$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa File: c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa (raw, json) Hash identifier: D1Q7w0jYAxQhpaiyXy3PNoPcVBQIdxgU0f70wienG6I= Subject key identifier: B5:95:38:11:39:97:CE:7C:DB:AC:F6:3C:9A:95:B8:17:7B:40:86:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F74367EE26488A75530F30 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa Signing time: Wed 05 Feb 2025 11:10:57 +0000 ROA not before: Wed 05 Feb 2025 11:10:57 +0000 ROA not after: Tue 06 May 2025 10:10:57 +0000 asID: 30036 IP address blocks: 173.21.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f7:43:67:ee:26:48:8a:75:53:0f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:10:57 2025 GMT Not After : May 6 10:10:57 2025 GMT Subject: CN=494df0f8-0e2b-4c3c-974d-483c2532dbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:ef:28:22:df:5c:32:06:cf:52:e4:29:c1: 3c:d5:21:4f:53:7b:b3:45:0a:84:9b:a4:44:8a:7a: 80:99:97:30:01:a8:75:0c:f5:8a:48:6f:22:1e:15: 24:38:dc:8f:9f:e8:70:e7:a6:cb:61:d8:1d:3b:a2: b1:25:48:d6:ed:ac:ae:92:c1:8f:2f:42:6d:ba:62: 7b:98:2f:b6:41:0a:9f:c3:f9:01:08:56:15:6c:18: 47:89:c6:0f:a4:57:a5:2c:0a:ab:72:c2:c1:fd:fc: 60:25:ec:ff:8f:88:f4:3f:9e:02:f8:f9:90:9b:70: b0:4e:9e:98:43:7f:c3:99:e0:04:e9:c1:4f:f7:7e: 46:fb:2f:bc:40:87:a0:9a:7d:ad:f2:59:80:a4:14: 50:7e:41:79:bb:9b:ea:ed:08:12:e5:6f:26:6c:90: fe:fe:f2:cb:e3:cd:52:f1:17:02:35:c7:46:19:e9: 0d:90:74:a0:68:5e:81:df:eb:a9:a9:40:da:39:f8: a0:fe:48:bc:b2:ba:03:aa:23:91:10:ad:1a:5a:d4: c2:8c:57:03:c7:1d:90:f7:3e:a4:20:df:90:42:5f: 68:c2:59:32:e9:49:02:a8:78:89:56:78:5a:af:1c: b6:39:58:81:98:7a:ca:ba:aa:13:c1:03:ce:ab:51: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:95:38:11:39:97:CE:7C:DB:AC:F6:3C:9A:95:B8:17:7B:40:86:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:42:44:a5:17:91:7c:92:ba:86:54:10:92:93:25:5e:b6:f5: c6:30:9f:e3:b6:fa:01:5a:d8:75:a9:39:f5:63:70:4e:84:bc: 18:6a:cc:ba:90:f8:dc:cd:7c:45:07:16:55:cd:7e:b5:77:f3: e6:b3:89:86:e3:f1:d1:80:aa:f5:94:55:8a:99:2e:a5:17:5b: af:a5:4b:5b:98:05:4b:f5:05:5b:9f:49:1b:2f:e4:89:9a:87: 07:16:e2:ef:0d:63:d0:b7:69:d6:68:a3:50:e1:3d:38:6f:13: 03:a8:e6:53:61:ab:50:21:e3:a4:9a:9e:3d:bb:cd:bb:79:0e: 99:42:a3:63:f3:7a:13:45:47:5b:6e:61:27:57:99:56:3c:b7: 54:16:c8:6d:be:02:24:0a:b2:29:e2:3d:59:83:0f:ee:22:78: 63:d8:b3:3d:d9:9d:cc:b8:39:17:a5:d0:0c:81:31:17:55:4f: 6b:05:1c:26:b8:f3:dc:21:dc:e5:7c:9a:16:d0:32:6e:f6:ed: 01:9d:e8:55:c9:c0:65:9e:32:61:31:3e:38:03:6a:69:85:ab: 53:06:21:00:2d:31:85:b6:4e:b8:ff:a4:3b:1f:c6:6f:51:03: 37:06:e4:8d:f0:0f:a6:2c:06:52:a8:d9:11:e4:e4:22:8f:c9: 0e:aa:55:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH90Nn7iZIinVTDzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTA1N1oXDTI1MDUwNjEwMTA1N1owLzEtMCsGA1UEAxMk NDk0ZGYwZjgtMGUyYi00YzNjLTk3NGQtNDgzYzI1MzJkYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqDvKCLfXDIGz1LkKcE81SFPU3uzRQqEm6RE inqAmZcwAah1DPWKSG8iHhUkONyPn+hw56bLYdgdO6KxJUjW7ayuksGPL0JtumJ7 mC+2QQqfw/kBCFYVbBhHicYPpFelLAqrcsLB/fxgJez/j4j0P54C+PmQm3CwTp6Y Q3/DmeAE6cFP935G+y+8QIegmn2t8lmApBRQfkF5u5vq7QgS5W8mbJD+/vLL481S 8RcCNcdGGekNkHSgaF6B3+upqUDaOfig/ki8sroDqiOREK0aWtTCjFcDxx2Q9z6k IN+QQl9owlky6UkCqHiJVnharxy2OViBmHrKuqoTwQPOq1GjYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWVOBE5l85826z2PJqVuBd7QIZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMzZjNhMmUtNmIxYS0z NmNjLWE4NzktN2ViZTA4NTY4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZCRKUXkXySuoZUEJKTJV629cYwn+O2+gFa2HWpOfVjcE6EvBhqzLqQ +NzNfEUHFlXNfrV38+aziYbj8dGAqvWUVYqZLqUXW6+lS1uYBUv1BVufSRsv5Ima hwcW4u8NY9C3adZoo1DhPThvEwOo5lNhq1Ah46Sanj27zbt5DplCo2PzehNFR1tu YSdXmVY8t1QWyG2+AiQKsiniPVmDD+4ieGPYsz3Zncy4ORel0AyBMRdVT2sFHCa4 89wh3OV8mhbQMm727QGd6FXJwGWeMmExPjgDammFq1MGIQAtMYW2Trj/pDsfxm9R AzcG5I3wD6YsBlKo2RHk5CKPyQ6qVf0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:23 2025 by rpki-client