$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4256ca3e-bafa-34e6-8881-181519cc664a.roa File: 4256ca3e-bafa-34e6-8881-181519cc664a.roa (raw, json) Hash identifier: q1e8HrqVoYUasfQLP2zpSvUahoffIFIAlMSvPEfT2AQ= Subject key identifier: 52:11:BB:2B:75:0B:82:CF:E5:69:4E:FF:2B:16:50:39:98:CF:92:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF58895A017A011B30BD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4256ca3e-bafa-34e6-8881-181519cc664a.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:58:89:5a:01:7a:01:1b:30:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=6efebb70-0d0a-40c0-ad00-37442d6a114d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:6a:82:db:e1:14:2e:dc:b5:8d:73:e6:14: 1b:e4:1d:f9:1e:78:0b:cd:f2:66:a0:d8:5c:17:cd: fe:4d:02:81:a8:cd:f5:ac:2c:4f:96:e3:49:ea:07: e8:fc:1d:c3:5a:b5:f4:56:ea:3a:f7:77:4b:ce:d0: 46:aa:94:c1:09:37:6d:0a:82:b6:57:ec:07:13:c7: 83:c0:e3:87:64:92:40:e9:93:51:f9:58:d8:26:59: 13:3e:95:bc:7b:98:24:39:d4:7e:79:a9:59:6a:36: 27:ec:3c:7b:dd:f3:b9:5d:e3:89:4b:bc:04:e5:7f: 49:a3:13:d8:74:ab:ad:b8:21:0d:08:aa:3b:68:97: 35:4e:e4:2a:fc:f5:f6:6c:c2:75:f5:c2:f0:86:b9: b4:8c:df:30:1e:c9:18:2f:71:57:66:a7:64:03:a4: 0f:e3:6f:23:84:8a:0d:9a:aa:6c:fa:da:6a:fc:ca: 5c:9d:cc:8b:b5:7d:23:b3:af:dd:f0:8c:07:92:f1: bd:eb:f7:7e:8b:cd:3c:08:6c:8e:19:21:b2:8f:3d: 5b:47:f3:b9:10:20:8c:df:2e:3f:52:fa:69:db:0c: fc:b7:af:1c:8f:3a:5a:9a:af:54:01:ae:84:48:39: f3:42:c1:8c:c9:da:e2:c6:e9:a8:de:eb:b5:b0:db: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:11:BB:2B:75:0B:82:CF:E5:69:4E:FF:2B:16:50:39:98:CF:92:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4256ca3e-bafa-34e6-8881-181519cc664a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4e:1a:cd:8d:93:2e:10:77:63:9b:4d:f5:4f:8b:61:8d:68: dc:51:d6:65:de:a3:16:7b:86:05:ce:61:7e:b8:f1:f0:8e:7d: 13:69:86:32:73:37:4d:a1:7b:8b:16:0e:18:c6:47:0a:d6:02: 58:05:65:c6:fa:47:c2:da:61:d8:a4:58:59:ab:98:fa:4e:78: 08:90:a3:cc:90:52:ae:ee:1c:51:2d:84:de:2e:4b:94:f1:00: be:c9:f9:e1:3d:d8:2a:80:87:d9:d6:63:8f:72:ee:7d:6f:f3: ee:85:81:d6:80:7f:e8:6a:49:f7:9b:8c:0d:1a:db:b8:b2:30: 57:0d:98:87:95:47:81:5f:50:26:36:1b:b4:d0:42:4b:2e:1d: 4b:9e:13:82:a6:26:b5:b2:20:d9:44:50:71:b5:33:b4:58:f4: d7:22:7e:09:8d:37:7a:16:76:67:56:35:bb:11:32:a2:a8:9d: 62:27:06:14:af:be:25:a0:74:b4:c0:1a:58:a3:fe:96:db:74: 87:1f:7c:6b:ce:53:d6:e9:ce:37:9f:00:84:8d:d4:46:26:42: d3:aa:07:e5:ac:33:67:ed:d7:1a:8c:ca:7c:56:7e:d6:cf:ae: 4b:ea:d1:2f:82:4d:0c:ce:ce:87:ed:6e:dd:c0:87:84:ad:bc: 98:13:3a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71iJWgF6ARswvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NmVmZWJiNzAtMGQwYS00MGMwLWFkMDAtMzc0NDJkNmExMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuFqgtvhFC7ctY1z5hQb5B35HngLzfJmoNhc F83+TQKBqM31rCxPluNJ6gfo/B3DWrX0Vuo693dLztBGqpTBCTdtCoK2V+wHE8eD wOOHZJJA6ZNR+VjYJlkTPpW8e5gkOdR+ealZajYn7Dx73fO5XeOJS7wE5X9JoxPY dKutuCENCKo7aJc1TuQq/PX2bMJ19cLwhrm0jN8wHskYL3FXZqdkA6QP428jhIoN mqps+tpq/MpcncyLtX0js6/d8IwHkvG96/d+i808CGyOGSGyjz1bR/O5ECCM3y4/ Uvpp2wz8t68cjzpamq9UAa6ESDnzQsGMydrixumo3uu1sNsK3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIRuyt1C4LP5WlO/ysWUDmYz5I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDI1NmNhM2UtYmFmYS0z NGU2LTg4ODEtMTgxNTE5Y2M2NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChOGs2Nky4Qd2ObTfVPi2GNaNxR1mXeoxZ7hgXOYX648fCOfRNphjJz N02he4sWDhjGRwrWAlgFZcb6R8LaYdikWFmrmPpOeAiQo8yQUq7uHFEthN4uS5Tx AL7J+eE92CqAh9nWY49y7n1v8+6FgdaAf+hqSfebjA0a27iyMFcNmIeVR4FfUCY2 G7TQQksuHUueE4KmJrWyINlEUHG1M7RY9NcifgmNN3oWdmdWNbsRMqKonWInBhSv viWgdLTAGlij/pbbdIcffGvOU9bpzjefAISN1EYmQtOqB+WsM2ft1xqMynxWftbP rkvq0S+CTQzOzoftbt3Ah4StvJgTOss= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:16 2025 by rpki-client