$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c387f5ff-dbdb-304b-bf9b-b508fa7b3253.roa File: c387f5ff-dbdb-304b-bf9b-b508fa7b3253.roa (raw, json) Hash identifier: W+EK9gbyHdlJNRXed6f8nk/ofR08IDBpyN1XhL5Z1U8= Subject key identifier: A8:9A:9D:CE:ED:77:FA:ED:C5:D0:36:DD:3E:6F:56:F6:24:46:23:EC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA117A85A3EBECAA226400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c387f5ff-dbdb-304b-bf9b-b508fa7b3253.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:11:7a:85:a3:eb:ec:aa:22:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d55a6fe-a1e2-4eca-b32b-78c26d93749d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:33:57:ae:91:2d:1b:2b:1d:89:2b:34:0f: a4:0a:e7:86:b0:3a:90:b2:d0:17:0b:c5:ec:1f:12: 8b:ed:48:e8:46:bb:c0:b6:50:a8:b9:a8:23:f0:a6: c5:07:6e:89:f4:fe:74:50:30:f9:12:2a:3b:a7:9f: 17:1f:6b:85:6f:9a:ea:12:ae:65:73:b5:50:a9:13: d9:7c:16:18:14:00:04:ca:fb:4d:d7:c8:cf:59:2b: c6:28:38:f0:0e:3f:61:11:a6:46:e1:ce:95:3b:44: 93:5c:70:1b:e1:98:fd:cd:42:dd:09:73:93:1c:dd: 42:80:b7:2a:e8:71:2f:fc:d3:4b:55:25:e2:f6:54: 51:f3:17:6e:02:7d:8b:b8:be:c6:19:36:96:d9:9b: a1:dc:46:67:28:a2:d6:6a:0a:3b:31:e9:bf:8a:ae: 64:c1:65:0e:9b:ac:cc:b8:86:84:c7:00:84:2f:1e: 22:a9:b0:a0:b3:46:af:78:4f:9c:c7:d8:0a:9a:ca: 3b:e9:f0:14:d0:c6:73:9f:8a:6e:eb:35:67:00:95: ba:dd:bb:5d:3a:b6:b3:d5:37:ba:f3:a3:69:48:36: 30:e2:2c:bf:ce:b9:70:46:d2:07:5d:ab:e3:e9:1b: 45:84:01:90:a6:9d:7f:72:56:e6:4e:57:df:f6:42: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9A:9D:CE:ED:77:FA:ED:C5:D0:36:DD:3E:6F:56:F6:24:46:23:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c387f5ff-dbdb-304b-bf9b-b508fa7b3253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1a:54:6c:6e:9f:23:9d:93:62:ca:fa:de:42:dd:03:01:fc: 25:e9:f6:2f:6d:6e:ba:71:b7:06:65:09:77:37:4e:48:2c:6f: 15:84:31:69:48:fb:bb:10:34:db:3b:88:ba:70:4f:a9:15:c8: 60:eb:37:d7:9a:08:99:20:e4:48:a0:ba:dd:fe:60:56:fd:6d: 36:9b:3c:be:3f:53:8a:3a:a8:6f:be:4e:61:30:f6:96:23:6d: d3:4d:8d:a4:e5:d3:f3:bf:f1:45:b5:1a:ed:c6:1e:88:58:1e: f4:ee:17:da:26:21:41:f8:19:17:0e:0d:eb:70:5c:15:61:b7: e0:a4:5c:10:6d:98:68:15:5a:b1:82:03:14:bb:57:27:c4:86: 28:a7:72:47:73:e0:c1:6f:73:e9:b2:50:ac:49:9e:a0:97:31: c2:26:c6:47:2b:c4:c3:52:aa:74:7a:44:60:67:4c:f6:02:3a: 38:53:52:92:69:e9:9f:11:48:50:a1:04:57:93:e5:8f:9b:93: c5:28:af:9c:e6:a2:99:fa:e9:e2:f4:49:66:13:ff:d8:3c:0d: 5e:5a:08:9d:35:db:9c:5f:d6:2f:0c:5f:c4:3e:bb:bd:b8:87: 54:2f:1a:51:bb:58:90:76:91:a2:a7:74:9a:df:35:86:a7:d9: 7c:03:8c:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhF6haPr7KoiZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Q1NWE2ZmUtYTFlMi00ZWNhLWIzMmItNzhjMjZkOTM3NDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjUzV66RLRsrHYkrNA+kCueGsDqQstAXC8Xs HxKL7UjoRrvAtlCouagj8KbFB26J9P50UDD5Eio7p58XH2uFb5rqEq5lc7VQqRPZ fBYYFAAEyvtN18jPWSvGKDjwDj9hEaZG4c6VO0STXHAb4Zj9zULdCXOTHN1CgLcq 6HEv/NNLVSXi9lRR8xduAn2LuL7GGTaW2Zuh3EZnKKLWago7Mem/iq5kwWUOm6zM uIaExwCELx4iqbCgs0aveE+cx9gKmso76fAU0MZzn4pu6zVnAJW63btdOraz1Te6 86NpSDYw4iy/zrlwRtIHXavj6RtFhAGQpp1/clbmTlff9kImbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKianc7td/rtxdA23T5vVvYkRiPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzM4N2Y1ZmYtZGJkYi0z MDRiLWJmOWItYjUwOGZhN2IzMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8aVGxunyOdk2LK+t5C3QMB/CXp9i9tbrpxtwZlCXc3TkgsbxWEMWlI +7sQNNs7iLpwT6kVyGDrN9eaCJkg5Eigut3+YFb9bTabPL4/U4o6qG++TmEw9pYj bdNNjaTl0/O/8UW1Gu3GHohYHvTuF9omIUH4GRcODetwXBVht+CkXBBtmGgVWrGC AxS7VyfEhiinckdz4MFvc+myUKxJnqCXMcImxkcrxMNSqnR6RGBnTPYCOjhTUpJp 6Z8RSFChBFeT5Y+bk8Uor5zmopn66eL0SWYT/9g8DV5aCJ0125xf1i8MX8Q+u724 h1QvGlG7WJB2kaKndJrfNYan2XwDjJA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:47:45 2025 by rpki-client