$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa File: ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa (raw, json) Hash identifier: dFEDUCIxJh/bz4CH+NeGQrkrSWvlxWFtZRp9G1K2vVo= Subject key identifier: 67:41:7E:51:AA:DB:C9:DC:68:B4:0F:1A:7F:93:B3:77:9A:67:98:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA017361EB0B137915CF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:01:73:61:eb:0b:13:79:15:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0c346104-aed0-499c-8685-593a0aa0a84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:f1:26:29:eb:7c:14:52:40:f9:bc:af:d2: 57:4d:76:41:f9:b8:c0:25:30:a3:3c:af:a4:18:c2: 57:7a:88:83:e0:db:a0:04:08:40:55:62:be:cc:7c: be:6d:03:63:fe:17:1f:cd:f2:9d:6f:1f:09:9a:78: 95:e2:06:44:f5:01:56:8b:24:39:55:6d:fc:d1:4a: c1:84:be:33:15:95:10:33:fc:e8:65:cc:00:20:7f: 9d:30:74:fc:08:c5:93:55:72:64:f2:bb:93:43:b1: c3:18:7a:18:1c:0c:2b:17:d6:9a:22:7b:ed:94:a8: 50:48:68:02:0c:77:79:52:f1:5e:54:69:14:56:a6: 28:dd:fb:e8:0d:35:49:71:de:d5:10:eb:63:d1:a2: 4e:e2:54:c3:6c:77:65:7c:7f:3b:be:c5:29:ed:11: a8:58:6c:07:a0:fd:ab:2f:87:7c:3a:d1:ec:1d:ac: 12:17:34:93:ce:23:fb:32:00:90:87:19:01:67:43: 5f:55:f5:11:04:d4:0c:32:d5:1c:b5:37:26:0c:5d: b1:1f:4d:e0:dc:6e:1e:08:88:d1:d8:78:7b:70:a5: f7:8d:56:13:ff:4e:bf:34:a1:26:15:c1:f7:b3:10: 73:a6:4e:19:b8:5b:83:46:34:1b:3d:b1:ad:36:cc: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:41:7E:51:AA:DB:C9:DC:68:B4:0F:1A:7F:93:B3:77:9A:67:98:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:34:33:cf:ce:28:73:bc:83:5b:0c:2b:60:bb:44:d7:d6:85: 12:ea:63:f0:5b:e5:53:2c:f8:0d:5d:09:cc:80:63:66:20:e0: 22:12:29:bc:f8:1c:0e:4b:1c:91:71:a8:a1:91:25:ea:8c:18: c7:ba:19:63:4c:3e:4c:86:82:4a:57:98:1f:38:da:6b:5d:db: 7c:bd:d7:a6:e8:92:47:56:80:c6:3e:5a:2e:78:34:a8:f0:9f: 5a:ba:af:06:84:f4:19:e9:da:d3:09:24:ac:4e:d3:9e:24:26: 39:c0:8d:3c:7b:bc:04:4c:72:6e:cd:01:5d:7c:19:8e:7e:ec: 60:6f:cb:62:b1:b2:81:4e:0a:b7:1a:c6:32:f8:1c:4f:71:c1: df:96:85:3f:3f:4d:02:8a:d9:07:28:b2:62:02:c4:d7:d5:cd: 29:e7:29:87:d7:24:a0:57:2e:1d:5e:06:30:76:a5:34:43:a3: b5:51:66:81:5e:a9:03:5a:43:2f:cb:11:f3:da:f1:a4:af:46: 74:ac:1f:42:ab:ef:e9:ac:fa:ac:53:ff:cd:3c:c9:82:27:e6: 08:ef:9d:3a:bc:7b:1c:8b:09:20:86:a8:6f:2f:b2:71:1d:63: c4:3e:52:31:df:8e:27:93:e4:92:75:f6:7d:f3:d3:af:b7:93: 40:e5:31:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugFzYesLE3kVzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGMzNDYxMDQtYWVkMC00OTljLTg2ODUtNTkzYTBhYTBhODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SXxJinrfBRSQPm8r9JXTXZB+bjAJTCjPK+k GMJXeoiD4NugBAhAVWK+zHy+bQNj/hcfzfKdbx8JmniV4gZE9QFWiyQ5VW380UrB hL4zFZUQM/zoZcwAIH+dMHT8CMWTVXJk8ruTQ7HDGHoYHAwrF9aaInvtlKhQSGgC DHd5UvFeVGkUVqYo3fvoDTVJcd7VEOtj0aJO4lTDbHdlfH87vsUp7RGoWGwHoP2r L4d8OtHsHawSFzSTziP7MgCQhxkBZ0NfVfURBNQMMtUctTcmDF2xH03g3G4eCIjR 2Hh7cKX3jVYT/06/NKEmFcH3sxBzpk4ZuFuDRjQbPbGtNszMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdBflGq28ncaLQPGn+Ts3eaZ5giMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQ4YjAyOTMtYTNjMC0z MDY3LWE5ZTQtNmQzNWQyOGMxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF80M8/OKHO8g1sMK2C7RNfWhRLqY/Bb5VMs+A1dCcyAY2Yg4CISKbz4 HA5LHJFxqKGRJeqMGMe6GWNMPkyGgkpXmB842mtd23y916bokkdWgMY+Wi54NKjw n1q6rwaE9Bnp2tMJJKxO054kJjnAjTx7vARMcm7NAV18GY5+7GBvy2KxsoFOCrca xjL4HE9xwd+WhT8/TQKK2QcosmICxNfVzSnnKYfXJKBXLh1eBjB2pTRDo7VRZoFe qQNaQy/LEfPa8aSvRnSsH0Kr7+ms+qxT/808yYIn5gjvnTq8exyLCSCGqG8vsnEd Y8Q+UjHfjieT5JJ19n3z06+3k0DlMXI= -----END CERTIFICATE-----Generated at Sun Apr 27 08:43:42 2025 by rpki-client