$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c79aa48-e205-37bd-a159-cc9c8bc06ff0.roa File: 8c79aa48-e205-37bd-a159-cc9c8bc06ff0.roa (raw, json) Hash identifier: daxSOG+ugYe6y7czUI3c79xnCrWCxYDNqKIWCnAj4fQ= Subject key identifier: 58:CC:F5:F3:68:93:9C:54:4A:6E:72:79:63:C9:73:4D:39:7B:B2:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2609AABD8D28E37E8F19F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c79aa48-e205-37bd-a159-cc9c8bc06ff0.roa Signing time: Mon 03 Feb 2025 11:08:21 +0000 ROA not before: Mon 03 Feb 2025 11:08:21 +0000 ROA not after: Sun 04 May 2025 10:08:21 +0000 asID: 30036 IP address blocks: 173.21.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:60:9a:ab:d8:d2:8e:37:e8:f1:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:08:21 2025 GMT Not After : May 4 10:08:21 2025 GMT Subject: CN=abaf0643-c6bb-4329-af65-9db64f56de1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:01:1e:b8:83:b6:5d:a2:81:05:b8:72:d7:5d: 62:15:11:8d:91:b4:c4:10:86:37:1b:d9:b3:fc:28: cf:08:45:59:98:1b:e6:16:f3:07:44:bf:a1:b5:1d: 5a:2b:8a:80:0f:c3:eb:7f:93:4b:35:25:b2:1c:7a: ef:6b:74:3a:67:91:5c:be:67:77:7f:fd:84:08:22: e4:d1:70:85:f8:6e:3b:0f:59:f5:55:00:3f:24:bd: 2d:e8:5b:53:89:a2:b4:5a:d0:bd:4d:6f:c6:2a:06: ab:de:52:b7:87:b8:1d:6d:69:83:21:c4:be:a7:7b: d6:0e:0d:eb:01:7d:56:8a:03:da:21:f1:8a:0b:7e: a0:45:2e:e4:9b:03:4e:af:96:e7:8d:70:a7:d3:ac: 21:ae:64:3c:08:30:8a:e9:1d:c7:3c:68:ab:48:13: 75:f9:b6:7e:42:4f:5d:d5:a9:6e:e4:7e:94:7c:86: be:23:86:6f:8e:34:e9:46:69:83:b8:ef:63:1d:8c: 5a:51:ec:05:29:86:34:2b:9e:15:70:2a:83:cc:d8: a1:a7:af:14:7f:b3:79:90:aa:2f:08:b0:04:2f:82: 69:9c:d8:ee:d4:15:03:55:2a:a5:78:f8:48:89:75: 4c:1a:02:bb:ab:42:85:31:80:67:0d:72:2f:df:52: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CC:F5:F3:68:93:9C:54:4A:6E:72:79:63:C9:73:4D:39:7B:B2:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c79aa48-e205-37bd-a159-cc9c8bc06ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7a:0b:8a:ca:ea:15:ad:2c:0c:fd:16:50:20:aa:41:e9:e3: e0:1d:db:69:17:7c:62:28:83:93:23:ee:3a:70:b5:63:a9:e0: 9b:4a:2a:8e:0a:78:7f:89:df:d8:59:fe:f6:10:23:b0:5c:47: 24:98:40:31:01:98:76:b8:f4:8e:34:ee:47:8e:f7:81:5b:7a: d9:f5:de:21:dd:4a:b6:ec:be:79:eb:df:e6:4b:11:85:fe:50: 6a:0e:03:93:65:a0:f9:4a:7c:0c:64:10:2d:0f:2b:9c:f8:19: d4:f7:ad:44:fb:94:1d:63:60:35:f7:eb:55:e8:44:2c:05:9b: 43:22:f8:f7:40:6b:3d:35:55:99:62:36:ae:56:95:39:96:cc: 2d:6b:b5:7e:da:14:3e:49:ea:84:be:33:d2:30:22:a7:87:16: 58:3e:e3:2a:dc:b6:4c:ad:23:d1:55:b8:51:9b:be:33:43:a0: 19:01:e4:57:33:ea:2c:6b:aa:6d:3b:44:9d:f2:15:f6:bd:f2: c6:0b:2b:3d:0d:ff:37:c1:30:ca:bc:4e:10:8f:c8:5d:ea:52: 24:f6:47:70:8b:d5:5c:ee:c3:45:88:87:38:77:fd:69:85:88: d6:8b:cd:d1:49:c5:6a:c1:de:3a:8d:08:a9:61:11:4f:1d:f6: 23:04:9f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYJqr2NKON+jxnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDgyMVoXDTI1MDUwNDEwMDgyMVowLzEtMCsGA1UEAxMk YWJhZjA2NDMtYzZiYi00MzI5LWFmNjUtOWRiNjRmNTZkZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAEeuIO2XaKBBbhy111iFRGNkbTEEIY3G9mz /CjPCEVZmBvmFvMHRL+htR1aK4qAD8Prf5NLNSWyHHrva3Q6Z5Fcvmd3f/2ECCLk 0XCF+G47D1n1VQA/JL0t6FtTiaK0WtC9TW/GKgar3lK3h7gdbWmDIcS+p3vWDg3r AX1WigPaIfGKC36gRS7kmwNOr5bnjXCn06whrmQ8CDCK6R3HPGirSBN1+bZ+Qk9d 1alu5H6UfIa+I4ZvjjTpRmmDuO9jHYxaUewFKYY0K54VcCqDzNihp68Uf7N5kKov CLAEL4JpnNju1BUDVSqlePhIiXVMGgK7q0KFMYBnDXIv31KrRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjM9fNok5xUSm5yeWPJc005e7JYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGM3OWFhNDgtZTIwNS0z N2JkLWExNTktY2M5YzhiYzA2ZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx6C4rK6hWtLAz9FlAgqkHp4+Ad22kXfGIog5Mj7jpwtWOp4JtKKo4K eH+J39hZ/vYQI7BcRySYQDEBmHa49I407keO94Fbetn13iHdSrbsvnnr3+ZLEYX+ UGoOA5NloPlKfAxkEC0PK5z4GdT3rUT7lB1jYDX361XoRCwFm0Mi+PdAaz01VZli Nq5WlTmWzC1rtX7aFD5J6oS+M9IwIqeHFlg+4yrctkytI9FVuFGbvjNDoBkB5Fcz 6ixrqm07RJ3yFfa98sYLKz0N/zfBMMq8ThCPyF3qUiT2R3CL1Vzuw0WIhzh3/WmF iNaLzdFJxWrB3jqNCKlhEU8d9iMEn/Q= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:27 2025 by rpki-client