$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa File: 67520c87-041c-3548-bd97-ae4c3f09e00e.roa (raw, json) Hash identifier: zwEWyXncTytFjEELRdNkfuMxFGWj2wjkz2ljYDma/FA= Subject key identifier: 1B:9A:49:8E:47:34:D5:5B:A9:2A:E1:17:E7:9D:1D:65:F2:10:53:C8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FD1D56558D9010E8336840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa Signing time: Wed 05 Feb 2025 11:22:45 +0000 ROA not before: Wed 05 Feb 2025 11:22:45 +0000 ROA not after: Tue 06 May 2025 10:22:45 +0000 asID: 30036 IP address blocks: 173.21.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:1d:56:55:8d:90:10:e8:33:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:22:45 2025 GMT Not After : May 6 10:22:45 2025 GMT Subject: CN=e8ed7aec-3c73-4b9c-8e7c-21706e89400b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:06:10:b0:89:14:0c:8d:61:2e:c9:ea:5d: 12:6d:1f:a1:cd:37:1d:df:04:9e:f3:a0:ea:9d:25: 89:3e:e0:40:93:cf:f2:ea:02:e9:79:4f:46:b3:1c: 7a:bd:04:4c:5f:bb:1c:b8:56:42:0f:54:d4:5d:85: 9f:9b:52:26:77:c1:d6:9f:01:7c:fa:03:1f:2e:cc: 02:bb:60:c7:3a:d3:63:24:08:43:69:ac:2f:e3:0e: 34:0f:c7:28:7f:f7:31:d2:36:75:21:06:4f:58:f5: b9:40:a4:2c:09:1f:b9:33:9c:45:38:c1:13:b6:1d: bd:01:5a:22:41:08:7b:3b:d9:ce:14:3e:ee:e9:b4: f0:21:96:70:53:50:c6:ef:27:c0:0d:4f:2e:8b:26: 0d:64:ee:98:81:75:47:a9:b9:52:e9:17:44:ff:d3: 0d:ad:62:b9:19:06:03:d7:92:5d:97:59:18:90:db: 07:bb:bf:09:09:60:7d:e1:8a:40:2f:bc:96:7b:ad: 92:f9:2c:ee:e6:52:47:12:4a:f0:b5:62:7c:0e:36: 0d:1b:5e:56:7a:67:bb:9d:b8:cd:03:2a:46:79:27: be:45:2f:7b:d9:5b:c9:ac:9b:38:71:59:b7:ff:95: d8:f1:e7:f0:f6:d8:c5:06:0c:3b:68:41:dc:cd:b4: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9A:49:8E:47:34:D5:5B:A9:2A:E1:17:E7:9D:1D:65:F2:10:53:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d0:88:9a:7e:d6:82:02:de:40:79:ea:40:cb:85:a0:90:fc: 29:7c:b7:88:22:f8:49:b6:46:32:5a:b9:91:bf:a8:5a:70:a2: bd:90:0c:85:94:df:79:92:73:89:6c:c0:38:2c:90:fa:16:ff: a5:7c:5f:da:47:81:a0:11:7c:e2:99:94:2c:6e:41:b1:9f:59: ed:8b:20:9f:0a:02:5f:49:63:f8:28:b0:d8:e9:64:f2:21:e1: 6f:48:c9:5b:91:4b:2a:7c:db:79:1c:b1:c3:59:9f:c3:cb:86: a7:36:81:9f:bb:16:89:fd:c9:04:f8:85:1a:ed:27:9f:70:35: 97:93:68:b9:4f:ae:60:77:bf:20:11:24:6f:13:cc:93:13:46: db:42:7a:5c:ac:5a:9e:b8:10:5e:ad:50:46:98:20:4f:26:a3: 35:69:12:0f:d6:df:41:48:c9:4e:d1:cb:7c:e2:c4:74:94:a3: 63:ed:5f:e8:01:58:14:48:a6:8c:52:03:d8:c5:f9:cf:99:ad: 00:b1:48:00:e3:83:d9:5f:90:42:5b:f7:0a:4d:66:e1:72:92: 78:eb:c0:13:53:e4:d1:32:84:45:e5:aa:f9:cb:b2:27:a0:2f: 45:76:cc:7c:67:f3:65:f2:64:96:c3:fd:fd:e3:d6:83:e2:d6: f0:fa:cf:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/R1WVY2QEOgzaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjI0NVoXDTI1MDUwNjEwMjI0NVowLzEtMCsGA1UEAxMk ZThlZDdhZWMtM2M3My00YjljLThlN2MtMjE3MDZlODk0MDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+sGELCJFAyNYS7J6l0SbR+hzTcd3wSe86Dq nSWJPuBAk8/y6gLpeU9Gsxx6vQRMX7scuFZCD1TUXYWfm1Imd8HWnwF8+gMfLswC u2DHOtNjJAhDaawv4w40D8cof/cx0jZ1IQZPWPW5QKQsCR+5M5xFOMETth29AVoi QQh7O9nOFD7u6bTwIZZwU1DG7yfADU8uiyYNZO6YgXVHqblS6RdE/9MNrWK5GQYD 15Jdl1kYkNsHu78JCWB94YpAL7yWe62S+Szu5lJHEkrwtWJ8DjYNG15Weme7nbjN AypGeSe+RS972VvJrJs4cVm3/5XY8efw9tjFBgw7aEHczbSVIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuaSY5HNNVbqSrhF+edHWXyEFPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjc1MjBjODctMDQxYy0z NTQ4LWJkOTctYWU0YzNmMDllMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3QiJp+1oIC3kB56kDLhaCQ/Cl8t4gi+Em2RjJauZG/qFpwor2QDIWU 33mSc4lswDgskPoW/6V8X9pHgaARfOKZlCxuQbGfWe2LIJ8KAl9JY/gosNjpZPIh 4W9IyVuRSyp823kcscNZn8PLhqc2gZ+7Fon9yQT4hRrtJ59wNZeTaLlPrmB3vyAR JG8TzJMTRttCelysWp64EF6tUEaYIE8mozVpEg/W30FIyU7Ry3zixHSUo2PtX+gB WBRIpoxSA9jF+c+ZrQCxSADjg9lfkEJb9wpNZuFyknjrwBNT5NEyhEXlqvnLsieg L0V2zHxn82XyZJbD/f3j1oPi1vD6zyY= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:34 2025 by rpki-client