$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa File: 973cd140-cab6-388f-8e11-26b2f8fc5390.roa (raw, json) Hash identifier: 6rzoFdd4YuNpQRmWtxEE62llA8Nqez2SgtggvSPolLc= Subject key identifier: 89:32:18:03:46:F4:84:88:99:EE:E0:2E:17:AF:23:BB:0B:EB:29:CC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FDBD673B7E642AB9269880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa Signing time: Wed 05 Feb 2025 11:24:00 +0000 ROA not before: Wed 05 Feb 2025 11:24:00 +0000 ROA not after: Tue 06 May 2025 10:24:00 +0000 asID: 30036 IP address blocks: 173.21.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:bd:67:3b:7e:64:2a:b9:26:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:24:00 2025 GMT Not After : May 6 10:24:00 2025 GMT Subject: CN=23fdeb3c-024a-447d-a933-c719e90eb263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:bd:78:ce:3a:2d:1a:85:65:51:b3:7d:f7: 89:f4:73:70:43:da:4e:a4:87:7a:ee:9b:a8:93:f3: 31:92:36:55:0f:b6:6b:9c:67:07:c6:67:c3:4b:7b: a3:8c:32:02:76:8a:4a:0d:88:aa:42:29:c3:38:6b: d4:20:88:43:2d:e4:e0:2e:a7:d7:20:39:85:cf:4d: 51:1e:d5:62:ba:40:18:f9:18:d2:c4:e3:0e:32:8e: f3:26:bf:3d:20:bd:ae:17:f6:56:d8:4e:f9:4c:fc: 50:10:68:c1:d9:af:07:2d:af:70:50:99:74:ab:b3: 57:96:a8:e1:30:ba:6d:54:c8:04:54:3c:5d:7f:9f: 35:b4:1e:ac:e2:19:de:9a:17:f9:10:e6:5c:cb:0d: 53:ae:fe:7f:35:4e:33:40:ab:2e:0e:bf:31:9f:73: f5:cb:d0:a5:a7:47:3c:95:71:51:00:57:76:86:42: c8:29:de:de:26:e7:73:95:10:99:b9:9e:d5:ba:5b: 36:77:4e:aa:b2:ab:c1:cc:fa:d0:79:09:40:29:d5: 0a:3a:8d:ce:9e:a1:e3:30:b8:ec:9d:07:d7:f2:81: b2:04:c3:86:28:57:1a:c6:06:ac:d0:34:e2:2d:f6: 44:bd:aa:eb:3d:a8:bf:c9:63:9b:cf:c5:5c:5f:6f: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:32:18:03:46:F4:84:88:99:EE:E0:2E:17:AF:23:BB:0B:EB:29:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c3:17:9f:61:aa:e5:a5:21:25:86:25:db:07:dd:21:8b:f2: c6:f9:84:56:c1:a4:a7:0e:84:44:d0:5a:68:fd:05:ba:b8:66: 86:24:d6:a6:2d:6e:a2:39:aa:d0:89:6f:71:a5:3c:0d:d4:86: 4c:19:f0:70:c4:2c:22:2f:f7:ad:c4:52:3f:92:3e:9c:5a:5f: 00:e3:34:78:a4:3f:c6:b2:75:7e:7c:87:e7:49:8f:68:ed:19: b4:2a:ea:02:22:b3:91:67:c7:db:c0:a7:53:b3:96:96:db:16: 4b:c9:bb:51:8f:82:54:89:70:ac:07:d4:5a:3c:3a:83:3b:10: 0b:1a:a9:fe:34:cb:e8:90:21:7b:76:5e:49:52:5a:4c:3f:d2: 10:2d:ab:a7:a9:e6:fc:45:0d:b9:36:07:07:9f:1d:38:22:20: 15:1d:71:d8:80:a8:f0:f2:b7:e7:aa:0f:0c:6d:6e:e5:db:6a: 06:02:e0:18:4e:1a:e4:aa:5e:2f:3b:d4:48:83:83:97:45:59: 4c:62:fb:52:51:7d:ca:23:16:f3:3b:a1:72:88:9d:c5:68:27: 1d:4d:8e:e0:5c:ca:ba:8f:e4:ec:9c:a2:63:1e:81:95:66:db: a9:ee:e3:80:6f:e4:ed:74:b8:36:bd:f7:3f:6e:d4:cb:cf:6f: 36:6a:f3:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/b1nO35kKrkmmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjQwMFoXDTI1MDUwNjEwMjQwMFowLzEtMCsGA1UEAxMk MjNmZGViM2MtMDI0YS00NDdkLWE5MzMtYzcxOWU5MGViMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMq9eM46LRqFZVGzffeJ9HNwQ9pOpId67puo k/MxkjZVD7ZrnGcHxmfDS3ujjDICdopKDYiqQinDOGvUIIhDLeTgLqfXIDmFz01R HtViukAY+RjSxOMOMo7zJr89IL2uF/ZW2E75TPxQEGjB2a8HLa9wUJl0q7NXlqjh MLptVMgEVDxdf581tB6s4hnemhf5EOZcyw1Trv5/NU4zQKsuDr8xn3P1y9Clp0c8 lXFRAFd2hkLIKd7eJudzlRCZuZ7Vuls2d06qsqvBzPrQeQlAKdUKOo3OnqHjMLjs nQfX8oGyBMOGKFcaxgas0DTiLfZEvarrPai/yWObz8VcX2+FRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkyGANG9ISIme7gLhevI7sL6ynMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTczY2QxNDAtY2FiNi0z ODhmLThlMTEtMjZiMmY4ZmM1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjDF59hquWlISWGJdsH3SGL8sb5hFbBpKcOhETQWmj9Bbq4ZoYk1qYt bqI5qtCJb3GlPA3UhkwZ8HDELCIv963EUj+SPpxaXwDjNHikP8aydX58h+dJj2jt GbQq6gIis5Fnx9vAp1OzlpbbFkvJu1GPglSJcKwH1Fo8OoM7EAsaqf40y+iQIXt2 XklSWkw/0hAtq6ep5vxFDbk2BwefHTgiIBUdcdiAqPDyt+eqDwxtbuXbagYC4BhO GuSqXi871EiDg5dFWUxi+1JRfcojFvM7oXKIncVoJx1NjuBcyrqP5OycomMegZVm 26nu44Bv5O10uDa99z9u1MvPbzZq8yo= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:53 2025 by rpki-client