$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa File: 4390aa88-8392-3e92-b96a-694f6067d383.roa (raw, json) Hash identifier: bW0Uc5mPJ9LR3oqgDw+KiLOV3COMG+/qSygUk9t5G7k= Subject key identifier: C3:F6:C4:F6:18:5F:94:16:6F:1D:1F:CC:61:61:30:5C:B5:40:8B:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F74A4237EC83B7A1F8EF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa Signing time: Wed 05 Feb 2025 11:11:00 +0000 ROA not before: Wed 05 Feb 2025 11:11:00 +0000 ROA not after: Tue 06 May 2025 10:11:00 +0000 asID: 30036 IP address blocks: 173.21.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f7:4a:42:37:ec:83:b7:a1:f8:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:11:00 2025 GMT Not After : May 6 10:11:00 2025 GMT Subject: CN=c5756212-621a-4a24-8990-9ce30eb7b54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:78:00:6e:cf:e9:4c:99:8d:24:be:3a:68: 0d:b9:bc:a8:8a:b8:80:72:ae:66:19:64:aa:d2:f0: e8:4c:19:ab:99:e2:b2:54:76:50:08:3f:55:a8:a8: 7b:ca:e9:ad:d0:a1:13:7f:ef:9d:e4:28:4d:b1:df: 52:60:ea:cf:f8:f0:a5:d3:e5:f4:10:b3:26:f4:d0: d0:fa:94:aa:7a:ef:47:33:90:7c:16:a3:22:f1:0f: cf:c6:7c:cd:2e:ed:78:2f:28:53:37:e3:ce:81:c4: c4:76:88:31:59:0c:80:8a:bf:a9:08:22:05:db:6f: da:aa:00:b7:7d:36:7b:c7:95:70:bf:8d:0b:5f:80: d4:22:26:d2:a8:b1:3d:55:c2:a3:6a:5e:e6:56:ed: 75:9c:69:f1:22:7d:b7:7b:95:2e:fb:00:39:c0:d5: 4b:c6:9f:e3:b3:00:e3:3c:76:60:17:8b:bd:52:3c: 18:52:a3:5a:ae:75:39:43:ae:c3:a4:79:f0:03:1f: 28:f1:2f:77:c8:3e:83:27:a4:3a:9f:2c:66:75:9b: c1:d2:64:49:3e:fe:e4:05:a4:ec:a1:9e:d0:97:e0: 4f:79:2d:71:17:d0:d9:75:13:87:7d:b9:c6:63:d6: f9:5a:80:f0:58:a4:cc:77:dc:15:60:9f:26:c5:3c: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F6:C4:F6:18:5F:94:16:6F:1D:1F:CC:61:61:30:5C:B5:40:8B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:da:9a:fb:9e:a8:80:13:1d:1e:d3:b7:4e:ae:85:dc:d9:69: 42:d4:7e:1f:81:01:9b:13:af:55:fa:fa:5d:ed:56:73:13:d9: 2a:44:27:c2:69:2f:70:1b:16:00:ce:49:ae:cd:30:25:ae:f1: 30:08:ad:a3:93:85:d7:c7:30:a0:0d:d5:59:db:38:e6:82:7b: 44:b2:4a:af:67:41:d2:db:14:7e:07:ab:a6:74:86:ae:15:53: b0:2f:fe:67:02:b8:ec:b8:98:da:e2:38:bb:4c:77:ef:1b:55: 27:3d:ad:c9:73:55:42:d8:72:db:ed:0b:85:12:05:29:8c:75: a2:e6:e9:bd:85:2f:60:16:11:db:d2:92:6c:58:8e:bf:cb:e5: 16:5b:54:90:38:73:16:a7:ec:0c:2d:d0:97:5d:f1:c6:0a:2c: 58:b1:d3:c7:24:c9:1e:13:fd:50:d1:3b:52:b5:6c:d4:c1:04: 19:98:ae:d9:be:b9:1c:39:bf:a8:cf:eb:11:27:51:e0:47:18: 55:d1:1b:ce:71:7f:36:e7:fb:b0:57:dd:6b:b4:ef:9c:72:9f: fe:53:b1:0f:55:34:d4:47:1a:3a:35:8a:be:8d:6b:7e:c3:e9: f1:42:59:96:25:87:58:da:b5:4a:c5:1d:e1:8a:b5:4d:8a:5b: 96:4d:2e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH90pCN+yDt6H474AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTEwMFoXDTI1MDUwNjEwMTEwMFowLzEtMCsGA1UEAxMk YzU3NTYyMTItNjIxYS00YTI0LTg5OTAtOWNlMzBlYjdiNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBd4AG7P6UyZjSS+OmgNubyoiriAcq5mGWSq 0vDoTBmrmeKyVHZQCD9VqKh7yumt0KETf++d5ChNsd9SYOrP+PCl0+X0ELMm9NDQ +pSqeu9HM5B8FqMi8Q/PxnzNLu14LyhTN+POgcTEdogxWQyAir+pCCIF22/aqgC3 fTZ7x5Vwv40LX4DUIibSqLE9VcKjal7mVu11nGnxIn23e5Uu+wA5wNVLxp/jswDj PHZgF4u9UjwYUqNarnU5Q67DpHnwAx8o8S93yD6DJ6Q6nyxmdZvB0mRJPv7kBaTs oZ7Ql+BPeS1xF9DZdROHfbnGY9b5WoDwWKTMd9wVYJ8mxTzLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP2xPYYX5QWbx0fzGFhMFy1QIv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDM5MGFhODgtODM5Mi0z ZTkyLWI5NmEtNjk0ZjYwNjdkMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfamvueqIATHR7Tt06uhdzZaULUfh+BAZsTr1X6+l3tVnMT2SpEJ8Jp L3AbFgDOSa7NMCWu8TAIraOThdfHMKAN1VnbOOaCe0SySq9nQdLbFH4Hq6Z0hq4V U7Av/mcCuOy4mNriOLtMd+8bVSc9rclzVULYctvtC4USBSmMdaLm6b2FL2AWEdvS kmxYjr/L5RZbVJA4cxan7Awt0Jdd8cYKLFix08ckyR4T/VDRO1K1bNTBBBmYrtm+ uRw5v6jP6xEnUeBHGFXRG85xfzbn+7BX3Wu075xyn/5TsQ9VNNRHGjo1ir6Na37D 6fFCWZYlh1jatUrFHeGKtU2KW5ZNLoc= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:19 2025 by rpki-client