$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa File: f2592244-3972-351d-a9b2-bcae5ff67549.roa (raw, json) Hash identifier: iscVd0jVbffG6Fz/1bKvu70OnxTdqkteiyZz4OSttl0= Subject key identifier: 2D:B6:68:0D:D4:52:3F:84:71:CA:27:2F:77:30:68:C0:E9:55:F0:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA141663726070337F62C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:14:16:63:72:60:70:33:7f:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=84acf1fb-4847-489f-8f6a-c14b9e75902e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:cc:10:2f:d2:ea:7e:73:ea:0c:6c:e0:99: 0a:0c:26:e9:bf:26:f6:82:f7:68:e4:7b:61:fd:f7: 5b:35:ae:71:23:de:24:2b:7c:50:34:40:cf:db:f5: cc:e7:af:67:42:eb:38:3b:5c:0f:ed:a3:04:9d:dc: 76:4c:5a:7c:6a:5c:bb:9b:c3:b0:db:6a:ea:20:88: e1:a5:33:ff:9e:ec:22:7e:48:e9:a5:91:97:90:6a: d8:ed:fd:9c:d9:28:d7:4b:4f:79:6e:05:c5:38:c7: 28:f7:d1:e3:9c:63:bc:0f:d6:63:59:b2:81:80:60: e7:d0:55:ac:78:75:94:64:79:c9:88:b1:21:fc:7e: 08:1c:7c:8d:ed:f2:08:dd:7b:58:6b:85:13:f6:8c: b5:1a:27:e6:59:14:69:1d:bf:4f:fa:0c:23:55:ec: 61:15:01:cd:2e:9e:99:28:84:88:02:8e:81:32:7c: 45:88:03:fe:ba:51:dd:d6:f0:87:05:70:84:ab:78: 4a:1a:b0:ed:c0:91:ff:8f:88:9b:69:cb:33:f0:1e: b2:38:9c:6c:d9:ba:9a:95:cd:75:11:60:96:0b:4e: ac:d1:02:4a:63:67:14:75:b7:99:f9:7d:70:06:32: 77:74:e4:e1:54:e1:18:24:93:53:3d:66:0a:9b:0e: 53:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B6:68:0D:D4:52:3F:84:71:CA:27:2F:77:30:68:C0:E9:55:F0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6d:7c:09:d4:9e:f1:6e:e2:f9:26:0c:4d:be:14:69:a3:dc: 69:3a:30:f4:1f:5d:21:e4:b5:71:a1:ca:8a:f2:0b:73:be:c2: 93:51:06:0f:e2:42:96:b3:fd:1b:58:d3:74:3b:78:bc:22:a4: ea:e0:7b:e8:1a:1b:f5:b3:28:eb:c6:01:72:9f:1a:40:11:5d: 1c:0e:7c:82:9a:89:14:9a:26:7f:57:b3:82:07:d1:3b:8a:aa: 80:85:ce:df:aa:07:b1:8d:1b:aa:03:01:68:23:d5:ae:c9:74: 7f:6c:ab:68:e7:af:d6:79:4d:a3:5b:f6:4c:0a:15:f0:58:6e: 6e:8d:c7:bd:2f:3e:84:97:78:f3:3e:40:84:01:c3:ac:fb:f8: 58:c1:a9:b7:b8:c7:6a:f4:be:5f:bf:47:9c:2b:14:3e:b5:84: 2d:a7:6b:5f:43:02:99:af:c6:b9:5c:49:db:93:33:e5:5c:cd: c9:5d:53:55:97:5b:f5:33:ff:fb:c6:72:b8:02:be:c5:12:c3: 92:ea:4d:bc:2c:83:55:bb:4e:2c:e0:20:75:d8:9e:f0:f5:78: 99:11:a1:52:26:83:17:bc:ae:ea:24:72:01:7e:59:45:79:8d: 9b:a7:47:4d:f8:1f:53:7f:dd:e6:a1:22:aa:15:44:8f:dc:3b: 27:c8:f1:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhQWY3JgcDN/YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODRhY2YxZmItNDg0Ny00ODlmLThmNmEtYzE0YjllNzU5MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaXMEC/S6n5z6gxs4JkKDCbpvyb2gvdo5Hth /fdbNa5xI94kK3xQNEDP2/XM569nQus4O1wP7aMEndx2TFp8aly7m8Ow22rqIIjh pTP/nuwifkjppZGXkGrY7f2c2SjXS095bgXFOMco99HjnGO8D9ZjWbKBgGDn0FWs eHWUZHnJiLEh/H4IHHyN7fII3XtYa4UT9oy1GifmWRRpHb9P+gwjVexhFQHNLp6Z KISIAo6BMnxFiAP+ulHd1vCHBXCEq3hKGrDtwJH/j4ibacsz8B6yOJxs2bqalc11 EWCWC06s0QJKY2cUdbeZ+X1wBjJ3dOThVOEYJJNTPWYKmw5TcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC22aA3UUj+EcconL3cwaMDpVfB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjI1OTIyNDQtMzk3Mi0z NTFkLWE5YjItYmNhZTVmZjY3NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhtfAnUnvFu4vkmDE2+FGmj3Gk6MPQfXSHktXGhyoryC3O+wpNRBg/i Qpaz/RtY03Q7eLwipOrge+gaG/WzKOvGAXKfGkARXRwOfIKaiRSaJn9Xs4IH0TuK qoCFzt+qB7GNG6oDAWgj1a7JdH9sq2jnr9Z5TaNb9kwKFfBYbm6Nx70vPoSXePM+ QIQBw6z7+FjBqbe4x2r0vl+/R5wrFD61hC2na19DApmvxrlcSduTM+VczcldU1WX W/Uz//vGcrgCvsUSw5LqTbwsg1W7TizgIHXYnvD1eJkRoVImgxe8ruokcgF+WUV5 jZunR034H1N/3eahIqoVRI/cOyfI8XI= -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:54 2025 by rpki-client