$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa File: ad35f282-4358-39cf-a530-e512a7b2efe6.roa (raw, json) Hash identifier: v3CS8nbSVzLPDin9MUg6ESHUaoXuz2iDd05UsZg6IDw= Subject key identifier: 5C:AA:7E:35:26:A0:93:EC:86:E7:58:33:06:09:71:C3:7A:A6:3E:7C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1CBCDD0D00993B793B96 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:1c:bc:dd:0d:00:99:3b:79:3b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6edf78ac-2817-4e99-9a1c-03ca3656b3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:12:7b:d1:83:b1:ce:c3:bd:a0:2f:29:11: 28:69:3e:a4:d8:35:cb:76:f9:c4:7b:97:0e:0d:1c: 37:9a:55:99:67:00:00:45:8e:14:8e:e1:f5:d3:8f: 53:c4:bd:f1:7d:92:9c:23:0e:68:11:7d:72:f9:ca: 57:ab:76:cd:04:c1:b6:16:da:7e:a3:20:46:dc:76: 60:a2:a5:0a:f0:92:25:36:96:2b:57:05:29:fb:04: 89:8d:1a:cb:d1:a8:3a:48:e3:46:63:35:9c:f8:e5: c8:d0:d2:9c:35:ca:9d:6c:be:79:3a:bd:03:59:a5: 5a:d5:3c:6a:40:6c:07:45:47:50:90:33:cd:44:fb: c6:bb:47:08:a7:fa:af:9d:1c:55:5e:6d:05:95:63: 53:c7:c2:f7:f1:88:07:a1:ea:ab:09:a4:4b:9a:f3: 53:c5:5e:40:2a:ad:c6:83:51:76:f2:dd:84:0c:2f: 3d:4f:f1:58:40:2d:8c:c8:df:74:02:56:6d:32:9b: 1f:87:16:6b:c4:75:27:47:9e:7d:1d:52:72:2a:54: dc:03:c6:e5:89:19:59:42:d0:bd:62:17:d1:a9:35: 77:0f:19:db:d3:a2:9e:4c:d3:ae:65:55:25:70:19: 9b:28:34:d9:94:30:da:c5:5d:2e:9c:13:23:1b:b6: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AA:7E:35:26:A0:93:EC:86:E7:58:33:06:09:71:C3:7A:A6:3E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:90:25:8b:91:21:9d:7e:a8:fe:87:f8:a1:3e:65:fa:ed:c9: 6e:85:aa:ef:04:90:3a:77:2e:67:61:d5:9a:ff:75:df:31:2d: 4b:e5:c8:bb:cc:68:55:f7:af:b7:b6:c1:42:97:c0:0d:73:d7: 8f:fb:97:d4:80:95:e4:51:c6:62:39:b4:9e:16:c9:f0:84:b6: 62:92:c8:56:6e:38:98:4e:f7:fd:0d:f5:09:98:5b:d2:1f:f6: 65:54:56:42:da:82:fd:3c:fc:a3:43:2a:ad:33:bb:60:46:c9: c7:f4:46:f6:42:df:72:d6:e7:04:56:23:be:1c:9c:26:10:2a: 50:68:2a:dc:78:7d:be:d5:5b:59:db:34:96:e2:2f:3c:10:76: ec:ab:41:94:5c:2c:53:35:03:37:86:70:e7:dc:cc:b7:82:54: ed:73:05:e2:88:c7:65:1e:3b:e9:b3:04:1f:bb:12:b7:ac:e2: 07:f0:34:06:5b:c8:07:99:1f:fe:97:eb:d9:5d:b2:f9:62:93: 86:b9:e5:a2:bb:40:ce:7e:dd:4b:89:af:e5:3a:02:f5:90:5e: 9b:c7:fd:fa:01:80:d6:34:74:82:3f:b0:aa:b6:9e:ff:93:3f: f8:8c:70:90:83:4e:0c:09:34:26:84:d2:4b:f4:9e:07:04:24: 15:f9:a8:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhy83Q0AmTt5O5YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmVkZjc4YWMtMjgxNy00ZTk5LTlhMWMtMDNjYTM2NTZiM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprcSe9GDsc7DvaAvKREoaT6k2DXLdvnEe5cO DRw3mlWZZwAARY4UjuH1049TxL3xfZKcIw5oEX1y+cpXq3bNBMG2Ftp+oyBG3HZg oqUK8JIlNpYrVwUp+wSJjRrL0ag6SONGYzWc+OXI0NKcNcqdbL55Or0DWaVa1Txq QGwHRUdQkDPNRPvGu0cIp/qvnRxVXm0FlWNTx8L38YgHoeqrCaRLmvNTxV5AKq3G g1F28t2EDC89T/FYQC2MyN90AlZtMpsfhxZrxHUnR559HVJyKlTcA8bliRlZQtC9 YhfRqTV3Dxnb06KeTNOuZVUlcBmbKDTZlDDaxV0unBMjG7bWGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyqfjUmoJPshudYMwYJccN6pj58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQzNWYyODItNDM1OC0z OWNmLWE1MzAtZTUxMmE3YjJlZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaQJYuRIZ1+qP6H+KE+ZfrtyW6Fqu8EkDp3Lmdh1Zr/dd8xLUvlyLvM aFX3r7e2wUKXwA1z14/7l9SAleRRxmI5tJ4WyfCEtmKSyFZuOJhO9/0N9QmYW9If 9mVUVkLagv08/KNDKq0zu2BGycf0RvZC33LW5wRWI74cnCYQKlBoKtx4fb7VW1nb NJbiLzwQduyrQZRcLFM1AzeGcOfczLeCVO1zBeKIx2UeO+mzBB+7Eres4gfwNAZb yAeZH/6X69ldsvlik4a55aK7QM5+3UuJr+U6AvWQXpvH/foBgNY0dII/sKq2nv+T P/iMcJCDTgwJNCaE0kv0ngcEJBX5qO0= -----END CERTIFICATE-----Generated at Sat Apr 26 22:02:29 2025 by rpki-client