$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed140409-84a2-3f73-ab4c-4228df8efbda.roa File: ed140409-84a2-3f73-ab4c-4228df8efbda.roa (raw, json) Hash identifier: 3mcnJ9fAm8JTw+0iEc9eAbzpANQL/cJxZH+dUUxyTNw= Subject key identifier: 70:33:D5:C1:67:04:CA:FA:37:A4:89:CC:68:12:68:0A:55:DD:58:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA072C247B12EF466CED00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed140409-84a2-3f73-ab4c-4228df8efbda.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:07:2c:24:7b:12:ef:46:6c:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3b3d6218-93f7-4cdb-9d54-04ca58fff8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:cb:ae:dc:a3:f8:71:28:98:65:d8:71:4e: 45:52:e6:88:e1:7d:05:d5:19:95:63:6d:fc:d7:b9: dd:bd:13:38:22:99:2b:21:21:29:6c:4a:1a:59:03: db:3e:fe:bc:84:43:2e:7c:54:b5:89:7b:13:49:ee: 00:1e:20:97:be:08:9f:63:c3:60:05:a2:0b:7a:b9: 08:21:5b:0a:5a:56:47:83:14:b0:b8:2e:1d:f4:00: 70:51:a8:cf:0e:75:be:6a:4d:cd:d7:dc:26:da:ec: e0:6b:7c:9b:9f:3e:b0:16:94:24:db:e1:c9:56:75: 4a:70:05:9f:b7:fd:76:27:77:be:bd:51:58:37:e9: 37:56:b8:a6:f7:4d:c6:bb:11:ea:60:0d:c8:f8:3e: 63:18:66:f7:55:61:c0:17:78:08:a9:f6:c2:05:05: da:a6:70:74:8e:9c:1b:01:24:eb:f7:9f:14:76:49: f9:62:db:3f:1e:96:c2:91:c4:e9:c3:cf:54:67:f5: 60:c0:6b:7f:2c:a9:1d:18:07:0a:a1:47:f4:29:89: da:db:88:a8:4e:c3:eb:07:27:a4:d9:84:e8:a8:3d: b1:cc:b4:06:98:1e:d9:46:94:3d:2b:de:08:42:0a: 93:ed:b5:27:ea:1c:d5:93:0e:5e:04:6b:d9:b7:c0: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:D5:C1:67:04:CA:FA:37:A4:89:CC:68:12:68:0A:55:DD:58:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed140409-84a2-3f73-ab4c-4228df8efbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:63:7d:7d:5e:2d:e7:7c:0c:85:0a:05:72:f2:a4:7e:1f:76: 97:25:e4:7b:fa:69:fe:23:1d:b0:65:2b:cb:ef:7d:ad:7e:8d: 01:c2:74:a9:8c:ed:ef:a5:67:e5:66:7d:5d:c2:ca:22:91:d2: 41:e0:f4:6c:1c:f5:e6:81:00:fd:f0:b1:28:cb:a0:1a:aa:14: fd:81:93:78:cb:98:6b:59:36:89:b2:b6:da:8b:66:16:3b:e7: 23:99:62:25:5d:8b:f3:ef:13:3a:4b:c4:24:49:9c:c7:f7:44: 34:e1:62:1c:aa:34:ee:ea:59:2c:a1:e7:7c:d8:cf:e5:02:95: 38:21:48:8b:c8:e8:5d:95:60:87:a4:c7:7d:ac:41:6c:29:72: bb:f6:bf:49:d0:5e:d8:40:9e:c6:9a:9f:c3:c4:b8:a3:3b:fa: 3a:6a:ef:4b:ed:8a:6c:78:34:20:40:8f:1a:8a:11:98:d4:df: de:00:b8:ae:c4:e7:af:00:fe:e9:23:f8:fe:69:73:1d:14:2f: c4:0b:5b:10:fa:32:4e:26:d1:52:2f:f0:a1:e9:9b:49:43:e9: 84:e7:ac:60:5a:21:5e:89:99:30:8b:22:7e:65:82:54:30:fc: 0b:05:b3:e3:7f:ff:90:17:0d:88:08:82:6f:46:63:93:b3:c5: 40:a5:f1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugcsJHsS70Zs7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2IzZDYyMTgtOTNmNy00Y2RiLTlkNTQtMDRjYTU4ZmZmOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIjLrtyj+HEomGXYcU5FUuaI4X0F1RmVY238 17ndvRM4IpkrISEpbEoaWQPbPv68hEMufFS1iXsTSe4AHiCXvgifY8NgBaILerkI IVsKWlZHgxSwuC4d9ABwUajPDnW+ak3N19wm2uzga3ybnz6wFpQk2+HJVnVKcAWf t/12J3e+vVFYN+k3Vrim903GuxHqYA3I+D5jGGb3VWHAF3gIqfbCBQXapnB0jpwb ASTr958Udkn5Yts/HpbCkcTpw89UZ/VgwGt/LKkdGAcKoUf0KYna24ioTsPrByek 2YToqD2xzLQGmB7ZRpQ9K94IQgqT7bUn6hzVkw5eBGvZt8BqAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAz1cFnBMr6N6SJzGgSaApV3Vi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWQxNDA0MDktODRhMi0z ZjczLWFiNGMtNDIyOGRmOGVmYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNjfX1eLed8DIUKBXLypH4fdpcl5Hv6af4jHbBlK8vvfa1+jQHCdKmM 7e+lZ+VmfV3CyiKR0kHg9Gwc9eaBAP3wsSjLoBqqFP2Bk3jLmGtZNomyttqLZhY7 5yOZYiVdi/PvEzpLxCRJnMf3RDThYhyqNO7qWSyh53zYz+UClTghSIvI6F2VYIek x32sQWwpcrv2v0nQXthAnsaan8PEuKM7+jpq70vtimx4NCBAjxqKEZjU394AuK7E 568A/ukj+P5pcx0UL8QLWxD6Mk4m0VIv8KHpm0lD6YTnrGBaIV6JmTCLIn5lglQw /AsFs+N//5AXDYgIgm9GY5OzxUCl8Ss= -----END CERTIFICATE-----Generated at Sun Apr 27 03:13:47 2025 by rpki-client