$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa File: bb27664d-fc5f-35c9-9f09-952ca477db81.roa (raw, json) Hash identifier: NxdPdCx02EB5FfIwWeTVAX4c+vN+INZDWPPcm3pDjZc= Subject key identifier: 9D:8B:39:8F:85:A5:54:FA:09:BA:0E:09:5C:88:DA:E9:08:1D:83:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4748DCA636BB02920900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:47:48:dc:a6:36:bb:02:92:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=9f08200c-1d6c-46d7-a862-3cf552016873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:9a:ad:d5:83:94:dc:41:98:ba:32:73:ba: ab:11:4a:b7:f7:5c:54:93:19:ce:ab:6d:da:17:e8: 9c:4b:fa:61:41:a9:1a:0e:db:a9:12:8f:4e:b0:da: 2c:b9:83:81:9c:c5:cb:f0:5e:af:1d:ee:91:c6:84: 5b:85:2e:a5:fa:a1:b5:f0:24:1b:63:78:29:35:71: da:80:c4:5c:f9:ba:29:8d:bb:b6:09:84:90:77:87: 32:e3:db:63:49:d8:20:75:de:7b:b9:45:ce:23:12: 2f:db:93:ab:ef:af:6d:3d:cc:85:f0:02:20:37:ec: 82:15:10:bf:bc:63:2b:cc:14:b7:2e:e2:84:55:4d: c5:b4:00:88:69:43:0b:ac:7a:02:ea:59:11:bd:ab: 5c:60:d4:9d:bd:d6:8e:f6:40:fe:b0:a0:df:19:61: f2:b1:45:d4:02:86:4d:da:50:71:c6:e7:b0:23:55: be:0d:79:11:06:3a:57:b4:88:6a:e7:e7:55:44:64: 85:a1:9f:a1:d3:eb:ba:99:f9:e4:f5:85:93:b7:41: 59:88:7b:0a:f1:ac:c6:00:54:63:73:b7:83:a0:67: 00:30:b9:b5:e5:56:7e:8e:03:87:bf:ea:77:43:f9: 98:62:ad:ac:4e:0a:c1:99:9d:1c:00:9b:ca:cf:50: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8B:39:8F:85:A5:54:FA:09:BA:0E:09:5C:88:DA:E9:08:1D:83:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f8:41:7f:9f:f4:71:0d:58:0f:4b:f7:f3:cc:54:57:3c:d6: f9:a9:d5:33:5e:40:5d:46:e9:0d:cb:6c:58:b4:87:d7:47:28: ae:5f:e8:95:9f:6f:ac:32:a8:85:28:73:b1:3b:2f:86:a3:0b: 46:98:92:67:f5:7d:fe:ee:08:d1:48:a5:0a:a1:3d:6b:03:36: cf:5c:05:67:62:60:84:76:3f:c0:f0:28:11:ff:24:20:67:a5: 8e:77:ec:b0:10:27:69:be:e7:07:69:ee:7f:5c:6d:0f:8f:bd: 7b:ab:51:e5:7a:91:b0:70:03:a5:55:48:5b:6a:4d:4c:79:c4: dd:8e:fb:a2:e2:26:e2:d2:04:f4:4d:a1:e5:71:dc:d7:92:f6: 00:e8:c5:a9:eb:1f:54:25:92:7a:cc:61:5d:06:c2:9d:3c:de: 36:eb:95:8e:13:f7:e7:c3:14:6b:46:fa:91:2b:4e:d0:36:da: df:3e:29:f0:25:ac:98:45:82:36:97:73:28:33:53:ec:68:e0: a5:d8:b5:46:e3:76:02:4d:20:23:9a:5f:f7:29:a2:c3:84:65: 03:3b:a1:a8:62:de:74:d3:e3:91:45:99:55:22:bb:cb:a1:6e: 0c:8a:11:04:cd:75:0e:51:d6:03:7f:d1:bb:cf:d2:2b:3e:b9: 14:fd:e8:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70dI3KY2uwKSCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OWYwODIwMGMtMWQ2Yy00NmQ3LWE4NjItM2NmNTUyMDE2ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzOardWDlNxBmLoyc7qrEUq391xUkxnOq23a F+icS/phQakaDtupEo9OsNosuYOBnMXL8F6vHe6RxoRbhS6l+qG18CQbY3gpNXHa gMRc+bopjbu2CYSQd4cy49tjSdggdd57uUXOIxIv25Or769tPcyF8AIgN+yCFRC/ vGMrzBS3LuKEVU3FtACIaUMLrHoC6lkRvatcYNSdvdaO9kD+sKDfGWHysUXUAoZN 2lBxxuewI1W+DXkRBjpXtIhq5+dVRGSFoZ+h0+u6mfnk9YWTt0FZiHsK8azGAFRj c7eDoGcAMLm15VZ+jgOHv+p3Q/mYYq2sTgrBmZ0cAJvKz1CyPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2LOY+FpVT6CboOCVyI2ukIHYNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmIyNzY2NGQtZmM1Zi0z NWM5LTlmMDktOTUyY2E0NzdkYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf4QX+f9HENWA9L9/PMVFc81vmp1TNeQF1G6Q3LbFi0h9dHKK5f6JWf b6wyqIUoc7E7L4ajC0aYkmf1ff7uCNFIpQqhPWsDNs9cBWdiYIR2P8DwKBH/JCBn pY537LAQJ2m+5wdp7n9cbQ+PvXurUeV6kbBwA6VVSFtqTUx5xN2O+6LiJuLSBPRN oeVx3NeS9gDoxanrH1QlknrMYV0Gwp083jbrlY4T9+fDFGtG+pErTtA22t8+KfAl rJhFgjaXcygzU+xo4KXYtUbjdgJNICOaX/cposOEZQM7oahi3nTT45FFmVUiu8uh bgyKEQTNdQ5R1gN/0bvP0is+uRT96EQ= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:12 2025 by rpki-client