$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa File: fc58cf11-5289-327d-ba41-3e1669ac141f.roa (raw, json) Hash identifier: OREmC5U2PoVXw6ePHeTAWU6LUhXsHwEANqF7SX5AcNA= Subject key identifier: FB:E2:49:5A:80:6C:70:44:6D:07:97:0B:32:A5:74:46:3E:2F:7C:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B736EF175D58153327C3EE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa Signing time: Thu 30 Jan 2025 11:10:30 +0000 ROA not before: Thu 30 Jan 2025 11:10:30 +0000 ROA not after: Wed 30 Apr 2025 10:10:30 +0000 asID: 30036 IP address blocks: 173.21.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:ef:17:5d:58:15:33:27:c3:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:10:30 2025 GMT Not After : Apr 30 10:10:30 2025 GMT Subject: CN=9d7b4e3c-44e5-4bc4-bd79-50c810b746b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:66:31:cc:73:c0:2f:65:ea:57:3b:75:a0:28: f0:72:ca:e7:47:2f:83:d5:43:c4:2b:f5:b5:b1:13: a0:47:df:df:83:02:06:e6:1b:1d:61:fc:b7:a6:6b: 77:1a:ca:53:22:b3:7a:6c:eb:e5:8d:0b:3a:29:d8: 8d:ee:14:a0:82:4a:c5:3d:6d:05:32:c1:3d:bd:96: 4c:bb:62:f4:35:3d:86:bf:d9:03:d9:45:0d:5c:51: c9:fd:7f:ea:bf:b8:40:60:67:8a:13:82:99:cf:93: d2:81:01:c5:50:b2:a6:bf:52:9e:cd:ae:b7:b9:33: c9:80:c5:f3:3a:99:ae:0a:de:73:96:96:05:0d:77: 55:ea:41:42:4d:e4:0d:55:9b:0b:93:5e:c1:fc:e9: c0:1c:bb:75:93:e9:47:ef:6e:17:8d:85:72:5c:07: 27:f0:ad:69:0f:5b:92:d3:89:06:8d:1e:a5:d4:b1: ea:d0:9b:9f:6c:18:e7:a8:01:48:1a:15:a8:5d:62: f4:fb:e3:ff:6e:e6:57:0d:8b:a0:04:60:e8:3d:df: 70:79:da:0d:94:e8:8f:22:f5:b0:ca:f1:62:74:c1: fe:8f:86:89:94:64:8b:4b:29:ac:6f:3b:98:15:28: fb:8f:b5:da:ca:cb:1f:53:d0:93:b2:0d:19:83:42: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:49:5A:80:6C:70:44:6D:07:97:0B:32:A5:74:46:3E:2F:7C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:43:ee:49:ae:4d:93:b9:7b:cb:a5:a5:33:76:fe:59:e5:90: 18:de:d2:7d:76:10:d8:34:96:f4:92:74:17:58:be:83:83:70: bb:9c:1e:fc:b2:95:32:fd:d1:57:34:f5:a0:6d:ac:7b:43:d1: 45:f4:27:5c:e9:77:30:8c:d5:c4:55:97:19:f3:ff:0c:63:4d: ef:f6:9a:e0:cb:21:94:15:e8:3a:9f:90:2e:49:95:d8:ec:da: 67:b7:13:b4:67:e4:34:58:ed:3a:e0:62:4b:67:aa:27:53:9f: e1:22:51:69:7d:b8:5d:5e:26:19:fa:f3:d8:9e:a7:1f:c3:b1: 5a:a8:26:e3:0a:59:27:23:97:a9:65:1a:3f:14:30:eb:ef:c9: c7:9c:6b:8d:56:d9:a5:65:2d:05:a7:f6:42:28:7f:9d:4f:e0: d7:88:d7:b0:88:16:d9:cd:64:df:d7:75:9c:87:58:98:ae:d8: b1:5e:25:33:59:a5:64:63:a1:50:69:78:4d:c8:bf:77:30:5f: b2:5e:8c:7d:a7:34:f0:4d:16:cb:c1:61:ac:a0:62:1e:b2:68: 37:68:51:6e:3e:43:af:ed:40:50:e6:a0:6b:d6:e3:68:cc:b2: 78:8d:2a:89:f2:19:1d:dc:1d:ba:89:0e:5d:e5:67:a9:31:db: e4:e7:29:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nu8XXVgVMyfD7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTAzMFoXDTI1MDQzMDEwMTAzMFowLzEtMCsGA1UEAxMk OWQ3YjRlM2MtNDRlNS00YmM0LWJkNzktNTBjODEwYjc0NmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmYxzHPAL2XqVzt1oCjwcsrnRy+D1UPEK/W1 sROgR9/fgwIG5hsdYfy3pmt3GspTIrN6bOvljQs6KdiN7hSggkrFPW0FMsE9vZZM u2L0NT2Gv9kD2UUNXFHJ/X/qv7hAYGeKE4KZz5PSgQHFULKmv1Keza63uTPJgMXz OpmuCt5zlpYFDXdV6kFCTeQNVZsLk17B/OnAHLt1k+lH724XjYVyXAcn8K1pD1uS 04kGjR6l1LHq0JufbBjnqAFIGhWoXWL0++P/buZXDYugBGDoPd9wedoNlOiPIvWw yvFidMH+j4aJlGSLSymsbzuYFSj7j7XayssfU9CTsg0Zg0JCxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPviSVqAbHBEbQeXCzKldEY+L3x1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmM1OGNmMTEtNTI4OS0z MjdkLWJhNDEtM2UxNjY5YWMxNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZD7kmuTZO5e8ulpTN2/lnlkBje0n12ENg0lvSSdBdYvoODcLucHvyy lTL90Vc09aBtrHtD0UX0J1zpdzCM1cRVlxnz/wxjTe/2muDLIZQV6DqfkC5Jldjs 2me3E7Rn5DRY7TrgYktnqidTn+EiUWl9uF1eJhn689iepx/DsVqoJuMKWScjl6ll Gj8UMOvvyceca41W2aVlLQWn9kIof51P4NeI17CIFtnNZN/XdZyHWJiu2LFeJTNZ pWRjoVBpeE3Iv3cwX7JejH2nNPBNFsvBYaygYh6yaDdoUW4+Q6/tQFDmoGvW42jM sniNKonyGR3cHbqJDl3lZ6kx2+TnKZc= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:31 2025 by rpki-client