$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa File: a6229991-1291-3d4f-94d1-83e8c2cea121.roa (raw, json) Hash identifier: 3fMNeitkija5QHyKrcAxwcDzTIf36EfNHEm9qJFdEb8= Subject key identifier: DB:29:C4:AD:AA:1C:4B:B6:D4:50:DC:FE:63:28:5D:C0:9F:E2:0C:E6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A31B5643CA3031C311076B780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.21.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:64:3c:a3:03:1c:31:10:76:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=0b39bb2d-d59d-4ccc-8a73-8395c8b2e4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:76:12:d5:a8:a9:4a:e6:fb:6e:6f:f0:4c: 72:94:df:10:8a:42:72:de:83:32:26:fb:c4:45:e2: 08:10:75:0c:89:15:69:a3:10:45:75:b1:fa:c1:21: 0b:cf:96:44:bb:76:fe:29:3d:85:b8:ef:32:c1:5e: 07:52:15:6e:91:8f:a4:3c:f6:96:f4:6c:8a:53:75: 64:c8:de:de:df:66:87:3c:74:0e:71:de:58:d5:c6: c2:b1:0c:9c:92:bb:92:d9:4a:97:aa:f1:f0:57:cc: 67:73:75:c5:0c:37:a8:e8:cd:26:34:d1:31:56:a8: d5:2f:c2:6d:3a:7b:f0:19:20:95:35:af:77:8a:99: 2d:6f:e0:65:ae:64:63:a5:5a:7d:a3:cf:ad:a3:d7: db:ec:45:d8:61:c7:a7:54:fa:82:91:03:dd:f0:63: be:42:07:e2:e8:f4:b6:cf:14:60:5e:de:21:ad:3e: 4e:de:c5:54:9d:7e:00:6e:60:09:a2:ce:d1:15:e3: 22:d4:23:7d:dc:c0:bf:fc:c0:af:45:77:f8:58:c0: a0:fa:fa:6a:c4:c6:c9:42:5b:a6:fc:b7:2c:59:e6: 1b:6c:e4:85:81:0a:40:ee:bc:21:d6:c6:aa:a3:fb: 65:ea:28:58:d4:8c:9a:4e:af:f3:05:4f:1f:d7:29: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:29:C4:AD:AA:1C:4B:B6:D4:50:DC:FE:63:28:5D:C0:9F:E2:0C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:86:8a:e2:7d:e9:6d:2f:15:f0:64:f6:6f:79:06:0a:62:a0: 74:8a:47:7d:b8:58:04:8c:b2:aa:bf:34:10:59:57:78:ef:8d: 21:70:95:95:e7:fc:c2:d8:38:82:14:60:5f:6d:42:80:39:5e: 69:2b:8a:3a:9f:0a:21:88:40:b1:b1:e9:43:0e:bf:f8:12:12: b2:46:e8:c4:24:9c:60:76:f1:b0:60:8a:8b:1d:ef:0a:ec:9a: a6:c0:41:3d:a7:54:02:da:a7:39:69:36:d6:e2:5f:47:85:b6: a4:06:f9:98:33:ab:22:75:79:49:ad:dc:3c:30:d0:75:3b:ff: 86:d5:fc:79:68:52:55:25:1d:7a:43:e4:77:6f:db:39:6b:d0: bb:3e:c8:03:84:d0:65:42:84:ca:a3:48:b1:b7:c8:72:9d:b4: 97:7b:14:14:10:6c:b9:05:42:99:9a:c7:32:30:b9:4e:42:9a: 7b:9c:56:48:42:2b:5d:49:7f:0b:b5:89:4f:12:ff:f9:22:96: 92:ef:23:22:cd:02:1b:9e:85:50:09:e6:a9:f9:2b:c6:7f:a1: f2:99:74:2e:31:43:32:ba:f5:d6:75:a8:5f:f8:88:56:9c:b8: e9:f6:1c:4f:25:29:1d:fb:58:38:39:20:b0:24:98:1d:c4:6a: 0c:55:05:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWQ8owMcMRB2t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk MGIzOWJiMmQtZDU5ZC00Y2NjLThhNzMtODM5NWM4YjJlNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXN2EtWoqUrm+25v8ExylN8QikJy3oMyJvvE ReIIEHUMiRVpoxBFdbH6wSELz5ZEu3b+KT2FuO8ywV4HUhVukY+kPPaW9GyKU3Vk yN7e32aHPHQOcd5Y1cbCsQyckruS2UqXqvHwV8xnc3XFDDeo6M0mNNExVqjVL8Jt OnvwGSCVNa93ipktb+BlrmRjpVp9o8+to9fb7EXYYcenVPqCkQPd8GO+Qgfi6PS2 zxRgXt4hrT5O3sVUnX4AbmAJos7RFeMi1CN93MC//MCvRXf4WMCg+vpqxMbJQlum /LcsWeYbbOSFgQpA7rwh1saqo/tl6ihY1IyaTq/zBU8f1ylXOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNspxK2qHEu21FDc/mMoXcCf4gzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYyMjk5OTEtMTI5MS0z ZDRmLTk0ZDEtODNlOGMyY2VhMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2GiuJ96W0vFfBk9m95BgpioHSKR324WASMsqq/NBBZV3jvjSFwlZXn /MLYOIIUYF9tQoA5XmkrijqfCiGIQLGx6UMOv/gSErJG6MQknGB28bBgiosd7wrs mqbAQT2nVALapzlpNtbiX0eFtqQG+ZgzqyJ1eUmt3Dww0HU7/4bV/HloUlUlHXpD 5Hdv2zlr0Ls+yAOE0GVChMqjSLG3yHKdtJd7FBQQbLkFQpmaxzIwuU5CmnucVkhC K11Jfwu1iU8S//kilpLvIyLNAhuehVAJ5qn5K8Z/ofKZdC4xQzK69dZ1qF/4iFac uOn2HE8lKR37WDg5ILAkmB3EagxVBZ8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:38:16 2025 by rpki-client