$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa File: fc58cf11-5289-327d-ba41-3e1669ac141f.roa (raw, json) Hash identifier: 8favMPbgNQ0RqhFRfSh2G4fpePdoyanl63iX6VUdKWM= Subject key identifier: A8:98:70:AD:B2:AE:03:CC:E9:82:23:93:E0:C6:9B:A3:58:9C:05:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C495DD982FA4CA71D72400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.21.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:95:dd:98:2f:a4:ca:71:d7:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=4193a8e1-d582-4ea5-8954-164d174922a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:ea:b7:bb:ce:dd:b6:14:89:43:9a:be:c4: 61:9f:c8:6d:c1:a3:5d:20:b8:59:87:55:89:90:71: 45:21:83:81:25:57:e2:cb:ff:01:80:5e:12:aa:1a: 9b:e0:1e:53:9a:72:d9:9c:2c:42:f4:71:db:3b:23: 4b:14:89:18:bf:23:77:2b:77:67:81:35:a7:12:ec: 7d:21:be:60:f4:85:45:1c:b5:31:e8:13:c7:3f:e7: 88:e2:b1:cf:48:44:f5:7b:3e:2a:d2:7b:90:f9:c4: bb:31:bd:98:06:8e:7c:60:e9:1f:0f:c2:eb:ef:0c: cb:dc:30:3d:09:1e:91:b1:e4:6a:c4:10:ad:84:e9: dd:21:81:75:7b:0e:8a:f7:b6:c7:d1:1d:d9:44:e1: 87:4a:5c:18:6b:2d:52:f5:7e:7e:12:76:6c:91:46: 4c:de:4b:5b:a0:85:10:5f:22:87:36:8a:08:0d:45: 1b:aa:32:31:c4:39:00:0f:5d:8c:cb:95:bf:55:57: 86:2f:df:47:c4:62:24:4d:be:c0:85:fc:86:39:16: fc:6e:14:a4:84:ca:de:c8:82:7a:08:ff:4a:04:c1: d5:39:09:a1:0e:2d:7b:97:5c:fe:ee:43:49:5c:28: a8:1f:6b:1d:95:89:88:ce:24:13:5c:fe:4d:ba:b1: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:70:AD:B2:AE:03:CC:E9:82:23:93:E0:C6:9B:A3:58:9C:05:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f1:e8:69:20:6e:ac:47:e4:b7:80:ec:68:02:34:2a:66:13: 4e:e7:5b:65:39:bf:f0:59:d8:ca:4a:c8:c8:db:96:ec:7e:d1: b1:13:30:35:cc:1b:5d:02:97:e8:51:ef:e7:4d:17:df:ab:fa: a2:d4:ea:e0:0a:92:54:6c:58:e7:d0:0f:21:89:00:69:ec:f5: 62:b2:4a:91:0f:6c:30:47:52:f6:6e:cd:c8:65:ee:57:2d:53: b5:c9:b2:08:2f:3c:ff:76:bf:6c:78:90:64:15:c8:8a:7c:7d: 0b:b0:00:f8:93:0a:bb:28:89:18:26:c1:62:e8:b7:33:6a:5e: ea:19:25:5a:1e:3b:a1:b3:a4:c9:13:05:9a:fe:ed:2a:08:2d: ff:17:e9:8a:91:68:97:da:42:77:9c:a7:b6:c6:86:26:8e:ae: 0c:2b:7a:d9:72:5b:4d:0a:dc:ad:b3:98:f6:be:e3:28:a8:66: 7c:9c:f9:cd:af:3f:6b:76:ed:46:ac:f9:9b:b4:3e:4f:34:d2: a4:ec:17:25:29:3a:7a:c3:2a:c0:e2:46:de:c1:b7:09:da:90: 61:3f:6d:a5:ff:7a:b0:10:3b:84:1c:e4:63:48:67:30:77:cb: 49:91:e4:08:60:07:73:c1:12:39:20:21:f2:25:b7:08:af:56: 8a:69:10:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJXdmC+kynHXJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NDE5M2E4ZTEtZDU4Mi00ZWE1LTg5NTQtMTY0ZDE3NDkyMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDrqt7vO3bYUiUOavsRhn8htwaNdILhZh1WJ kHFFIYOBJVfiy/8BgF4Sqhqb4B5TmnLZnCxC9HHbOyNLFIkYvyN3K3dngTWnEux9 Ib5g9IVFHLUx6BPHP+eI4rHPSET1ez4q0nuQ+cS7Mb2YBo58YOkfD8Lr7wzL3DA9 CR6RseRqxBCthOndIYF1ew6K97bH0R3ZROGHSlwYay1S9X5+EnZskUZM3ktboIUQ XyKHNooIDUUbqjIxxDkAD12My5W/VVeGL99HxGIkTb7AhfyGORb8bhSkhMreyIJ6 CP9KBMHVOQmhDi17l1z+7kNJXCioH2sdlYmIziQTXP5NurFoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiYcK2yrgPM6YIjk+DGm6NYnAUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmM1OGNmMTEtNTI4OS0z MjdkLWJhNDEtM2UxNjY5YWMxNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXx6GkgbqxH5LeA7GgCNCpmE07nW2U5v/BZ2MpKyMjblux+0bETMDXM G10Cl+hR7+dNF9+r+qLU6uAKklRsWOfQDyGJAGns9WKySpEPbDBHUvZuzchl7lct U7XJsggvPP92v2x4kGQVyIp8fQuwAPiTCrsoiRgmwWLotzNqXuoZJVoeO6GzpMkT BZr+7SoILf8X6YqRaJfaQnecp7bGhiaOrgwretlyW00K3K2zmPa+4yioZnyc+c2v P2t27Uas+Zu0Pk800qTsFyUpOnrDKsDiRt7BtwnakGE/baX/erAQO4Qc5GNIZzB3 y0mR5AhgB3PBEjkgIfIltwivVoppEDY= -----END CERTIFICATE-----Generated at Wed Apr 30 17:37:23 2025 by rpki-client