$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed140409-84a2-3f73-ab4c-4228df8efbda.roa File: ed140409-84a2-3f73-ab4c-4228df8efbda.roa (raw, json) Hash identifier: VBfG9zkPnp6zgjogCDZXxZGAqjTvbQDnt6L9q7dfeIE= Subject key identifier: 68:FA:15:9D:78:29:C5:89:88:95:C4:1A:D4:BF:A0:E9:A5:37:6C:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5339C25475DA18EF6456000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed140409-84a2-3f73-ab4c-4228df8efbda.roa Signing time: Tue 04 Feb 2025 11:25:07 +0000 ROA not before: Tue 04 Feb 2025 11:25:07 +0000 ROA not after: Mon 05 May 2025 10:25:07 +0000 asID: 30036 IP address blocks: 173.21.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:33:9c:25:47:5d:a1:8e:f6:45:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:25:07 2025 GMT Not After : May 5 10:25:07 2025 GMT Subject: CN=2b51c5a0-7d94-42cd-89ad-acdbcb7594c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:8f:f7:1c:ac:e3:8f:4e:e3:a1:db:c2:a2: 52:23:73:df:07:53:78:d5:a6:ee:f2:e1:c9:31:a9: 43:d5:e6:4e:82:8f:2e:2b:d1:53:67:04:89:88:70: 41:ab:1b:ef:c2:f3:e2:b6:cc:58:8c:75:15:f8:d3: 6d:66:7d:f6:88:cc:30:9e:a3:2f:42:ea:4a:35:a6: 70:15:30:64:a1:bd:03:a4:7c:df:9f:f5:98:77:57: e9:fc:70:24:eb:9c:21:ff:33:8e:79:eb:93:16:98: 6e:ed:9b:e2:98:e0:b8:7b:5b:bd:6a:52:d6:9c:67: 2d:5b:cc:8f:1a:74:3b:1a:9b:84:40:b0:84:ca:6e: 3c:fa:ec:74:4c:80:17:d6:ec:a4:a7:97:84:0e:4d: af:f6:90:fe:ce:41:99:fa:9d:94:60:73:ba:5f:2d: 73:36:17:70:7a:37:17:9f:48:49:12:43:98:64:51: 55:a1:d1:c1:f4:3a:8d:14:cc:b2:5d:27:e4:ae:93: ed:de:a6:20:56:1b:d9:65:54:3f:47:d1:09:81:82: 32:f9:4b:88:b2:4a:ed:ad:f1:dd:b8:80:43:e8:66: c9:a3:96:27:0b:d0:ff:c1:c3:43:85:23:bb:d8:f1: 58:4c:82:dc:6f:19:2f:82:d5:72:e1:48:33:94:c2: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:15:9D:78:29:C5:89:88:95:C4:1A:D4:BF:A0:E9:A5:37:6C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed140409-84a2-3f73-ab4c-4228df8efbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:37:e6:1e:64:4c:79:69:ca:b7:97:f7:ea:dd:b5:ee:b0:6d: a6:c2:e0:12:f3:fa:09:7c:d7:07:81:74:1b:fb:3e:db:2c:75: e7:b3:eb:df:a8:f8:78:4a:00:cd:73:30:9b:95:a5:ba:c1:e2: db:5a:52:e9:84:4c:fa:4d:5c:f7:68:b1:e7:ba:26:9e:fb:97: 6f:56:99:7c:bc:77:93:ab:25:ac:ef:ac:d1:1a:3f:02:06:16: dd:fc:f8:bd:b6:41:73:38:65:83:fc:ca:2f:2e:97:8b:38:c2: 4b:06:ab:5e:b3:f4:cc:37:a4:da:5b:1f:8c:8c:f4:79:d9:99: f3:8e:f2:de:7d:c4:86:8f:bc:a4:ae:ef:79:e7:b5:c8:dd:22: a9:78:f2:d1:5f:1f:4c:d4:5d:db:b1:75:da:d8:c6:73:fe:aa: 3a:dd:20:1a:d0:55:89:20:99:66:b1:47:66:bb:7b:0b:1c:3e: ef:b9:b5:59:ac:22:e4:4d:16:25:45:44:b0:30:8f:33:71:2b: 6c:31:60:92:a7:05:d8:96:82:49:ec:ad:8c:6b:bb:56:c6:d2: af:ed:97:00:ea:bb:80:b7:0c:3e:d8:59:69:d9:90:6b:2c:ad: 61:0d:c5:41:01:68:25:3d:51:1b:22:94:0d:37:97:21:41:cf: 1d:66:d3:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM5wlR12hjvZFYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjUwN1oXDTI1MDUwNTEwMjUwN1owLzEtMCsGA1UEAxMk MmI1MWM1YTAtN2Q5NC00MmNkLTg5YWQtYWNkYmNiNzU5NGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz+P9xys449O46HbwqJSI3PfB1N41abu8uHJ MalD1eZOgo8uK9FTZwSJiHBBqxvvwvPitsxYjHUV+NNtZn32iMwwnqMvQupKNaZw FTBkob0DpHzfn/WYd1fp/HAk65wh/zOOeeuTFphu7ZvimOC4e1u9alLWnGctW8yP GnQ7GpuEQLCEym48+ux0TIAX1uykp5eEDk2v9pD+zkGZ+p2UYHO6Xy1zNhdwejcX n0hJEkOYZFFVodHB9DqNFMyyXSfkrpPt3qYgVhvZZVQ/R9EJgYIy+UuIskrtrfHd uIBD6GbJo5YnC9D/wcNDhSO72PFYTILcbxkvgtVy4UgzlMK0rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj6FZ14KcWJiJXEGtS/oOmlN2wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWQxNDA0MDktODRhMi0z ZjczLWFiNGMtNDIyOGRmOGVmYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA35h5kTHlpyreX9+rdte6wbabC4BLz+gl81weBdBv7Ptssdeez69+o +HhKAM1zMJuVpbrB4ttaUumETPpNXPdosee6Jp77l29WmXy8d5OrJazvrNEaPwIG Ft38+L22QXM4ZYP8yi8ul4s4wksGq16z9Mw3pNpbH4yM9HnZmfOO8t59xIaPvKSu 73nntcjdIql48tFfH0zUXduxddrYxnP+qjrdIBrQVYkgmWaxR2a7ewscPu+5tVms IuRNFiVFRLAwjzNxK2wxYJKnBdiWgknsrYxru1bG0q/tlwDqu4C3DD7YWWnZkGss rWENxUEBaCU9URsilA03lyFBzx1m0wo= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:59 2025 by rpki-client