$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb6d1108-6b24-309c-8be4-23ba0dd53e06.roa File: eb6d1108-6b24-309c-8be4-23ba0dd53e06.roa (raw, json) Hash identifier: eOARTD2lMAthnLNnMBczCbWqdG5JaCMAgLwXOmS2jqk= Subject key identifier: 0A:6B:99:60:C5:92:FB:D2:54:54:DD:87:9D:F5:88:72:A1:73:A3:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA43CA4FDD39C29E43E980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb6d1108-6b24-309c-8be4-23ba0dd53e06.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:43:ca:4f:dd:39:c2:9e:43:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=51d590ee-24ab-407d-b389-018fd9997cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:b1:41:ef:0d:e6:f8:d4:86:e9:3c:cf:3d: 12:1f:87:e4:23:19:71:c5:e7:1d:df:b4:d5:98:9f: a6:e0:5b:f5:db:f4:3a:c4:4d:5b:6d:a0:75:23:d4: dc:df:9a:00:76:04:de:95:ea:4b:9c:68:08:3b:a7: 80:f4:b7:9f:38:b1:34:32:7a:b7:63:23:9c:27:88: 84:b9:cf:c0:00:de:6a:40:92:d0:8c:5e:d3:cd:19: 02:d4:58:92:1a:a0:84:fa:44:5e:3f:af:cc:c0:ee: 79:3b:06:d1:96:b3:c5:5e:c8:4c:4d:f9:65:70:e5: 03:13:cc:80:cc:ae:00:fb:af:4d:e5:ea:81:d6:b0: bf:b7:3d:ea:41:d4:f3:66:bd:07:4a:84:f1:f7:d7: d7:d8:7b:b3:80:93:6c:94:0b:c6:2f:7e:ef:d1:b0: fe:25:f6:10:e2:85:7f:50:69:65:92:74:62:cd:2c: 50:36:25:65:07:54:8a:f0:c3:d1:2e:f2:0c:af:91: 49:91:6e:60:48:62:7f:00:d8:2d:75:ae:02:99:7b: f5:6d:2f:95:ac:e2:e2:9a:a5:a9:79:6d:c7:8a:21: 60:d8:b7:ab:ed:aa:7c:f9:57:67:85:d0:8a:b1:bb: b6:4d:12:d1:db:f6:e8:91:57:32:92:33:e1:62:86: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6B:99:60:C5:92:FB:D2:54:54:DD:87:9D:F5:88:72:A1:73:A3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb6d1108-6b24-309c-8be4-23ba0dd53e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f0:cd:ae:26:2a:d6:b6:f6:44:e4:04:2d:27:c7:16:2f:76: 9f:c2:e8:82:4d:ed:49:e4:7b:22:8c:ef:4d:83:32:3d:dd:2a: 7a:8d:8b:43:e9:53:7f:0c:0d:80:45:88:44:f3:db:dc:0e:9c: 88:c7:f8:11:25:3e:fe:5e:37:6d:af:36:83:1d:cb:07:2b:2a: 21:51:a3:db:c2:fe:08:30:83:b9:53:83:d6:3f:ac:24:35:4e: 5a:05:f4:dc:2e:a5:b4:92:6b:c7:9a:54:19:f2:4d:ca:dc:30: 92:1a:d8:58:90:9a:0a:d0:6c:8c:60:12:46:3a:66:4b:59:b9: 70:ab:4f:e0:ed:44:d2:fe:ed:9c:df:2e:cb:e0:b8:0a:62:0e: 18:f3:16:3d:e5:df:f0:5b:64:ae:71:23:dd:c7:37:88:7a:f7: 4d:f3:6c:66:e4:ad:39:73:a9:44:eb:32:db:7e:2e:b0:a5:34: 5b:f4:c8:bf:58:b2:9f:35:74:b1:67:0e:b5:46:8f:20:b7:7c: f3:a2:30:70:7d:c5:b3:5d:9d:20:e2:84:90:dc:cb:fa:10:e1: 0a:ad:37:a5:72:71:5c:c1:29:13:03:2b:49:96:3c:e3:d7:23: bc:2d:79:13:b2:18:df:64:e9:83:43:fc:20:9d:49:ee:ed:ac: 14:7c:92:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukPKT905wp5D6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTFkNTkwZWUtMjRhYi00MDdkLWIzODktMDE4ZmQ5OTk3Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJaxQe8N5vjUhuk8zz0SH4fkIxlxxecd37TV mJ+m4Fv12/Q6xE1bbaB1I9Tc35oAdgTelepLnGgIO6eA9LefOLE0Mnq3YyOcJ4iE uc/AAN5qQJLQjF7TzRkC1FiSGqCE+kReP6/MwO55OwbRlrPFXshMTfllcOUDE8yA zK4A+69N5eqB1rC/tz3qQdTzZr0HSoTx99fX2HuzgJNslAvGL37v0bD+JfYQ4oV/ UGllknRizSxQNiVlB1SK8MPRLvIMr5FJkW5gSGJ/ANgtda4CmXv1bS+VrOLimqWp eW3HiiFg2Ler7ap8+VdnhdCKsbu2TRLR2/bokVcykjPhYoaPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAprmWDFkvvSVFTdh531iHKhc6N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWI2ZDExMDgtNmIyNC0z MDljLThiZTQtMjNiYTBkZDUzZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDwza4mKta29kTkBC0nxxYvdp/C6IJN7UnkeyKM702DMj3dKnqNi0Pp U38MDYBFiETz29wOnIjH+BElPv5eN22vNoMdywcrKiFRo9vC/ggwg7lTg9Y/rCQ1 TloF9NwupbSSa8eaVBnyTcrcMJIa2FiQmgrQbIxgEkY6ZktZuXCrT+DtRNL+7Zzf LsvguApiDhjzFj3l3/BbZK5xI93HN4h6903zbGbkrTlzqUTrMtt+LrClNFv0yL9Y sp81dLFnDrVGjyC3fPOiMHB9xbNdnSDihJDcy/oQ4QqtN6VycVzBKRMDK0mWPOPX I7wteROyGN9k6YND/CCdSe7trBR8kok= -----END CERTIFICATE-----Generated at Sun Apr 27 02:54:50 2025 by rpki-client