$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa File: a6229991-1291-3d4f-94d1-83e8c2cea121.roa (raw, json) Hash identifier: WuobT37xvKzDKz5nqi1XPXY4BKCqCSUGewJml6omPXM= Subject key identifier: 65:A8:8E:12:2F:DF:C4:27:01:3F:39:E5:68:14:B5:12:BE:CF:D9:8C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849514A76828DAA1BFA21E5CE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa Signing time: Wed 26 Mar 2025 15:44:20 +0000 ROA not before: Wed 26 Mar 2025 15:44:20 +0000 ROA not after: Tue 24 Jun 2025 15:44:20 +0000 asID: 30036 IP address blocks: 173.21.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:4a:76:82:8d:aa:1b:fa:21:e5:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 26 15:44:20 2025 GMT Not After : Jun 24 15:44:20 2025 GMT Subject: CN=f2dd0893-1d02-49c8-9cd8-cfabe8ba8456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:3c:3c:ec:b0:f6:9a:98:20:76:4d:8d:52: 67:76:79:30:83:21:e2:9e:bf:c3:13:32:7f:be:9f: 49:14:12:08:dc:16:97:9e:71:f4:7e:b5:48:3c:40: 8a:39:3d:d3:fa:78:5a:4c:22:14:2b:41:b2:37:07: 5f:fb:33:3b:fa:c1:6d:fb:bc:f6:2f:02:36:f8:23: 99:01:f5:52:06:c0:8a:9e:64:7b:7b:2a:4b:0c:fa: 0b:67:31:1e:8b:76:0d:66:69:32:bb:fa:e2:5f:90: da:a0:e4:d8:7d:ce:82:ed:eb:47:06:f1:36:8a:a8: 2e:29:5d:77:b1:bb:4d:12:19:8e:6d:d5:85:42:ce: e0:f5:a0:a6:b4:86:57:15:c6:4f:fa:7b:5e:62:61: 7a:a8:ca:7e:11:c6:e7:47:6e:89:d5:38:e0:65:1e: d2:9e:5e:d2:4a:ba:1f:b4:f5:70:63:1f:26:16:78: 3a:89:8f:e1:fb:5c:86:d6:59:b3:2e:61:49:a0:37: b2:c5:c6:b3:78:7d:4d:e7:e9:75:4f:3f:c9:bb:64: c2:98:26:1d:8f:87:87:fc:5d:50:fa:99:fc:43:0e: 2e:20:0d:ff:2f:08:05:4b:d6:65:73:03:50:63:1f: b8:4c:87:22:21:2c:6e:83:10:6f:de:8a:7f:7e:8a: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A8:8E:12:2F:DF:C4:27:01:3F:39:E5:68:14:B5:12:BE:CF:D9:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:37:09:df:f1:5c:e2:8f:83:3b:9a:de:45:38:c3:6c:ba:d3: 44:f8:76:47:30:2a:d3:35:3b:05:6f:76:08:79:7b:8d:29:2c: 7e:88:50:e2:16:ed:5f:22:ba:ec:43:35:4a:3d:62:06:d1:42: de:ea:3f:07:da:08:f7:8c:1a:3b:5e:1f:f3:3a:fd:36:ae:c6: f1:41:d0:87:e6:ab:8d:d3:0f:2f:39:25:fd:52:c2:af:29:bf: 15:32:7d:f3:90:2b:81:86:fd:37:82:d8:12:35:b6:fb:18:70: d6:34:07:25:7e:b6:d7:11:91:49:ba:83:42:6d:d0:b2:ac:39: bc:c7:cb:60:41:04:d8:7f:f6:fd:54:35:26:07:e9:c8:40:20: e9:06:26:fc:d1:e4:87:57:12:ed:66:e2:ef:07:07:bd:12:4a: ae:60:46:09:18:13:96:bb:3f:cc:ef:3a:3c:e9:24:29:04:f6: e4:c4:80:4f:1d:89:6f:3a:44:bb:8e:e1:d0:32:00:c3:f5:5d: 1f:a5:ba:79:2e:a6:0e:12:68:48:68:e7:b2:2f:15:dd:00:8f: 27:2e:b0:b1:5f:72:a7:0c:f2:82:89:dd:d4:9e:8e:00:33:ce: 8c:cf:f2:9d:56:91:e6:f2:b4:03:d0:ba:cd:1f:85:ba:a6:e5: 60:dd:a9:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRSnaCjaob+iHlzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMyNjE1NDQyMFoXDTI1MDYyNDE1NDQyMFowLzEtMCsGA1UEAxMk ZjJkZDA4OTMtMWQwMi00OWM4LTljZDgtY2ZhYmU4YmE4NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV48POyw9pqYIHZNjVJndnkwgyHinr/DEzJ/ vp9JFBII3BaXnnH0frVIPECKOT3T+nhaTCIUK0GyNwdf+zM7+sFt+7z2LwI2+COZ AfVSBsCKnmR7eypLDPoLZzEei3YNZmkyu/riX5DaoOTYfc6C7etHBvE2iqguKV13 sbtNEhmObdWFQs7g9aCmtIZXFcZP+nteYmF6qMp+EcbnR26J1TjgZR7Snl7SSrof tPVwYx8mFng6iY/h+1yG1lmzLmFJoDeyxcazeH1N5+l1Tz/Ju2TCmCYdj4eH/F1Q +pn8Qw4uIA3/LwgFS9ZlcwNQYx+4TIciISxugxBv3op/fopLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWojhIv38QnAT855WgUtRK+z9mMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYyMjk5OTEtMTI5MS0z ZDRmLTk0ZDEtODNlOGMyY2VhMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE3Cd/xXOKPgzua3kU4w2y600T4dkcwKtM1OwVvdgh5e40pLH6IUOIW 7V8iuuxDNUo9YgbRQt7qPwfaCPeMGjteH/M6/TauxvFB0Ifmq43TDy85Jf1Swq8p vxUyffOQK4GG/TeC2BI1tvsYcNY0ByV+ttcRkUm6g0Jt0LKsObzHy2BBBNh/9v1U NSYH6chAIOkGJvzR5IdXEu1m4u8HB70SSq5gRgkYE5a7P8zvOjzpJCkE9uTEgE8d iW86RLuO4dAyAMP1XR+lunkupg4SaEho57IvFd0AjycusLFfcqcM8oKJ3dSejgAz zozP8p1WkebytAPQus0fhbqm5WDdqWg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:22 2025 by rpki-client