$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa File: 973cd140-cab6-388f-8e11-26b2f8fc5390.roa (raw, json) Hash identifier: IdF3RS/D8n8dXkUtblRGOinwpdkcJ4V/TjOJy7BOECs= Subject key identifier: FA:03:42:D0:DD:69:97:FA:46:3E:55:07:5C:EF:94:46:F9:D1:DF:57 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BBEEABBAB5DB88679940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:ee:ab:ba:b5:db:88:67:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f792bc40-6b06-4b11-9576-41bb45d5da82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7b:e7:12:0d:9c:b6:23:66:e2:d8:5d:4e:1b: 1e:c9:7c:fd:cc:a5:b4:bb:9b:36:6e:0d:54:aa:ef: e5:8a:3b:05:6a:3b:02:69:06:3f:5f:9f:3f:f8:b4: 65:45:41:c5:a4:a3:2a:9c:53:4d:90:a2:50:88:63: 2c:7a:97:a4:29:e6:ea:58:91:47:29:b8:0a:a7:24: 28:63:46:c5:fa:b1:bb:6d:a5:4b:c1:66:37:6e:10: 97:2c:7e:39:61:43:3d:d5:8c:6b:5f:f6:f7:a2:82: 4a:6f:e8:31:55:00:c9:1b:ce:8a:0d:4a:22:63:c0: 44:1b:25:b0:cc:06:64:46:25:06:a5:c0:0f:31:4f: 91:44:e5:ba:28:06:f2:93:e3:c5:b3:97:75:ce:36: 80:8b:43:da:a5:67:66:14:f8:57:00:58:d3:5d:0a: 43:9b:ed:5e:6e:9a:e8:25:c6:d5:d2:d4:a1:17:32: cc:99:fe:88:c3:c2:be:32:a6:8a:c6:76:30:25:84: 8c:82:43:be:0d:b4:ea:8e:c8:53:b9:56:c2:a4:45: 2a:cb:3e:69:9b:92:83:f3:3b:a6:79:4f:13:be:c9: c0:15:fa:af:40:b0:df:95:fa:b7:d3:77:0c:e7:a5: 35:cf:b1:77:be:f1:bf:a7:7c:5e:06:86:b4:94:e6: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:03:42:D0:DD:69:97:FA:46:3E:55:07:5C:EF:94:46:F9:D1:DF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:23:18:f4:2f:02:5e:48:81:86:7a:32:ec:dd:78:d4:63:1f: 07:65:cd:4b:83:11:b5:2a:a7:a9:36:25:7c:67:e0:a1:13:cd: 0b:a4:10:e5:fc:ee:47:40:c6:0b:78:3e:e2:f0:38:83:d2:8a: fe:25:ca:68:ac:79:8d:4e:7e:fc:8e:95:39:8a:72:be:a5:89: ab:d0:7a:96:7f:c4:e6:cd:e7:99:b7:4f:7d:5b:3f:6a:a9:7c: f5:d9:73:66:d0:a5:b8:1c:6b:fe:ab:83:52:95:9d:40:dc:6a: 68:14:50:55:7e:45:f0:1a:26:3a:ab:d8:b0:9e:7d:9a:bc:a8: cb:de:b1:fd:6d:25:c0:1e:6f:5a:0c:87:93:e4:3f:51:f7:e3: 1c:38:ff:b0:9b:7b:83:59:76:10:63:ad:e5:2d:33:c5:23:c2: a6:34:d9:2c:de:b3:51:07:21:18:ad:34:a1:d6:07:a0:20:45: 26:f1:c8:a4:cb:c3:ef:0c:bd:fa:ee:7c:c1:51:79:db:08:4e: 4d:73:4e:fd:ee:9e:88:d6:02:9e:54:f0:a8:24:7b:28:c2:d5: c7:1d:b8:76:f7:97:ff:5f:0c:bd:17:70:e1:12:91:46:a7:20: 74:0f:c1:5e:87:ea:9c:de:a7:40:37:8f:61:31:5b:77:ca:bc: db:a8:60:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLvuq7q124hnmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Zjc5MmJjNDAtNmIwNi00YjExLTk1NzYtNDFiYjQ1ZDVkYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3vnEg2ctiNm4thdThseyXz9zKW0u5s2bg1U qu/lijsFajsCaQY/X58/+LRlRUHFpKMqnFNNkKJQiGMsepekKebqWJFHKbgKpyQo Y0bF+rG7baVLwWY3bhCXLH45YUM91YxrX/b3ooJKb+gxVQDJG86KDUoiY8BEGyWw zAZkRiUGpcAPMU+RROW6KAbyk+PFs5d1zjaAi0PapWdmFPhXAFjTXQpDm+1ebpro JcbV0tShFzLMmf6Iw8K+MqaKxnYwJYSMgkO+DbTqjshTuVbCpEUqyz5pm5KD8zum eU8TvsnAFfqvQLDflfq303cM56U1z7F3vvG/p3xeBoa0lOavSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoDQtDdaZf6Rj5VB1zvlEb50d9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTczY2QxNDAtY2FiNi0z ODhmLThlMTEtMjZiMmY4ZmM1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4jGPQvAl5IgYZ6MuzdeNRjHwdlzUuDEbUqp6k2JXxn4KETzQukEOX8 7kdAxgt4PuLwOIPSiv4lymiseY1OfvyOlTmKcr6liavQepZ/xObN55m3T31bP2qp fPXZc2bQpbgca/6rg1KVnUDcamgUUFV+RfAaJjqr2LCefZq8qMvesf1tJcAeb1oM h5PkP1H34xw4/7Cbe4NZdhBjreUtM8UjwqY02Szes1EHIRitNKHWB6AgRSbxyKTL w+8MvfrufMFRedsITk1zTv3unojWAp5U8KgkeyjC1ccduHb3l/9fDL0XcOESkUan IHQPwV6H6pzep0A3j2ExW3fKvNuoYOA= -----END CERTIFICATE-----Generated at Sun Jun 15 14:48:12 2025 by rpki-client