$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47a76487-f826-3576-b4ff-25f212d7210b.roa File: 47a76487-f826-3576-b4ff-25f212d7210b.roa (raw, json) Hash identifier: KqC98FA4uBhmvneDw7lU33Vo8A0BM21HtZvvrbS0oFY= Subject key identifier: B2:A3:80:E7:8B:81:89:ED:5A:D1:DD:90:32:14:44:B5:B4:2B:F8:AE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C576E8F230F6DC7C77CAE100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47a76487-f826-3576-b4ff-25f212d7210b.roa Signing time: Tue 04 Feb 2025 13:40:43 +0000 ROA not before: Tue 04 Feb 2025 13:40:43 +0000 ROA not after: Mon 05 May 2025 12:40:43 +0000 asID: 30036 IP address blocks: 173.21.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:76:e8:f2:30:f6:dc:7c:77:ca:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:40:43 2025 GMT Not After : May 5 12:40:43 2025 GMT Subject: CN=dbfd29bd-0dd2-4228-8676-8c124c3effc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:77:65:e3:4d:69:9d:2e:b3:2d:56:7c:18:ec: fe:2f:48:45:32:a4:e0:f3:d3:a9:69:2f:d0:fa:73: 22:c6:ec:87:00:a6:7c:7d:62:90:c4:6d:6f:b5:74: 3f:e8:79:47:c3:25:0a:38:48:be:07:79:6b:fd:c0: b7:31:6b:1a:80:3c:c9:23:9f:36:9b:03:4c:85:3b: b1:56:69:2d:d7:10:52:07:19:13:88:d7:0c:06:ed: 55:0c:98:3d:04:1b:0f:48:ab:02:17:7f:d9:eb:7a: bd:96:7c:fc:cb:57:cb:f8:a5:24:80:b2:81:a6:b6: e5:8c:05:ed:a1:8b:c7:21:07:02:a5:e1:da:ef:d1: fe:25:77:ad:6a:df:fa:e1:a7:c5:ec:c8:bc:40:bc: 19:ff:45:a5:5e:76:cc:96:69:ff:35:c0:74:92:29: 9a:0a:6e:8e:2d:b3:ad:f1:3b:64:4c:44:05:d9:7b: 3b:2a:ca:33:d8:0b:bc:78:b7:9e:ab:11:7f:42:6a: 94:8e:f2:ce:7c:fd:9c:f2:cc:43:d9:e0:e8:07:3a: 0c:74:b2:d0:35:c9:91:c0:4b:56:79:45:d1:e5:ec: 08:dd:37:ae:32:b3:9d:f4:78:88:3e:dc:9c:07:e0: 4b:61:d2:b5:05:38:0b:c4:db:f3:68:b1:93:20:f9: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A3:80:E7:8B:81:89:ED:5A:D1:DD:90:32:14:44:B5:B4:2B:F8:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47a76487-f826-3576-b4ff-25f212d7210b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:bd:f2:6d:2f:78:ba:4c:a2:d8:c2:3d:47:ea:ae:ab:c7:2e: e5:d5:12:49:62:a6:5d:a7:ed:32:ba:53:3a:5d:71:a0:31:6a: 25:67:8f:b2:cb:eb:f6:cb:64:f9:43:f0:b1:86:0b:05:fe:81: ec:f7:b2:ac:c7:8e:8e:66:6e:2d:0a:5b:98:9b:7b:17:97:d0: 4f:7e:5f:8f:96:94:d1:97:ae:88:19:53:9d:ec:29:0d:f7:e6: 58:a4:d0:7a:79:38:18:68:f7:dd:a0:6b:45:2c:a3:bc:09:1d: c6:86:e1:a4:73:86:3c:12:7f:3d:b4:8e:82:3d:a9:79:c3:a9: 13:36:25:12:e5:35:04:44:55:92:eb:53:76:95:c8:dd:69:a7: b1:28:39:f1:c3:26:6d:cf:6d:ae:4f:c9:62:20:93:86:7e:4c: 30:64:57:ed:de:fa:a1:b3:f1:e5:64:e6:55:ca:44:3c:c9:81: d0:29:eb:05:4a:43:78:51:cd:40:da:63:00:fc:57:ed:2e:2a: 53:ea:1d:ee:ac:11:21:05:c6:a3:78:64:70:2e:6e:7c:f4:24: 05:4c:19:0d:4c:76:52:9a:0e:82:3a:81:8a:37:be:78:c5:f2: dc:df:1e:59:b8:aa:e5:59:42:3b:5e:59:9e:85:c0:34:37:1f: 82:d7:5b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdujyMPbcfHfK4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDA0M1oXDTI1MDUwNTEyNDA0M1owLzEtMCsGA1UEAxMk ZGJmZDI5YmQtMGRkMi00MjI4LTg2NzYtOGMxMjRjM2VmZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93dl401pnS6zLVZ8GOz+L0hFMqTg89OpaS/Q +nMixuyHAKZ8fWKQxG1vtXQ/6HlHwyUKOEi+B3lr/cC3MWsagDzJI582mwNMhTux Vmkt1xBSBxkTiNcMBu1VDJg9BBsPSKsCF3/Z63q9lnz8y1fL+KUkgLKBprbljAXt oYvHIQcCpeHa79H+JXetat/64afF7Mi8QLwZ/0WlXnbMlmn/NcB0kimaCm6OLbOt 8TtkTEQF2Xs7Ksoz2Au8eLeeqxF/QmqUjvLOfP2c8sxD2eDoBzoMdLLQNcmRwEtW eUXR5ewI3TeuMrOd9HiIPtycB+BLYdK1BTgLxNvzaLGTIPnKSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKjgOeLgYntWtHdkDIURLW0K/iuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDdhNzY0ODctZjgyNi0z NTc2LWI0ZmYtMjVmMjEyZDcyMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi98m0veLpMotjCPUfqrqvHLuXVEklipl2n7TK6UzpdcaAxaiVnj7LL 6/bLZPlD8LGGCwX+gez3sqzHjo5mbi0KW5ibexeX0E9+X4+WlNGXrogZU53sKQ33 5lik0Hp5OBho992ga0Uso7wJHcaG4aRzhjwSfz20joI9qXnDqRM2JRLlNQREVZLr U3aVyN1pp7EoOfHDJm3Pba5PyWIgk4Z+TDBkV+3e+qGz8eVk5lXKRDzJgdAp6wVK Q3hRzUDaYwD8V+0uKlPqHe6sESEFxqN4ZHAubnz0JAVMGQ1MdlKaDoI6gYo3vnjF 8tzfHlm4quVZQjteWZ6FwDQ3H4LXW0Y= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:46 2025 by rpki-client