$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa File: db92a908-6801-3164-911b-959f6161a9b9.roa (raw, json) Hash identifier: ne91zauPKxZoRCT0lENAvJUHy577yFnY7U0NGSwDk40= Subject key identifier: B6:06:26:AB:68:D7:B6:9D:9A:19:4A:6B:5B:E9:9D:C7:B5:DF:A1:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF58BCD6E9F220D8BE2540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:58:bc:d6:e9:f2:20:d8:be:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=4f3a0f8d-8d3f-4238-9be7-9fa2d26caa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:72:75:53:95:04:c8:d9:7d:a9:c1:69:b0:bf: e3:1b:7d:22:1e:33:53:b7:d8:69:54:09:fd:47:ab: 70:dd:1e:43:50:a9:1a:a1:cc:13:b7:5a:77:0e:eb: 71:1c:db:63:4b:dc:ae:5b:a0:73:02:fd:0b:03:4a: c5:67:7c:a0:ae:8f:c6:29:d4:63:cf:c5:7a:5e:40: bb:50:17:58:75:63:c4:79:8e:ca:a2:0c:dc:0b:e1: 3d:de:19:02:73:5d:2b:27:87:88:5a:87:65:1d:70: dd:0f:32:fa:1a:03:cd:cd:ab:79:16:9c:a3:40:e9: f2:80:c0:ae:75:cd:23:bb:08:d5:7b:a0:a5:05:6e: 41:51:ef:fb:59:a5:57:8a:09:3f:14:08:a9:9a:39: 10:1c:b0:3a:1c:49:13:db:fb:4d:5e:9b:e7:1a:f0: cf:bc:1a:53:00:03:da:34:60:a1:c2:3d:3d:e4:6b: 57:30:ef:d7:dc:60:f0:d1:d9:1a:5d:36:be:21:c3: 8c:4b:90:5b:f7:80:e5:76:96:04:80:0b:81:a7:7b: 48:d0:3f:cc:89:91:30:5a:6a:b8:c3:35:dd:c4:dc: 68:48:d2:c9:61:a8:2e:ae:4e:e2:09:7e:40:fa:3f: f0:c3:18:ec:f3:3a:be:a0:f1:56:d4:ac:32:70:51: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:06:26:AB:68:D7:B6:9D:9A:19:4A:6B:5B:E9:9D:C7:B5:DF:A1:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2f:f1:fc:07:96:7c:00:fc:89:ad:ce:23:ed:b1:d0:8e:44: fe:75:4b:df:2d:de:57:5e:87:85:fa:56:07:17:5d:d3:6f:ca: 53:59:b2:f3:1b:96:a0:70:68:d0:d5:ff:5c:35:84:3b:6e:d9: 3b:0f:ee:84:3c:64:3d:df:e0:31:de:ae:07:4c:64:3f:97:87: a1:1e:ff:35:2c:23:b3:ab:a4:02:df:98:b9:9c:7d:1c:c6:a1: 47:a7:c3:f1:e4:87:a6:f0:9f:a8:ca:ee:3d:f6:5d:70:8f:fe: 1f:dd:48:1d:9e:99:ba:dc:66:b9:a7:c6:43:d9:eb:94:99:3d: c8:2f:d2:8a:06:df:45:71:98:c7:3b:52:90:67:ad:66:fb:ce: 87:ae:a5:a4:e9:58:18:66:38:19:f7:f4:17:be:30:b5:f4:91: 48:0c:65:6d:45:54:d1:28:ac:2d:d3:08:81:84:46:ad:2a:85: 0b:93:65:01:b1:d5:08:90:da:94:b2:02:97:17:60:aa:7d:4e: 18:df:84:72:31:6b:45:88:97:da:b6:51:b4:c3:bc:32:d8:41: 2a:d6:ee:43:02:7c:23:64:9a:43:eb:6e:c5:ad:8d:95:79:80: 66:53:f0:12:7c:a1:e3:0b:6e:4e:62:d7:4a:b2:09:78:df:37: 74:6a:ea:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71i81unyINi+JUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NGYzYTBmOGQtOGQzZi00MjM4LTliZTctOWZhMmQyNmNhYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnJ1U5UEyNl9qcFpsL/jG30iHjNTt9hpVAn9 R6tw3R5DUKkaocwTt1p3DutxHNtjS9yuW6BzAv0LA0rFZ3ygro/GKdRjz8V6XkC7 UBdYdWPEeY7KogzcC+E93hkCc10rJ4eIWodlHXDdDzL6GgPNzat5FpyjQOnygMCu dc0juwjVe6ClBW5BUe/7WaVXigk/FAipmjkQHLA6HEkT2/tNXpvnGvDPvBpTAAPa NGChwj095GtXMO/X3GDw0dkaXTa+IcOMS5Bb94DldpYEgAuBp3tI0D/MiZEwWmq4 wzXdxNxoSNLJYagurk7iCX5A+j/wwxjs8zq+oPFW1KwycFE9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYGJqto17admhlKa1vpnce136EnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI5MmE5MDgtNjgwMS0z MTY0LTkxMWItOTU5ZjYxNjFhOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAv8fwHlnwA/ImtziPtsdCORP51S98t3ldeh4X6VgcXXdNvylNZsvMb lqBwaNDV/1w1hDtu2TsP7oQ8ZD3f4DHergdMZD+Xh6Ee/zUsI7OrpALfmLmcfRzG oUenw/Hkh6bwn6jK7j32XXCP/h/dSB2embrcZrmnxkPZ65SZPcgv0ooG30VxmMc7 UpBnrWb7zoeupaTpWBhmOBn39Be+MLX0kUgMZW1FVNEorC3TCIGERq0qhQuTZQGx 1QiQ2pSyApcXYKp9ThjfhHIxa0WIl9q2UbTDvDLYQSrW7kMCfCNkmkPrbsWtjZV5 gGZT8BJ8oeMLbk5i10qyCXjfN3Rq6ls= -----END CERTIFICATE-----Generated at Sun Apr 27 18:30:17 2025 by rpki-client