$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa File: fca88dc6-80a8-38ce-899a-71fceb3b14af.roa (raw, json) Hash identifier: PB2mt7+LvTbLqp264mYInLH/En/t7RXPaP8nY/xLrRQ= Subject key identifier: 2C:43:A3:8E:D0:65:6A:17:01:49:A9:E5:F4:84:45:BD:2B:EA:03:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDB0DE69945B4E6B620EA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa Signing time: Thu 24 Apr 2025 11:53:25 +0000 ROA not before: Thu 24 Apr 2025 11:53:25 +0000 ROA not after: Wed 23 Jul 2025 11:53:25 +0000 asID: 19905 IP address blocks: 173.21.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:b0:de:69:94:5b:4e:6b:62:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:25 2025 GMT Not After : Jul 23 11:53:25 2025 GMT Subject: CN=bb312d32-5171-45a3-b689-5e11b8b3902b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:8a:11:84:92:7c:0f:fc:cb:c4:ab:6a:e5: f6:4e:74:df:61:ef:2c:a8:b8:0f:5d:77:32:56:b3: d0:91:b8:ac:ae:4b:4e:66:fe:c2:39:16:eb:c6:73: 5b:e0:99:b7:15:e3:19:dc:b4:f6:7e:ce:37:ec:29: 29:a7:57:6c:e8:b0:c0:cb:b4:63:4c:d4:c8:31:da: 8b:81:41:e8:57:59:a3:24:59:7c:79:40:21:73:8e: 43:5f:b1:ec:8c:14:4a:fb:d8:b9:b2:cf:dc:4b:43: 78:4e:2c:ca:6e:2d:96:41:79:80:ac:64:8e:c4:1d: 5a:be:1b:a6:5a:42:8b:9e:9d:98:63:c5:f1:a9:be: 64:2c:57:f0:a4:af:de:d6:30:22:6a:c1:47:a3:28: 1c:bc:a9:c8:5d:c5:16:9e:38:56:a4:f5:70:e5:88: 7f:32:ca:26:9b:75:4d:52:f7:d6:cc:10:d7:0d:29: 02:10:1d:d2:dc:78:20:04:92:ec:c7:77:77:b1:84: 14:ef:3e:2b:42:d0:1b:df:18:1a:75:01:90:d7:e0: f1:bf:ef:79:dc:28:df:78:b7:84:c8:65:68:5a:ea: dd:29:ea:6e:65:51:0f:96:06:f7:8f:d2:69:45:de: b2:d5:a9:1a:0c:0e:03:43:af:58:ec:3c:d5:22:c8: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:43:A3:8E:D0:65:6A:17:01:49:A9:E5:F4:84:45:BD:2B:EA:03:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5c:de:5b:0f:dd:d2:c0:55:05:29:94:95:75:19:1a:85:44: 58:98:4e:c9:55:e7:e5:93:09:2d:f6:49:b9:3f:74:32:a4:32: 63:70:25:b2:60:d1:dd:65:d4:dd:82:e2:24:57:cd:f1:6e:14: b8:35:dd:99:8b:ee:84:24:c7:c0:90:b7:c6:8e:7a:d9:11:ca: 9e:9d:e5:a3:85:fe:31:f0:84:97:fc:22:4c:e3:b3:a1:8e:86: 0b:e8:22:fd:6e:83:4b:a1:b6:e7:3f:82:08:90:01:c7:38:d4: 07:e6:5e:7a:2b:ec:d8:8e:cf:06:d7:b4:13:df:58:76:a7:8d: a2:8a:f8:cf:5e:6c:71:e4:f5:0e:a2:78:57:77:33:b5:2b:19: 49:11:dc:5b:3b:0b:5f:f3:ca:31:31:14:dd:bc:93:c1:3f:84: c2:ad:64:13:c0:07:1c:d4:a9:11:7b:e1:d3:72:f5:f7:69:a1: eb:bf:70:7b:28:3b:22:05:45:bc:ff:13:22:6a:de:07:ea:7c: 5c:7d:3c:f8:2b:cb:79:a4:b9:ca:73:21:1f:f4:03:bf:ca:00: f8:ec:28:f3:80:be:e7:88:cc:6c:23:a0:4c:dd:e4:30:fb:f1: f5:0c:0c:92:60:43:17:3e:e2:a4:50:e5:a7:95:88:9b:ab:36: 5c:57:9c:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzbDeaZRbTmtiDqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTMyNVoXDTI1MDcyMzExNTMyNVowLzEtMCsGA1UEAxMk YmIzMTJkMzItNTE3MS00NWEzLWI2ODktNWUxMWI4YjM5MDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ+KEYSSfA/8y8SrauX2TnTfYe8sqLgPXXcy VrPQkbisrktOZv7CORbrxnNb4Jm3FeMZ3LT2fs437Ckpp1ds6LDAy7RjTNTIMdqL gUHoV1mjJFl8eUAhc45DX7HsjBRK+9i5ss/cS0N4TizKbi2WQXmArGSOxB1avhum WkKLnp2YY8Xxqb5kLFfwpK/e1jAiasFHoygcvKnIXcUWnjhWpPVw5Yh/Msomm3VN UvfWzBDXDSkCEB3S3HggBJLsx3d3sYQU7z4rQtAb3xgadQGQ1+Dxv+953CjfeLeE yGVoWurdKepuZVEPlgb3j9JpRd6y1akaDA4DQ69Y7DzVIsii9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxDo47QZWoXAUmp5fSERb0r6gNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmNhODhkYzYtODBhOC0z OGNlLTg5OWEtNzFmY2ViM2IxNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJc3lsP3dLAVQUplJV1GRqFRFiYTslV5+WTCS32Sbk/dDKkMmNwJbJg 0d1l1N2C4iRXzfFuFLg13ZmL7oQkx8CQt8aOetkRyp6d5aOF/jHwhJf8Ikzjs6GO hgvoIv1ug0uhtuc/ggiQAcc41AfmXnor7NiOzwbXtBPfWHanjaKK+M9ebHHk9Q6i eFd3M7UrGUkR3Fs7C1/zyjExFN28k8E/hMKtZBPABxzUqRF74dNy9fdpoeu/cHso OyIFRbz/EyJq3gfqfFx9PPgry3mkucpzIR/0A7/KAPjsKPOAvueIzGwjoEzd5DD7 8fUMDJJgQxc+4qRQ5aeViJurNlxXnMQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:53:21 2025 by rpki-client