$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa File: 2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa (raw, json) Hash identifier: Lm9x1uKAQJTaZRY2NcLEJaSPaqAPmMx8HYeVcIwKZwQ= Subject key identifier: F2:5C:47:8B:C6:A6:65:97:5A:2A:FC:98:C1:DB:F0:03:C6:E6:DA:12 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C260A2060640A4E4F6744C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa Signing time: Mon 03 Feb 2025 11:08:25 +0000 ROA not before: Mon 03 Feb 2025 11:08:25 +0000 ROA not after: Sun 04 May 2025 10:08:25 +0000 asID: 30036 IP address blocks: 173.21.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:60:a2:06:06:40:a4:e4:f6:74:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:08:25 2025 GMT Not After : May 4 10:08:25 2025 GMT Subject: CN=965053ce-a6e5-486d-b229-0088d44ec89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d6:89:14:f9:d6:25:7e:7a:6c:2c:f9:ee:bf: cb:eb:4d:66:8b:55:4f:3a:b4:13:d8:42:ed:27:c6: 62:38:54:0f:a5:16:7b:1c:e9:3d:5d:da:57:d7:1c: 26:1a:60:be:99:29:5c:b4:d0:3b:78:e6:93:06:c9: d7:1b:8c:aa:5e:02:d2:2c:9a:e1:2d:e2:b4:53:f6: ca:d7:fc:92:4d:59:b9:e4:e9:7f:87:30:b1:f7:56: 42:10:d8:68:b5:2c:f2:f6:e5:d4:97:e5:23:7c:e3: 75:2e:8d:b7:9d:8c:28:75:48:17:73:3d:64:ef:58: 6a:5c:dd:c7:84:88:88:6a:74:46:f6:b5:0a:79:28: 6e:1e:28:45:4e:41:c7:44:57:c4:7b:14:d2:be:9d: dc:75:c5:fc:73:b7:5c:52:cd:1e:50:dd:39:1f:0e: 21:e7:ea:e2:61:26:04:7a:35:de:e8:30:7c:06:ed: 62:8e:6c:67:91:49:91:07:56:25:61:8a:1a:73:a8: 90:90:3c:6a:2f:f3:a9:d0:96:f1:d5:90:05:b0:e2: 5d:41:fa:70:8e:08:c5:99:6a:0c:3b:56:02:f0:b9: 9d:95:a5:2e:9b:f9:e4:36:8f:bc:8d:0c:d1:cf:ec: 5c:0d:3e:1e:c4:09:69:5f:92:10:9c:19:af:20:0a: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5C:47:8B:C6:A6:65:97:5A:2A:FC:98:C1:DB:F0:03:C6:E6:DA:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:92:99:6d:90:df:bd:5c:e5:e9:fd:e2:8a:b8:3c:47:cd:37: 22:69:b5:5e:79:df:07:bd:58:2e:18:fe:dc:18:af:3c:e3:b8: e8:c5:eb:6e:0c:d2:03:f8:ad:8b:90:04:2c:dc:d8:17:43:40: fd:29:e2:9a:72:bb:19:b1:d8:ae:c5:69:02:4c:6c:28:72:cc: 57:6e:48:27:30:8d:62:01:20:65:8b:66:80:bc:ca:7b:69:35: 7a:31:09:58:24:b1:a8:cc:03:05:93:f0:a9:0d:af:9d:2f:a2: 24:6d:8f:41:63:00:bf:d4:65:0d:9b:e4:3e:e1:5b:bb:b4:bb: 61:ce:bc:6e:63:68:dc:d7:6c:45:e1:2c:12:a8:98:50:47:dc: cf:aa:68:a8:7f:f6:e6:5f:ab:08:19:58:f9:7d:11:be:40:96: f3:cc:ab:50:58:77:98:30:83:33:fb:51:f9:ad:fd:da:d5:a6: 9f:81:f4:36:d3:d2:6e:b1:66:de:bc:56:7d:74:ae:19:19:e2: 2a:c9:1b:0e:4b:99:4b:98:ba:a5:e3:f4:70:1a:2a:e7:64:88: 5b:0d:fe:79:8d:3f:a8:f5:83:a2:de:cb:63:86:d8:c6:d6:99: c2:a7:cc:95:8d:f5:df:80:3c:84:a3:df:50:67:b1:2a:8d:f7: d6:ba:42:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYKIGBkCk5PZ0TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDgyNVoXDTI1MDUwNDEwMDgyNVowLzEtMCsGA1UEAxMk OTY1MDUzY2UtYTZlNS00ODZkLWIyMjktMDA4OGQ0NGVjODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdaJFPnWJX56bCz57r/L601mi1VPOrQT2ELt J8ZiOFQPpRZ7HOk9XdpX1xwmGmC+mSlctNA7eOaTBsnXG4yqXgLSLJrhLeK0U/bK 1/ySTVm55Ol/hzCx91ZCENhotSzy9uXUl+UjfON1Lo23nYwodUgXcz1k71hqXN3H hIiIanRG9rUKeShuHihFTkHHRFfEexTSvp3cdcX8c7dcUs0eUN05Hw4h5+riYSYE ejXe6DB8Bu1ijmxnkUmRB1YlYYoac6iQkDxqL/Op0Jbx1ZAFsOJdQfpwjgjFmWoM O1YC8LmdlaUum/nkNo+8jQzRz+xcDT4exAlpX5IQnBmvIArU2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJcR4vGpmWXWir8mMHb8APG5toSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZlNDg4Y2ItNjM4Ni0z Y2VhLWJhNGYtZmUxYzRhYzY2MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2SmW2Q371c5en94oq4PEfNNyJptV553we9WC4Y/twYrzzjuOjF624M 0gP4rYuQBCzc2BdDQP0p4ppyuxmx2K7FaQJMbChyzFduSCcwjWIBIGWLZoC8yntp NXoxCVgksajMAwWT8KkNr50voiRtj0FjAL/UZQ2b5D7hW7u0u2HOvG5jaNzXbEXh LBKomFBH3M+qaKh/9uZfqwgZWPl9Eb5AlvPMq1BYd5gwgzP7Ufmt/drVpp+B9DbT 0m6xZt68Vn10rhkZ4irJGw5LmUuYuqXj9HAaKudkiFsN/nmNP6j1g6Ley2OG2MbW mcKnzJWN9d+APISj31BnsSqN99a6Qg8= -----END CERTIFICATE-----Generated at Sun Apr 6 08:28:06 2025 by rpki-client