$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa File: c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa (raw, json) Hash identifier: SsjsEGxzP9PfNsrpg4TJnQQPDDXxQ1WlwCvMoQQXuSc= Subject key identifier: A3:26:FE:2B:63:11:DB:FA:71:28:64:86:B6:4C:F5:FC:FB:85:C0:F2 Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Certificate serial: 010D0C9F43285848D2114228AF39FFC459FE67C0 Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 23393 IP address blocks: 104.37.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:42:28:af:39:ff:c4:59:fe:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=93eab497-45ea-4f6f-a932-26eed42a3942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:ec:de:fe:99:6c:bf:78:57:13:98:78:0c: 88:4d:cd:5a:fd:5d:ab:81:6d:8c:f9:a5:7c:85:a7: 59:cc:e1:2f:9c:9a:65:b8:5d:77:45:6f:82:86:4d: fe:51:20:94:97:08:2a:4a:6e:01:cd:76:ce:38:86: bd:16:4c:2f:25:bb:23:70:77:f6:78:7b:f0:65:53: 7a:a2:fe:a5:81:5b:2f:7d:81:d6:20:f2:da:82:8a: 87:57:63:36:1d:8c:16:53:8b:9d:e3:75:8d:58:48: 15:8c:7d:ea:7c:d8:12:d6:d9:6d:eb:59:65:d2:e8: 86:07:b6:f7:24:e9:5f:c3:5f:d3:3a:b1:39:71:0e: 03:60:3c:79:f8:4b:58:bd:ab:e8:7e:23:01:c3:3f: 6c:8f:31:fe:6c:ab:e9:32:ff:24:34:29:11:6c:c9: 9e:0d:f4:9e:34:6d:f6:24:ba:ac:dc:d5:75:a4:86: e2:6e:26:80:5e:01:a3:8f:29:09:a9:6e:90:7c:1c: e6:63:23:65:b3:74:6e:0f:dc:3a:f6:0d:fe:20:eb: f8:03:c2:43:f0:d0:64:41:e5:2e:1d:24:7a:2f:55: ca:f5:03:2f:8e:19:e0:1f:e7:22:5c:ea:f5:89:bb: ca:d3:de:b6:14:b7:63:12:c8:a9:a9:06:31:ec:46: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:26:FE:2B:63:11:DB:FA:71:28:64:86:B6:4C:F5:FC:FB:85:C0:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl X509v3 Authority Key Identifier: keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer sbgp-ipAddrBlock: critical IPv4: 104.37.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:bc:41:a9:af:3a:ce:58:83:c7:3a:4a:32:3b:b2:df:25:cc: 01:34:28:c4:cb:d2:ed:1f:56:39:ea:b4:86:85:b5:52:2e:73: 4b:03:de:74:06:45:65:d9:4b:ee:ba:01:0c:33:41:da:a7:76: e0:14:b4:87:db:7c:cf:05:1b:4a:fc:6f:bd:3a:4d:fc:ee:74: 2b:3d:63:99:41:a3:5a:74:3c:16:b4:23:5e:f0:1c:d5:ab:b6: 64:95:21:ae:e8:4c:e1:75:80:6d:bd:11:e5:a5:21:88:f6:6a: 54:c0:65:45:82:11:73:15:f8:4c:39:d1:9d:b0:70:ec:41:5f: fe:8d:f1:41:c1:55:d2:6b:b5:be:f7:a1:51:39:b5:89:ea:26: 29:73:b2:ed:91:62:78:7d:0a:ba:a0:2f:04:c0:2b:26:06:21: 8d:52:44:16:d3:96:46:79:2d:1f:1c:2d:a3:e8:e5:25:44:ad: 11:11:4b:fd:4b:08:94:2c:97:a7:cf:1f:83:18:4b:7b:57:72: 50:63:90:3e:0c:38:e0:ea:a5:f3:f1:95:c4:89:3d:90:c1:fd: 95:70:3b:68:54:b1:5a:c3:0b:a1:4e:40:dd:33:29:66:67:66: ad:e3:61:84:72:62:ea:f3:b3:51:b9:d4:d2:26:7a:fb:57:f7: c4:2d:05:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUIorzn/xFn+Z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmZWRmYmUtNTYzYy00MWQzLTlmZDItZmNmMjJkYWM3 NDkzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTNlYWI0OTctNDVlYS00ZjZmLWE5MzItMjZlZWQ0MmEzOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3bs3v6ZbL94VxOYeAyITc1a/V2rgW2M+aV8 hadZzOEvnJpluF13RW+Chk3+USCUlwgqSm4BzXbOOIa9FkwvJbsjcHf2eHvwZVN6 ov6lgVsvfYHWIPLagoqHV2M2HYwWU4ud43WNWEgVjH3qfNgS1tlt61ll0uiGB7b3 JOlfw1/TOrE5cQ4DYDx5+EtYvavofiMBwz9sjzH+bKvpMv8kNCkRbMmeDfSeNG32 JLqs3NV1pIbibiaAXgGjjykJqW6QfBzmYyNls3RuD9w69g3+IOv4A8JD8NBkQeUu HSR6L1XK9QMvjhngH+ciXOr1ibvK0962FLdjEsipqQYx7EbfGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMm/itjEdv6cShkhrZM9fz7hcDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZl ZGZiZS01NjNjLTQxZDMtOWZkMi1mY2YyMmRhYzc0OTMvYzIxYmI2YzUtOTU5Mi0z OWI0LThiNWYtNWFmOWE5MTMzNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNThmZWRmYmUtNTYzYy00MWQzLTlm ZDItZmNmMjJkYWM3NDkzLzU4ZmVkZmJlLTU2M2MtNDFkMy05ZmQyLWZjZjIyZGFj NzQ5My5jcmwwHwYDVR0jBBgwFoAUDWpXiLpV9Ezanp4K422Jg+WKm1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZlZGZiZS01NjNjLTQxZDMtOWZkMi1mY2Yy MmRhYzc0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe8QamvOs5Yg8c6SjI7st8lzAE0KMTL0u0fVjnqtIaFtVIuc0sD3nQG RWXZS+66AQwzQdqnduAUtIfbfM8FG0r8b706TfzudCs9Y5lBo1p0PBa0I17wHNWr tmSVIa7oTOF1gG29EeWlIYj2alTAZUWCEXMV+Ew50Z2wcOxBX/6N8UHBVdJrtb73 oVE5tYnqJilzsu2RYnh9CrqgLwTAKyYGIY1SRBbTlkZ5LR8cLaPo5SVErRERS/1L CJQsl6fPH4MYS3tXclBjkD4MOODqpfPxlcSJPZDB/ZVwO2hUsVrDC6FOQN0zKWZn Zq3jYYRyYurzs1G51NImevtX98QtBfo= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:55 2025 by rpki-client