgVafsIigm/dvOLjAdKD/eqLkfPa1TGu7WdVTMz+Q+9Zs/QZdF3FrUlwP5axLAn 4Er+9H1dKuxjqNwfv6tv08WDIEU88yYrgWYzPxuowNGSKTEv3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAL7jf50ge1Rs6KCluAVpEDOJL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDEyZmQyZjQtYjM4NS0z M2NlLWI0OTEtYmE4NmY5MDUwNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGBN+umv1cq19KADaw5FVCtyaidqPPuS+2YWSG9cgtjkQWVmpgiOZLo 3hTsCmLYM5k15+W/5EMMJB21VABg1KwvEE4XBuPEXCMbeeJZmi4nNo1BnTTbGXGR uoPve8JqeFNourIfIBdqIvUeClClKvGCt7KoKFRo7JI3J5MVwfVmNnaRHpd8C3uA 803e374jInqScs8fY/iBOysIYOY2nZkDafIUeORuUO0jlPJkiauZy5aN4R+etnQ8 F0sf+1S3YFbgHjfbA+nZc/feTsVa8bbtCOUtZZ0X6HqxVmjeBy//5LCjZSxdGzLt X77qxxjCPgZ7sx/BryJZQWVVyOjakOw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:10:41 2025 by rpki-client