$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa File: 3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa (raw, json) Hash identifier: S42jfNF5LSN5qobeO0LzdW70c6XsyHN6F5wLSUlqkBs= Subject key identifier: 76:A5:00:7B:32:D5:75:3D:CA:8D:E0:EC:FC:91:51:D5:77:52:E3:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B736E7BB075737FF8A7B1700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa Signing time: Thu 30 Jan 2025 11:10:27 +0000 ROA not before: Thu 30 Jan 2025 11:10:27 +0000 ROA not after: Wed 30 Apr 2025 10:10:27 +0000 asID: 30036 IP address blocks: 173.21.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:e7:bb:07:57:37:ff:8a:7b:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:10:27 2025 GMT Not After : Apr 30 10:10:27 2025 GMT Subject: CN=76f46dfd-ea90-4581-8276-aa60274b939b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4f:9e:ee:a5:54:ee:6f:7f:8d:03:78:70:6b: 6d:b7:0b:3d:23:52:f5:65:c6:3e:5d:44:34:3d:b0: 50:33:b5:7c:91:b9:e6:d0:70:6e:e4:19:15:6f:29: 02:10:b7:ae:31:c7:b0:ed:50:7b:5d:02:20:f1:57: 86:36:17:13:06:99:d2:b1:73:20:21:cc:aa:21:a8: d7:a6:cc:19:19:d5:c3:cc:a3:c2:6b:48:26:60:70: c4:02:2d:bb:61:c7:38:84:29:3d:d5:78:08:bf:e6: 52:79:8d:a4:3d:9b:14:8e:bb:0a:68:be:a3:98:f6: cd:2d:fa:72:58:6d:d7:f9:fe:a5:9a:5b:52:d4:ff: 92:73:97:3b:67:1d:73:d7:26:5e:83:ad:5d:a4:b6: 93:68:70:bf:9d:61:0a:f6:ec:d9:c0:2b:d7:d0:e3: ea:c2:af:70:08:71:e5:32:7e:ac:4a:71:c4:6d:15: 44:37:93:7d:33:a7:a9:36:2e:cf:c6:2e:bc:de:29: b0:63:9d:b2:f1:c4:09:af:b7:d1:ce:93:4f:01:dc: 7c:d4:9c:62:93:d2:b0:95:25:e8:81:2e:42:ad:bd: e1:75:c0:37:40:af:fa:35:e6:b5:f0:3d:56:29:99: be:1c:b4:f0:d7:7d:da:2b:af:a1:3a:a6:a6:45:a3: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A5:00:7B:32:D5:75:3D:CA:8D:E0:EC:FC:91:51:D5:77:52:E3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5f:36:16:01:35:41:8c:9a:92:0e:db:69:a5:76:0c:55:18: 71:98:6b:bc:c5:1e:a7:30:4c:b4:1e:80:eb:d5:51:6e:f6:60: 7f:de:e0:d9:b5:ba:aa:03:4e:c5:5f:51:0e:5c:ce:7f:4d:24: fe:c9:10:5b:05:a6:ad:e0:d7:9a:f7:fa:43:ee:a4:60:11:39: ed:54:35:d1:9a:51:ec:37:61:16:72:c1:14:84:b9:91:02:85: 5b:42:fe:1d:60:df:b7:b3:03:06:44:a8:87:cb:d6:87:b9:5d: 4f:13:e7:41:27:26:80:50:90:53:09:07:3a:8c:a2:d0:25:bc: 7d:58:c5:94:3a:7a:11:53:dc:a4:2b:4d:dd:6e:3c:19:d0:2e: a7:f0:f0:d5:57:7b:7a:d4:d7:4b:ab:f7:8a:ba:16:c2:b6:36: 69:74:92:16:09:c2:0b:21:1c:7d:2a:78:d3:32:2b:35:6b:99: c1:42:ae:d3:ea:a5:eb:78:cf:56:1f:1e:d2:37:5e:8e:96:25: d5:79:2b:96:dd:dc:71:66:a7:08:70:18:31:5f:27:1d:f8:6c: 7c:38:ba:a2:39:9b:cf:f9:a2:bd:da:e7:6e:36:c0:67:77:cb: 88:56:c7:74:ef:b0:bc:d4:d5:a0:08:a5:fc:77:04:7b:32:8f: 57:19:6d:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nue7B1c3/4p7FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTAyN1oXDTI1MDQzMDEwMTAyN1owLzEtMCsGA1UEAxMk NzZmNDZkZmQtZWE5MC00NTgxLTgyNzYtYWE2MDI3NGI5MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0+e7qVU7m9/jQN4cGtttws9I1L1ZcY+XUQ0 PbBQM7V8kbnm0HBu5BkVbykCELeuMcew7VB7XQIg8VeGNhcTBpnSsXMgIcyqIajX pswZGdXDzKPCa0gmYHDEAi27Ycc4hCk91XgIv+ZSeY2kPZsUjrsKaL6jmPbNLfpy WG3X+f6lmltS1P+Sc5c7Zx1z1yZeg61dpLaTaHC/nWEK9uzZwCvX0OPqwq9wCHHl Mn6sSnHEbRVEN5N9M6epNi7Pxi683imwY52y8cQJr7fRzpNPAdx81Jxik9KwlSXo gS5Crb3hdcA3QK/6Nea18D1WKZm+HLTw133aK6+hOqamRaPXKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHalAHsy1XU9yo3g7PyRUdV3UuO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RjMWY2NzEtMjg4My0z Y2E3LTgzNGQtY2E0YWQ2YThjMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlfNhYBNUGMmpIO22mldgxVGHGYa7zFHqcwTLQegOvVUW72YH/e4Nm1 uqoDTsVfUQ5czn9NJP7JEFsFpq3g15r3+kPupGAROe1UNdGaUew3YRZywRSEuZEC hVtC/h1g37ezAwZEqIfL1oe5XU8T50EnJoBQkFMJBzqMotAlvH1YxZQ6ehFT3KQr Td1uPBnQLqfw8NVXe3rU10ur94q6FsK2Nml0khYJwgshHH0qeNMyKzVrmcFCrtPq pet4z1YfHtI3Xo6WJdV5K5bd3HFmpwhwGDFfJx34bHw4uqI5m8/5or3a5242wGd3 y4hWx3TvsLzU1aAIpfx3BHsyj1cZbRI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:31 2025 by rpki-client