$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54de2e37-d485-3c83-8047-53215f106a40.roa File: 54de2e37-d485-3c83-8047-53215f106a40.roa (raw, json) Hash identifier: 0e+TnRSgpmBpQqumsn5D1FIv/HTtzQKH1f4uuKld4Uw= Subject key identifier: A3:43:21:FC:41:5A:A2:87:14:C1:E7:8E:30:5D:4B:6B:05:8F:CD:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4F4C9E4D74D3AA0E74580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54de2e37-d485-3c83-8047-53215f106a40.roa Signing time: Tue 22 Apr 2025 09:37:41 +0000 ROA not before: Tue 22 Apr 2025 09:37:41 +0000 ROA not after: Mon 21 Jul 2025 09:37:41 +0000 asID: 19905 IP address blocks: 173.21.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:f4:c9:e4:d7:4d:3a:a0:e7:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:41 2025 GMT Not After : Jul 21 09:37:41 2025 GMT Subject: CN=f4789e57-168d-487f-b2ef-15014fc1a78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:7a:1b:94:eb:2d:14:05:d3:73:36:ed:6a: 66:bd:86:df:07:45:9a:a1:47:05:e6:b4:65:e8:74: c3:44:54:9f:ea:c7:e3:66:18:c0:38:fb:43:8d:75: 75:f2:52:1e:d4:31:35:20:08:f2:9e:ac:fb:05:14: a1:c6:8e:31:67:bb:75:30:4c:93:5c:4b:5d:ab:0d: f8:c1:f8:9c:95:1f:81:57:90:00:a7:5a:63:48:12: f2:4b:56:2e:9c:3b:db:bb:22:93:53:92:54:d6:7d: 27:d9:32:3f:1b:f0:8c:f5:13:7d:7d:78:79:e4:a7: 39:b9:6a:4e:75:35:1b:94:26:cf:07:54:2c:78:8f: 2c:2c:fd:68:95:10:1b:fe:eb:0e:1b:2d:f4:3e:a6: d8:42:d7:1f:ed:3e:62:86:a0:a8:01:dc:95:a2:67: 40:70:7f:8d:81:32:5c:65:76:fa:2b:41:4a:e8:ea: 5d:1b:01:c0:3e:d6:d2:42:b5:2d:67:e5:c6:d2:4b: 30:d8:1f:d7:a6:af:6c:ec:87:74:50:ed:e6:0b:20: 8c:ea:31:b0:1c:66:d7:9d:5d:68:c9:73:eb:cf:1c: a3:1e:88:d1:43:6c:5e:56:97:9d:2d:c8:16:11:9b: cc:37:39:4f:a2:76:9b:56:f7:c9:01:4c:8b:19:df: 45:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:43:21:FC:41:5A:A2:87:14:C1:E7:8E:30:5D:4B:6B:05:8F:CD:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54de2e37-d485-3c83-8047-53215f106a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:75:67:35:64:ef:92:a7:c3:20:17:95:cf:5b:42:4e:0f:95: 10:b5:7c:30:10:4a:36:15:49:dd:79:bc:db:42:f4:c8:50:93: 54:3a:54:65:1d:37:53:51:9e:54:4d:51:39:8c:3e:54:f9:a0: 1d:91:00:e9:a1:98:32:73:76:08:42:2c:44:de:79:20:ca:67: cb:99:52:77:47:5b:6a:43:d0:84:d1:11:ad:bf:82:66:a5:c1: 87:df:58:dd:08:08:53:e0:56:57:1b:9b:cf:ac:1d:6a:85:d2: 6b:5e:f4:75:fb:8d:4c:2c:72:a8:57:e2:30:a8:aa:eb:20:4f: de:0f:7b:c8:b2:a2:86:4c:fd:bd:f5:6d:84:0d:95:79:fb:12: 1e:7e:6c:95:b4:d9:be:92:4a:b7:8b:98:8f:04:5f:9e:2a:b2: 5b:d1:99:4c:50:6a:82:6b:fb:ca:af:2b:77:24:a2:16:bb:d8: 90:64:ca:8c:fe:9b:01:cf:0b:d1:87:4f:89:88:52:a1:ef:d8: 33:79:6e:b4:4a:1e:c9:30:f1:cd:49:9d:97:1a:19:c3:d6:53: 59:52:6e:ec:6a:fb:b5:cd:8d:39:c6:62:8d:45:47:d9:7a:33: d4:7f:54:67:93:26:76:bf:c5:f6:fa:ee:89:63:d0:c6:f5:ed: 86:47:01:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9PTJ5NdNOqDnRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5Mzc0MVoXDTI1MDcyMTA5Mzc0MVowLzEtMCsGA1UEAxMk ZjQ3ODllNTctMTY4ZC00ODdmLWIyZWYtMTUwMTRmYzFhNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknd6G5TrLRQF03M27WpmvYbfB0WaoUcF5rRl 6HTDRFSf6sfjZhjAOPtDjXV18lIe1DE1IAjynqz7BRShxo4xZ7t1MEyTXEtdqw34 wficlR+BV5AAp1pjSBLyS1YunDvbuyKTU5JU1n0n2TI/G/CM9RN9fXh55Kc5uWpO dTUblCbPB1QseI8sLP1olRAb/usOGy30PqbYQtcf7T5ihqCoAdyVomdAcH+NgTJc ZXb6K0FK6OpdGwHAPtbSQrUtZ+XG0ksw2B/Xpq9s7Id0UO3mCyCM6jGwHGbXnV1o yXPrzxyjHojRQ2xeVpedLcgWEZvMNzlPonabVvfJAUyLGd9FowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNDIfxBWqKHFMHnjjBdS2sFj800MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTRkZTJlMzctZDQ4NS0z YzgzLTgwNDctNTMyMTVmMTA2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH11ZzVk75KnwyAXlc9bQk4PlRC1fDAQSjYVSd15vNtC9MhQk1Q6VGUd N1NRnlRNUTmMPlT5oB2RAOmhmDJzdghCLETeeSDKZ8uZUndHW2pD0ITREa2/gmal wYffWN0ICFPgVlcbm8+sHWqF0mte9HX7jUwscqhX4jCoqusgT94Pe8iyooZM/b31 bYQNlXn7Eh5+bJW02b6SSreLmI8EX54qslvRmUxQaoJr+8qvK3ckoha72JBkyoz+ mwHPC9GHT4mIUqHv2DN5brRKHskw8c1JnZcaGcPWU1lSbuxq+7XNjTnGYo1FR9l6 M9R/VGeTJna/xfb67olj0Mb17YZHASA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:50 2025 by rpki-client