$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa File: 84b5df57-c963-3224-b71c-932349312f1b.roa (raw, json) Hash identifier: qOHlk6ZBfwNqkAAsvfNH1PQadmTRVx0XthifpsAEifY= Subject key identifier: B8:38:F4:E8:F6:E8:0B:10:48:9F:0F:D8:6D:7B:A3:FD:76:B7:F9:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C576E16B00AC9E0069098F20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa Signing time: Tue 04 Feb 2025 13:40:40 +0000 ROA not before: Tue 04 Feb 2025 13:40:40 +0000 ROA not after: Mon 05 May 2025 12:40:40 +0000 asID: 30036 IP address blocks: 173.21.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:76:e1:6b:00:ac:9e:00:69:09:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:40:40 2025 GMT Not After : May 5 12:40:40 2025 GMT Subject: CN=bdef24c8-6f1d-4b3c-8cea-1647f2520ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:fa:d1:c9:c1:86:55:5f:d2:39:a3:8e:37: 8e:64:57:4d:0e:31:5b:f9:e0:76:89:c0:a4:e2:48: 25:64:13:9d:7c:a6:2d:de:dd:be:10:2d:f3:a9:05: c3:c2:a5:5b:69:f8:75:49:a2:27:6c:1f:a4:76:ce: 4d:3f:5b:08:04:21:e1:8f:1f:bb:ab:54:e4:9e:c2: 2b:b5:a0:b2:3e:f5:c0:c5:47:df:11:a4:25:d0:4e: 2e:aa:b3:72:ae:af:4c:d2:14:95:55:f9:99:1d:1b: d2:5d:cf:37:22:d1:a4:f9:0a:82:f6:aa:cb:42:e2: f4:c6:a1:2e:c4:d5:cc:df:d4:fb:73:9d:58:62:e3: 67:96:9c:8f:76:a2:6b:f9:4e:70:79:df:ad:4a:a2: 62:9f:eb:c7:b8:5b:ab:e2:b2:87:e5:ed:c6:18:51: ea:c6:23:e7:90:aa:d9:4e:08:36:65:d2:f2:10:c7: cb:e9:36:ac:68:65:5f:0e:fc:87:8f:bf:0a:a1:3f: 57:aa:fe:a6:d3:2f:9a:9e:b2:aa:75:f4:ea:99:f7: c1:dc:4b:bf:3b:78:3a:05:a7:63:e6:e7:a7:92:42: 0c:f1:f4:6c:44:f0:9f:bc:18:4d:ff:d5:47:e2:08: 45:47:e9:fc:ff:84:0e:fe:0a:ce:eb:c7:cf:74:92: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:F4:E8:F6:E8:0B:10:48:9F:0F:D8:6D:7B:A3:FD:76:B7:F9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:15:78:2f:82:d2:63:39:3d:4a:d7:89:b5:45:18:59:ad:5e: 61:47:c8:13:46:6d:91:f6:4d:91:4a:10:24:f3:3e:1f:c9:cb: 7a:60:d0:17:a6:f6:ca:dd:0e:bd:28:37:60:97:d9:31:40:10: 5a:8d:84:97:a8:6a:4e:08:2a:d2:9a:74:81:87:9f:ce:c3:d7: 88:bd:dd:10:4c:ad:0f:7e:ba:4a:df:91:c2:8b:6d:0f:77:00: 89:d9:c4:c8:ea:96:4d:97:cf:d7:64:f1:85:71:e7:7e:d7:52: c8:52:72:c4:d9:fb:99:08:8c:7c:57:e5:87:6c:36:98:b3:f3: cd:1f:d2:42:42:6e:de:54:30:12:f4:dc:c4:60:43:ba:70:de: e6:49:bf:58:f5:6b:05:cd:50:56:2d:f2:95:1e:e4:46:ec:c1: 3b:47:a5:de:ff:ff:4b:f3:d4:0c:4a:cd:50:60:4c:20:5a:0c: 82:b7:30:84:4c:96:2d:93:6e:89:d4:15:f8:ff:c8:b2:84:fe: 96:b1:dc:2f:9b:ff:93:d7:69:3d:33:b6:ff:12:f3:e4:9d:b1: 68:78:f7:d9:22:82:bb:ff:61:f4:d0:03:b7:41:e4:38:1c:18: 29:5b:d2:9a:86:6b:98:6d:a8:d0:76:30:9d:5a:ca:8a:5b:02: b7:6f:fc:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFduFrAKyeAGkJjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDA0MFoXDTI1MDUwNTEyNDA0MFowLzEtMCsGA1UEAxMk YmRlZjI0YzgtNmYxZC00YjNjLThjZWEtMTY0N2YyNTIwZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYb60cnBhlVf0jmjjjeOZFdNDjFb+eB2icCk 4kglZBOdfKYt3t2+EC3zqQXDwqVbafh1SaInbB+kds5NP1sIBCHhjx+7q1TknsIr taCyPvXAxUffEaQl0E4uqrNyrq9M0hSVVfmZHRvSXc83ItGk+QqC9qrLQuL0xqEu xNXM39T7c51YYuNnlpyPdqJr+U5wed+tSqJin+vHuFur4rKH5e3GGFHqxiPnkKrZ Tgg2ZdLyEMfL6TasaGVfDvyHj78KoT9Xqv6m0y+anrKqdfTqmffB3Eu/O3g6Badj 5uenkkIM8fRsRPCfvBhN/9VH4ghFR+n8/4QO/grO68fPdJKBpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg49Oj26AsQSJ8P2G17o/12t/kRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRiNWRmNTctYzk2My0z MjI0LWI3MWMtOTMyMzQ5MzEyZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEVeC+C0mM5PUrXibVFGFmtXmFHyBNGbZH2TZFKECTzPh/Jy3pg0Bem 9srdDr0oN2CX2TFAEFqNhJeoak4IKtKadIGHn87D14i93RBMrQ9+ukrfkcKLbQ93 AInZxMjqlk2Xz9dk8YVx537XUshScsTZ+5kIjHxX5YdsNpiz880f0kJCbt5UMBL0 3MRgQ7pw3uZJv1j1awXNUFYt8pUe5EbswTtHpd7//0vz1AxKzVBgTCBaDIK3MIRM li2TbonUFfj/yLKE/pax3C+b/5PXaT0ztv8S8+SdsWh499kigrv/YfTQA7dB5Dgc GClb0pqGa5htqNB2MJ1ayopbArdv/Iw= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:26 2025 by rpki-client