$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa File: 84b5df57-c963-3224-b71c-932349312f1b.roa (raw, json) Hash identifier: AqcCs8sZ4utnF3WkbN/BGDiztYDvTnkbwXMwz+4wTt4= Subject key identifier: 6D:3F:DE:01:52:75:E0:B9:C8:9F:5C:C8:BB:01:9C:D2:A8:4A:59:BD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3391D0C7A5C4DD4EB180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:33:91:d0:c7:a5:c4:dd:4e:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=312c127a-4782-4940-8bd0-1ed05f04b4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:39:a2:88:4d:cd:5c:2e:44:93:24:3e:00: fe:95:12:ae:ae:0b:10:0e:8b:55:6b:2b:d6:79:a1: 98:17:8b:9d:48:db:ba:0d:98:bd:6b:5d:db:e6:0a: 48:6e:af:e5:cb:05:aa:3a:d5:20:fa:6c:e6:14:68: b1:23:d4:80:c4:32:b1:f0:42:b0:a0:13:e4:31:c1: df:8c:53:c8:04:05:53:41:c1:ac:7b:fc:44:d0:5b: 71:c5:94:49:94:66:8a:fc:dd:e5:e6:59:28:4f:29: 3f:94:da:52:a9:09:6b:8b:0f:7c:ab:30:7a:0e:26: 15:f8:6e:34:70:7e:26:f1:50:7c:fc:cf:e7:b1:6c: 72:6f:45:9f:6e:fa:37:68:43:72:89:c4:3e:40:1b: 53:b7:f7:9f:2d:ce:84:dd:17:ef:ad:2d:75:be:0c: 1b:87:61:0d:20:f3:08:cf:9f:09:a0:e0:2b:b1:d0: a5:3d:a4:c4:31:ee:96:1c:59:b6:58:c3:d8:8c:cd: 35:ff:61:6b:66:76:81:33:9f:d6:85:f5:d7:c0:55: 80:c5:99:a5:9e:a6:88:b6:f8:14:9e:60:d3:60:7b: 9f:5b:53:5a:45:25:10:28:8c:bc:4f:b8:b1:9c:3a: 64:24:dc:55:f7:2b:16:18:a9:47:03:b8:4d:8f:11: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:DE:01:52:75:E0:B9:C8:9F:5C:C8:BB:01:9C:D2:A8:4A:59:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b8:a6:44:e8:f6:1c:85:98:e9:46:dd:8c:db:b5:b7:2d:b4: b2:24:8f:bb:39:48:4f:1d:a1:e8:ae:cc:0c:85:b7:b3:98:6e: a0:99:76:e6:2f:f7:27:56:26:19:88:3d:c4:01:58:46:fc:8e: 7b:80:57:11:a1:9f:4a:aa:d8:43:1d:64:20:85:62:fc:e2:9d: f9:04:ce:ca:a8:69:f9:c7:64:30:65:c5:ef:38:c0:61:46:16: 82:cc:e4:b8:ad:7f:35:6b:06:83:f7:fc:11:75:cc:fe:f2:4c: f2:3c:ce:a8:26:a4:16:7f:09:aa:d7:64:57:5a:ce:ea:cd:43: 97:45:64:a3:51:f0:49:a2:d1:19:2b:bc:56:67:b1:10:d8:d7: 63:5f:9f:d1:f0:e6:23:f8:73:93:c5:1f:8e:03:11:cc:a5:72: 44:07:2c:a5:50:0b:32:d6:c0:05:65:8b:a2:be:08:31:1b:18: b0:ff:d2:95:65:60:71:31:d0:be:4c:05:5e:da:de:fd:78:5c: 01:ee:43:6d:59:36:45:15:09:67:d6:9d:f9:82:a2:ae:47:17: c2:db:5f:68:fa:82:78:2e:67:72:9e:c1:fb:29:c7:3b:51:b6: b3:dd:f8:74:bf:27:5b:9d:2c:4e:42:41:26:f1:cc:a1:0f:8d: 6d:43:ef:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujOR0MelxN1OsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzEyYzEyN2EtNDc4Mi00OTQwLThiZDAtMWVkMDVmMDRiNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxI5oohNzVwuRJMkPgD+lRKurgsQDotVayvW eaGYF4udSNu6DZi9a13b5gpIbq/lywWqOtUg+mzmFGixI9SAxDKx8EKwoBPkMcHf jFPIBAVTQcGse/xE0FtxxZRJlGaK/N3l5lkoTyk/lNpSqQlriw98qzB6DiYV+G40 cH4m8VB8/M/nsWxyb0Wfbvo3aENyicQ+QBtTt/efLc6E3RfvrS11vgwbh2ENIPMI z58JoOArsdClPaTEMe6WHFm2WMPYjM01/2FrZnaBM5/WhfXXwFWAxZmlnqaItvgU nmDTYHufW1NaRSUQKIy8T7ixnDpkJNxV9ysWGKlHA7hNjxFJIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0/3gFSdeC5yJ9cyLsBnNKoSlm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRiNWRmNTctYzk2My0z MjI0LWI3MWMtOTMyMzQ5MzEyZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi4pkTo9hyFmOlG3YzbtbcttLIkj7s5SE8doeiuzAyFt7OYbqCZduYv 9ydWJhmIPcQBWEb8jnuAVxGhn0qq2EMdZCCFYvzinfkEzsqoafnHZDBlxe84wGFG FoLM5LitfzVrBoP3/BF1zP7yTPI8zqgmpBZ/CarXZFdazurNQ5dFZKNR8Emi0Rkr vFZnsRDY12Nfn9Hw5iP4c5PFH44DEcylckQHLKVQCzLWwAVli6K+CDEbGLD/0pVl YHEx0L5MBV7a3v14XAHuQ21ZNkUVCWfWnfmCoq5HF8LbX2j6gnguZ3KewfspxztR trPd+HS/J1udLE5CQSbxzKEPjW1D7w8= -----END CERTIFICATE-----Generated at Sat Apr 26 23:49:12 2025 by rpki-client