$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa File: 6b209b49-fd69-3e18-a25b-f032d8f835be.roa (raw, json) Hash identifier: WmSymEO/kW+DqUl/WzoJBgRi+Yr2J+EcPlZH3LCcNZs= Subject key identifier: A1:00:F9:1D:96:02:31:AC:F2:2B:74:7D:69:1B:08:5C:84:B1:EE:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4725A118AA7D31409C560 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa Signing time: Tue 22 Apr 2025 09:36:39 +0000 ROA not before: Tue 22 Apr 2025 09:36:39 +0000 ROA not after: Mon 21 Jul 2025 09:36:39 +0000 asID: 19905 IP address blocks: 173.21.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:72:5a:11:8a:a7:d3:14:09:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:36:39 2025 GMT Not After : Jul 21 09:36:39 2025 GMT Subject: CN=b77a8aca-c754-4ebe-aad6-4a04a34425ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:ef:3c:76:27:25:7d:31:13:7a:2d:74:e3: ed:23:99:55:d0:da:c6:b2:05:d5:e8:6c:e6:21:db: b5:1a:a0:b8:0a:0f:2e:aa:eb:72:bc:0e:4d:56:22: e3:dc:8c:a6:ce:c0:61:b0:d7:92:18:ae:a1:ad:36: 6d:8e:8f:e5:be:b9:07:ae:bc:43:fe:22:7f:d9:d2: 33:7e:7d:fb:3d:c2:20:bf:ef:31:d8:2e:a3:23:de: dd:c4:60:a9:b1:ef:89:fe:0b:47:67:a1:97:1b:88: 5d:9e:0d:b9:73:d3:f1:c9:de:91:57:4e:88:d8:6b: ed:84:1a:c1:c9:c5:58:de:8f:9c:4a:76:90:2e:4c: 44:12:9e:03:b0:e7:6d:c0:7c:1b:11:7e:13:05:31: ba:b1:25:cc:20:c7:a9:69:66:ac:57:06:5e:38:0f: 69:fe:1d:7f:6e:dd:dc:1a:02:6e:66:5e:11:42:e3: 25:e7:3b:1d:7f:9d:58:cd:2e:81:a0:2e:1f:ad:cf: 7b:58:31:3f:45:46:a0:21:a6:b3:52:16:4d:d1:fc: 7e:72:7f:43:d0:a8:c7:6e:88:86:e6:b2:ef:e5:ef: 1b:34:d0:15:0e:8b:6b:00:d4:71:4a:44:7f:4b:16: 09:b6:80:53:48:56:bd:aa:3a:73:20:f1:03:20:ad: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:00:F9:1D:96:02:31:AC:F2:2B:74:7D:69:1B:08:5C:84:B1:EE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:02:fc:ea:f4:83:98:ee:a7:9b:cb:4a:4e:bb:2f:e2:f0:ba: d7:c0:0b:de:08:4c:14:f2:f4:dd:b0:52:39:70:39:68:7d:b7: c8:d0:06:71:d4:9b:6b:0e:20:f5:70:78:9f:91:d6:24:a6:3a: 60:e0:9a:d8:78:72:10:41:7e:ca:d7:7d:44:9d:47:2c:1b:a0: c9:78:00:12:d6:96:ea:d4:74:7c:02:41:53:2d:9f:be:12:d8: 59:03:52:45:95:34:f5:00:df:32:ef:78:74:69:df:4a:42:b6: 6e:51:fe:7b:79:88:1b:f9:8a:e9:34:6a:de:a0:31:f9:5c:2c: c2:cc:ab:3e:7a:8b:f8:a4:f7:9a:44:51:90:4b:ad:ea:f7:8d: 02:29:3b:63:9c:97:0f:02:b4:04:da:28:b6:11:6c:48:e7:de: 06:90:56:19:ac:7b:76:50:26:ac:bb:a1:64:8c:b1:6c:e3:de: dc:2b:ba:78:02:6b:3f:bc:ce:9b:72:3e:97:cf:57:39:32:fb: c7:8c:a7:6e:f8:10:3a:fb:32:9f:f3:da:3b:33:cc:c1:c1:41: ee:95:e0:f4:ce:4a:1c:92:3b:79:4d:96:66:4f:4f:81:92:28: e2:d7:b2:85:ab:64:31:90:a4:68:ed:96:40:7e:7b:5c:6a:90: 5d:3e:52:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9HJaEYqn0xQJxWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5MzYzOVoXDTI1MDcyMTA5MzYzOVowLzEtMCsGA1UEAxMk Yjc3YThhY2EtYzc1NC00ZWJlLWFhZDYtNGEwNGEzNDQyNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZLvPHYnJX0xE3otdOPtI5lV0NrGsgXV6Gzm Idu1GqC4Cg8uqutyvA5NViLj3IymzsBhsNeSGK6hrTZtjo/lvrkHrrxD/iJ/2dIz fn37PcIgv+8x2C6jI97dxGCpse+J/gtHZ6GXG4hdng25c9Pxyd6RV06I2GvthBrB ycVY3o+cSnaQLkxEEp4DsOdtwHwbEX4TBTG6sSXMIMepaWasVwZeOA9p/h1/bt3c GgJuZl4RQuMl5zsdf51YzS6BoC4frc97WDE/RUagIaazUhZN0fx+cn9D0KjHboiG 5rLv5e8bNNAVDotrANRxSkR/SxYJtoBTSFa9qjpzIPEDIK1O1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEA+R2WAjGs8it0fWkbCFyEse64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmIyMDliNDktZmQ2OS0z ZTE4LWEyNWItZjAzMmQ4ZjgzNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcC/Or0g5jup5vLSk67L+LwutfAC94ITBTy9N2wUjlwOWh9t8jQBnHU m2sOIPVweJ+R1iSmOmDgmth4chBBfsrXfUSdRywboMl4ABLWlurUdHwCQVMtn74S 2FkDUkWVNPUA3zLveHRp30pCtm5R/nt5iBv5iuk0at6gMflcLMLMqz56i/ik95pE UZBLrer3jQIpO2Oclw8CtATaKLYRbEjn3gaQVhmse3ZQJqy7oWSMsWzj3twrungC az+8zptyPpfPVzky+8eMp274EDr7Mp/z2jszzMHBQe6V4PTOShySO3lNlmZPT4GS KOLXsoWrZDGQpGjtlkB+e1xqkF0+Ur8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:21 2025 by rpki-client