$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa File: bb27664d-fc5f-35c9-9f09-952ca477db81.roa (raw, json) Hash identifier: qeC1BHVBwpfHbEib/wvD+JlBaTPNqDGEjRGPyD9eVOk= Subject key identifier: 36:62:27:D2:1C:36:62:35:22:85:48:FF:BE:A9:38:65:ED:8F:2F:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2609D3AAE56B592DD0456C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa Signing time: Mon 03 Feb 2025 11:08:22 +0000 ROA not before: Mon 03 Feb 2025 11:08:22 +0000 ROA not after: Sun 04 May 2025 10:08:22 +0000 asID: 30036 IP address blocks: 173.21.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:60:9d:3a:ae:56:b5:92:dd:04:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:08:22 2025 GMT Not After : May 4 10:08:22 2025 GMT Subject: CN=4944a4c8-1df8-4445-80b2-0af1a4486ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:8b:0d:6a:32:b4:a9:3e:04:cc:a7:69:b0: 70:06:25:20:26:be:5d:9e:1c:d4:14:b2:2c:00:4f: d8:ad:1e:e4:72:09:dd:1d:be:f0:65:28:8f:06:e4: 0c:bb:0b:dd:8a:23:f8:56:2d:77:80:55:7e:50:43: 82:a9:f7:40:e7:e5:09:b2:ee:34:11:89:a4:09:9d: e0:0b:9c:60:99:de:ed:62:53:59:be:fe:46:f4:17: 53:8e:ba:c3:bd:74:9b:16:51:ba:4c:1a:61:65:69: 6f:fa:87:02:db:c8:41:3a:8d:45:e6:4d:1b:9b:d2: 82:94:fa:cf:e3:aa:f2:9b:8f:af:07:d7:cd:a2:ad: 36:60:75:30:5c:b8:69:3b:2b:25:72:e7:77:ab:d1: ff:4c:cf:f5:58:ea:a1:3b:ba:a3:1a:de:51:61:64: 93:7c:de:dd:2b:b4:09:03:64:81:2b:ff:bc:d0:e3: c4:7c:ff:e6:b1:e8:52:16:70:91:78:45:8c:ca:55: 9b:b8:3f:a0:3a:a8:2d:22:31:6c:e0:1e:cd:9e:23: d9:25:16:32:87:92:b5:ab:97:cf:80:ea:e2:f0:b3: da:04:24:b8:e5:68:ec:2d:15:1f:f3:de:25:83:88: a3:bb:de:89:d1:b8:bd:4c:4e:9b:7b:9e:6b:63:a1: cb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:62:27:D2:1C:36:62:35:22:85:48:FF:BE:A9:38:65:ED:8F:2F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c7:4e:08:63:87:30:34:1d:67:2f:db:81:e4:45:5f:73:04: dc:63:16:ec:55:fe:60:33:37:f8:fb:d5:d6:bd:e5:a0:f9:02: 0c:c5:79:84:a9:87:b8:4b:33:2e:18:4e:36:23:2e:10:4a:6e: 25:04:13:96:65:73:cb:8c:c6:0d:cb:0e:99:87:3c:31:8d:19: 37:a0:f2:9c:c2:15:26:e7:13:fe:43:b4:ea:3f:65:f7:bd:54: a0:b5:9f:0b:90:35:43:2a:13:43:4f:b7:9a:12:d9:21:45:ef: 58:a2:d6:cd:a7:92:d7:c6:b7:ac:51:1a:99:34:62:da:f8:d9: 8f:87:ad:64:5f:b5:f9:f1:c0:c2:54:7b:c9:ec:e0:10:8f:9e: 9f:26:80:ff:53:aa:51:cd:ce:32:8f:97:b5:cc:84:fa:8b:fa: 8f:80:b2:e4:36:7e:5b:9c:96:4f:41:8f:09:9a:06:56:04:a8: 87:95:47:72:38:9a:f7:ae:21:f2:bd:09:14:9e:67:8f:21:5c: 4b:a4:69:48:8a:73:3d:f1:9c:e3:8b:89:f8:c9:f3:86:bc:cb: 3f:71:db:98:cc:06:50:8e:7a:b4:4c:2f:be:bb:23:de:80:90: fb:f2:47:32:cb:a4:48:03:63:8a:89:cd:2a:51:3e:aa:64:a5: 6c:7e:0d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYJ06rla1kt0EVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDgyMloXDTI1MDUwNDEwMDgyMlowLzEtMCsGA1UEAxMk NDk0NGE0YzgtMWRmOC00NDQ1LTgwYjItMGFmMWE0NDg2ZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh2LDWoytKk+BMynabBwBiUgJr5dnhzUFLIs AE/YrR7kcgndHb7wZSiPBuQMuwvdiiP4Vi13gFV+UEOCqfdA5+UJsu40EYmkCZ3g C5xgmd7tYlNZvv5G9BdTjrrDvXSbFlG6TBphZWlv+ocC28hBOo1F5k0bm9KClPrP 46rym4+vB9fNoq02YHUwXLhpOyslcud3q9H/TM/1WOqhO7qjGt5RYWSTfN7dK7QJ A2SBK/+80OPEfP/msehSFnCReEWMylWbuD+gOqgtIjFs4B7NniPZJRYyh5K1q5fP gOri8LPaBCS45WjsLRUf894lg4iju96J0bi9TE6be55rY6HLWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZiJ9IcNmI1IoVI/76pOGXtjy9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmIyNzY2NGQtZmM1Zi0z NWM5LTlmMDktOTUyY2E0NzdkYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/HTghjhzA0HWcv24HkRV9zBNxjFuxV/mAzN/j71da95aD5AgzFeYSp h7hLMy4YTjYjLhBKbiUEE5Zlc8uMxg3LDpmHPDGNGTeg8pzCFSbnE/5DtOo/Zfe9 VKC1nwuQNUMqE0NPt5oS2SFF71ii1s2nktfGt6xRGpk0Ytr42Y+HrWRftfnxwMJU e8ns4BCPnp8mgP9TqlHNzjKPl7XMhPqL+o+AsuQ2fluclk9BjwmaBlYEqIeVR3I4 mveuIfK9CRSeZ48hXEukaUiKcz3xnOOLifjJ84a8yz9x25jMBlCOerRML767I96A kPvyRzLLpEgDY4qJzSpRPqpkpWx+DYs= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:51 2025 by rpki-client