$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa File: 70b0e265-b1b3-3960-957a-0b222bb6a80d.roa (raw, json) Hash identifier: P8WOjGb1l8jPqsZSs0bt+2cGVecq2rdRop93qSaYkYA= Subject key identifier: 76:D6:5F:E0:15:96:31:84:52:C3:47:4B:0D:70:FE:E0:89:20:0E:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C48D90058EA6DB49667400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:8d:90:05:8e:a6:db:49:66:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=9ed5ee63-11c6-4517-9906-8fecc014f2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d4:64:45:5f:bf:73:ff:7c:94:d6:b5:ba:7f: 7e:3d:d0:40:58:f7:b8:de:cb:2e:95:75:1b:c0:a5: 93:57:21:15:64:93:46:51:47:ea:5e:9f:ce:7a:ae: 0a:7b:d1:46:f2:d2:be:91:9c:45:a5:21:90:e8:65: 12:9e:af:cb:8a:50:a1:45:f1:75:f0:fa:b2:ff:f9: 36:76:af:0d:d2:9a:61:3a:e6:6b:33:da:00:47:f4: 93:5d:64:97:80:6d:50:ea:da:d3:38:e3:1e:06:a1: ab:59:c7:80:41:fe:48:67:07:16:79:0e:f9:76:96: 75:85:df:e6:35:e4:8b:ac:58:71:74:f1:18:06:41: 05:39:62:a6:73:38:41:49:45:ff:a9:ce:9b:d3:57: 73:14:fb:9d:d3:20:c7:c0:67:b6:17:6f:30:c1:3f: 1f:41:88:2c:8c:91:cd:ed:b9:93:a4:3c:54:bd:32: 09:ef:16:06:53:97:10:72:9b:c8:09:cc:c5:54:da: 9e:a8:05:82:8d:eb:48:56:49:41:48:42:fa:de:1f: f0:29:b1:ee:65:26:e9:05:be:0e:cf:bb:d1:26:fa: 7c:86:4c:2a:91:5f:7a:bf:65:6a:5f:0d:9b:6a:d0: cc:48:63:d9:f3:0a:2a:4c:68:66:13:9e:72:ed:51: ae:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D6:5F:E0:15:96:31:84:52:C3:47:4B:0D:70:FE:E0:89:20:0E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a7:90:4a:ec:82:32:4d:c5:42:23:40:1b:a4:1f:96:07:fc: ea:9c:6d:01:60:ef:c6:cd:d3:94:77:d7:c7:1a:37:62:d3:71: 57:2c:c5:6a:3e:b3:e8:39:94:24:0b:75:ed:cf:ce:7c:74:a1: 8a:bf:c7:44:05:25:cd:07:38:50:87:70:12:05:25:36:bb:88: 88:36:5a:f0:bb:99:ca:1c:4b:3b:b6:68:7c:32:f8:cd:02:20: 9e:4e:c8:df:87:67:25:03:ca:af:2a:e8:90:1a:bb:56:29:4b: 2f:93:49:83:19:79:9d:bf:8e:e7:40:2f:19:73:24:c4:38:77: ba:d6:a4:93:81:b9:30:34:8c:88:97:74:d3:b2:13:5e:0c:3c: a9:0c:65:71:4b:34:6b:4a:09:77:0d:5d:bb:f0:ae:bb:d0:42: 5f:1d:73:f8:89:fb:a4:fa:96:2d:7d:db:6d:40:1c:0d:11:e5: 6a:2e:54:8d:25:71:fa:fc:3a:66:cc:2a:93:f9:1e:81:a7:2d: 34:db:6b:ff:32:ab:49:72:aa:eb:ab:da:11:7d:3d:89:8f:27: 68:c4:98:75:a2:41:ea:02:01:12:b8:42:7e:f1:5b:fd:bb:35: 1f:55:4d:1c:11:5f:49:10:43:b9:41:c9:e2:bd:cc:1a:dd:1a: b4:1d:1a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxI2QBY6m20lmdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk OWVkNWVlNjMtMTFjNi00NTE3LTk5MDYtOGZlY2MwMTRmMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNRkRV+/c/98lNa1un9+PdBAWPe43ssulXUb wKWTVyEVZJNGUUfqXp/Oeq4Ke9FG8tK+kZxFpSGQ6GUSnq/LilChRfF18Pqy//k2 dq8N0pphOuZrM9oAR/STXWSXgG1Q6trTOOMeBqGrWceAQf5IZwcWeQ75dpZ1hd/m NeSLrFhxdPEYBkEFOWKmczhBSUX/qc6b01dzFPud0yDHwGe2F28wwT8fQYgsjJHN 7bmTpDxUvTIJ7xYGU5cQcpvICczFVNqeqAWCjetIVklBSEL63h/wKbHuZSbpBb4O z7vRJvp8hkwqkV96v2VqXw2batDMSGPZ8woqTGhmE55y7VGuSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbWX+AVljGEUsNHSw1w/uCJIA5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzBiMGUyNjUtYjFiMy0z OTYwLTk1N2EtMGIyMjJiYjZhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGinkErsgjJNxUIjQBukH5YH/OqcbQFg78bN05R318caN2LTcVcsxWo+ s+g5lCQLde3Pznx0oYq/x0QFJc0HOFCHcBIFJTa7iIg2WvC7mcocSzu2aHwy+M0C IJ5OyN+HZyUDyq8q6JAau1YpSy+TSYMZeZ2/judALxlzJMQ4d7rWpJOBuTA0jIiX dNOyE14MPKkMZXFLNGtKCXcNXbvwrrvQQl8dc/iJ+6T6li19221AHA0R5WouVI0l cfr8OmbMKpP5HoGnLTTba/8yq0lyquur2hF9PYmPJ2jEmHWiQeoCARK4Qn7xW/27 NR9VTRwRX0kQQ7lByeK9zBrdGrQdGjI= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:59 2025 by rpki-client