$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa File: 98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa (raw, json) Hash identifier: IDgtkOlijppkCoTAuuXX71Jq09JHJWCgfVOjQkVwxqE= Subject key identifier: C7:58:2B:84:42:03:B3:FC:9D:B0:06:C5:33:0B:3B:1D:BB:97:56:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA43D6C6535F7A772D6180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:43:d6:c6:53:5f:7a:77:2d:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=38469f1b-b859-4d1c-93b5-ca63d0c9c5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:48:60:c6:bd:02:86:95:54:6d:5a:2e:20:34: a5:32:be:15:58:ce:67:9e:7b:69:4e:7b:09:39:ca: 65:d9:57:bd:a1:17:a3:d3:b1:79:0a:f8:9c:10:f3: 29:00:23:06:4c:c2:25:0d:29:51:cc:51:3a:30:05: 73:35:67:c4:f1:b4:38:32:1f:b6:ec:be:7b:9e:13: b4:f7:44:55:78:16:7c:5e:fd:75:1c:ba:97:6e:ea: f9:a9:5c:59:71:f7:c6:10:64:52:9e:3e:cb:4b:e7: e9:ba:b8:0f:90:5e:1c:9a:9e:c9:84:d8:bc:91:40: ac:56:06:72:34:d9:32:14:04:29:b4:b1:fb:e0:ce: fc:15:98:2d:21:9d:35:2d:35:e3:81:51:fe:80:9b: 7b:c0:42:3e:b6:e4:b0:4f:c7:7c:a4:47:2c:e7:81: 18:11:d1:b5:f5:a8:2b:fd:9a:40:04:61:c2:2f:9c: 85:63:0e:aa:1d:e1:50:7c:71:0f:83:ca:9b:b0:0d: d8:a9:2c:4d:47:c0:14:ee:00:50:50:1b:0e:c4:c9: aa:4c:dc:d8:1d:30:04:be:95:dd:f7:06:2e:cb:fc: cf:b1:3f:b3:2c:d7:ac:a5:da:18:16:4a:01:e9:98: 4f:48:bb:5a:8e:1a:f9:27:54:d7:ec:a3:b2:7e:f7: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:58:2B:84:42:03:B3:FC:9D:B0:06:C5:33:0B:3B:1D:BB:97:56:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e2:52:03:97:86:a6:34:e7:1f:40:65:45:fe:42:9d:31:fb: f2:09:29:6c:83:4b:32:51:99:fb:72:dc:f2:a7:ff:c3:b1:78: 2b:e6:19:cd:ef:2e:9d:69:24:97:80:8d:48:1b:05:17:68:6a: 15:af:fe:10:45:d1:e8:58:4a:9e:3b:b8:de:14:9d:2e:1c:30: b7:df:08:1f:9c:aa:fb:bd:42:17:64:ef:63:32:f7:0f:3c:eb: 7a:ec:f0:85:d4:c4:93:0e:72:bf:dc:7a:60:0a:9c:b4:4f:65: 0a:af:99:88:19:3a:b6:5c:dc:f9:22:7e:03:58:02:43:c8:6b: b9:b0:79:9e:9b:b9:91:04:1b:e0:61:6e:03:a8:78:12:91:db: 05:f1:05:3d:17:6e:65:6e:50:30:6c:5d:12:bb:09:24:f0:1c: 9f:27:62:f3:fc:13:53:58:24:d9:43:9b:80:6c:5e:4f:01:5b: ae:29:48:29:ad:3c:2e:23:3e:6a:35:c0:f3:5e:98:96:28:d1: eb:49:ab:cb:72:e7:7a:bc:10:d3:04:a0:fe:2d:f9:89:04:3c: 43:c5:b4:25:ec:83:c5:74:9a:e5:bd:e1:71:80:1b:39:bd:4f: 7b:52:65:05:54:fa:c8:65:43:a8:a1:03:75:7e:b2:20:c0:db: 6f:1d:94:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukPWxlNfenctYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Mzg0NjlmMWItYjg1OS00ZDFjLTkzYjUtY2E2M2QwYzljNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUhgxr0ChpVUbVouIDSlMr4VWM5nnntpTnsJ Ocpl2Ve9oRej07F5CvicEPMpACMGTMIlDSlRzFE6MAVzNWfE8bQ4Mh+27L57nhO0 90RVeBZ8Xv11HLqXbur5qVxZcffGEGRSnj7LS+fpurgPkF4cmp7JhNi8kUCsVgZy NNkyFAQptLH74M78FZgtIZ01LTXjgVH+gJt7wEI+tuSwT8d8pEcs54EYEdG19agr /ZpABGHCL5yFYw6qHeFQfHEPg8qbsA3YqSxNR8AU7gBQUBsOxMmqTNzYHTAEvpXd 9wYuy/zPsT+zLNespdoYFkoB6ZhPSLtajhr5J1TX7KOyfvfyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdYK4RCA7P8nbAGxTMLOx27l1ZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOThmYTMxYTgtYTJiMS0z NTFiLWE0NWItNGNmOGMzNGFiZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjiUgOXhqY05x9AZUX+Qp0x+/IJKWyDSzJRmfty3PKn/8OxeCvmGc3v Lp1pJJeAjUgbBRdoahWv/hBF0ehYSp47uN4UnS4cMLffCB+cqvu9Qhdk72My9w88 63rs8IXUxJMOcr/cemAKnLRPZQqvmYgZOrZc3PkifgNYAkPIa7mweZ6buZEEG+Bh bgOoeBKR2wXxBT0XbmVuUDBsXRK7CSTwHJ8nYvP8E1NYJNlDm4BsXk8BW64pSCmt PC4jPmo1wPNemJYo0etJq8ty53q8ENMEoP4t+YkEPEPFtCXsg8V0muW94XGAGzm9 T3tSZQVU+shlQ6ihA3V+siDA228dlGA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:36 2025 by rpki-client