$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa File: f886a291-9a36-3e88-9206-9d8eda09913b.roa (raw, json) Hash identifier: +VyDXXd00DMiCb65D3dUKum5TvXzYCwyzdwfv87IcNQ= Subject key identifier: 79:12:CE:2A:5B:07:35:2D:ED:09:76:54:5C:84:3B:CD:CF:62:6B:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA33A3326B13DD89EACA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.21.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:33:a3:32:6b:13:dd:89:ea:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aa4b6f04-2b08-4dab-8cca-d05619ae6199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:a2:98:80:fb:fb:54:14:aa:de:49:ea:18: b6:83:0d:6c:12:14:34:3e:27:1d:da:97:3e:b4:f2: cc:a1:67:b1:38:26:e7:74:34:fc:49:38:1b:13:ee: 59:c0:93:28:e1:10:52:38:8f:62:50:73:25:b0:cd: 88:0e:04:6e:f4:25:38:41:66:06:77:36:e6:d3:4d: e0:0d:b7:7e:ae:4a:be:93:05:20:c4:87:20:7f:f6: 8b:48:1f:86:33:99:fc:a0:8d:64:02:4a:66:74:7d: 01:34:74:28:68:69:8e:bb:a2:6f:85:2b:c8:a9:60: d5:b0:02:1b:69:d3:2b:1c:33:05:24:5f:5c:d1:f8: f0:82:ea:50:cf:f7:b3:0f:8f:4c:dd:14:de:33:60: ae:2a:2c:d6:3c:7d:ee:49:7a:0f:8e:e8:f7:9a:b2: 69:a4:1e:95:4c:24:01:4b:21:61:3f:52:cd:3e:ba: 49:3f:ef:cf:78:18:89:3e:dd:ce:b2:d9:4f:e9:5d: 99:9b:00:ee:cd:9f:60:a0:46:96:bd:f3:ac:15:b0: 8a:67:00:11:55:ba:f0:ed:9e:91:47:07:db:ba:2f: 74:8a:01:6a:77:fc:07:49:e2:d2:a4:97:3f:b5:26: 3e:e3:d6:5a:33:23:a4:25:5b:4b:b3:9b:08:4e:66: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:12:CE:2A:5B:07:35:2D:ED:09:76:54:5C:84:3B:CD:CF:62:6B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:80:82:7f:00:8b:06:f5:9b:75:48:02:09:7c:5c:df:e7:d3: bb:fc:1c:94:92:5b:0a:16:14:c5:41:c9:84:68:42:6f:50:04: cf:68:1c:fe:7e:f9:78:7d:45:fd:3b:89:6d:02:59:aa:a2:71: da:fc:23:91:99:fc:aa:70:4f:eb:86:cb:2b:06:9e:8b:ac:29: 63:1d:7b:21:7f:82:e4:5d:f9:c0:26:b3:43:b7:56:52:e6:16: ba:79:20:c9:f0:ba:03:88:7d:b4:2b:2f:03:2b:78:de:66:d1: 37:57:0e:d1:08:80:03:86:85:ac:d2:4a:74:c7:b9:a8:f5:dc: 7b:cc:2c:79:23:c7:0a:c8:c4:ac:24:27:d2:e9:e5:47:6c:eb: 44:f6:58:51:53:7b:41:6a:f5:ef:e1:bf:f7:a1:d9:5f:4a:45: b3:d6:95:d6:e5:47:20:d2:bd:06:d9:65:70:b2:92:1d:f6:83: 73:a6:b6:9f:33:42:40:81:52:0d:40:69:3a:b3:14:7b:2d:a7: 49:2f:1c:ab:e5:b9:98:cf:f8:c2:06:5a:5c:5a:7c:55:b9:cd: 0c:18:c8:b1:7e:de:bb:5c:e4:7b:4d:08:db:66:c3:f0:a4:18: 73:e8:91:f7:0a:f0:46:c0:b0:78:2a:c1:23:4a:b2:e5:26:3e: 4b:12:0d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujOjMmsT3YnqygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWE0YjZmMDQtMmIwOC00ZGFiLThjY2EtZDA1NjE5YWU2MTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue+imID7+1QUqt5J6hi2gw1sEhQ0Picd2pc+ tPLMoWexOCbndDT8STgbE+5ZwJMo4RBSOI9iUHMlsM2IDgRu9CU4QWYGdzbm003g Dbd+rkq+kwUgxIcgf/aLSB+GM5n8oI1kAkpmdH0BNHQoaGmOu6JvhSvIqWDVsAIb adMrHDMFJF9c0fjwgupQz/ezD49M3RTeM2CuKizWPH3uSXoPjuj3mrJppB6VTCQB SyFhP1LNPrpJP+/PeBiJPt3OstlP6V2ZmwDuzZ9goEaWvfOsFbCKZwARVbrw7Z6R Rwfbui90igFqd/wHSeLSpJc/tSY+49ZaMyOkJVtLs5sITmZUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkSzipbBzUt7Ql2VFyEO83PYmsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjg4NmEyOTEtOWEzNi0z ZTg4LTkyMDYtOWQ4ZWRhMDk5MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeAgn8Aiwb1m3VIAgl8XN/n07v8HJSSWwoWFMVByYRoQm9QBM9oHP5+ +Xh9Rf07iW0CWaqicdr8I5GZ/KpwT+uGyysGnousKWMdeyF/guRd+cAms0O3VlLm Frp5IMnwugOIfbQrLwMreN5m0TdXDtEIgAOGhazSSnTHuaj13HvMLHkjxwrIxKwk J9Lp5Uds60T2WFFTe0Fq9e/hv/eh2V9KRbPWldblRyDSvQbZZXCykh32g3Omtp8z QkCBUg1AaTqzFHstp0kvHKvluZjP+MIGWlxafFW5zQwYyLF+3rtc5HtNCNtmw/Ck GHPokfcK8EbAsHgqwSNKsuUmPksSDQE= -----END CERTIFICATE-----Generated at Sun Apr 27 17:04:08 2025 by rpki-client