$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa File: 09457e15-48da-3306-8f1f-fe9e2da0fa29.roa (raw, json) Hash identifier: sNHkvNawamJsDTWAf5vJa0cn5uyotibDfcd8vlS5d44= Subject key identifier: 68:0C:B9:09:23:56:B6:89:76:6D:71:42:B5:05:9E:DF:95:D8:62:49 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3703CDE99C8A402E23C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:37:03:cd:e9:9c:8a:40:2e:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8a0feae2-ffad-4db8-84e8-6c91a90028c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e3:8f:9b:2a:87:69:6c:d6:e3:fd:a2:b2:b6: 7b:0b:24:50:ac:49:e3:69:e5:45:74:66:71:c9:91: 55:aa:78:bf:b4:3b:60:a1:4b:ae:36:9d:20:ee:96: 33:5c:c8:a7:9e:c7:eb:ce:bb:5a:90:7b:d0:2c:6e: 42:8e:41:5b:d8:c1:b9:a4:4e:1e:d8:62:4d:b9:8d: b9:c0:04:8a:bd:96:68:00:a1:f3:46:39:3e:20:5d: d3:8d:9d:d3:07:b0:0c:33:ef:37:06:11:ab:fe:30: da:15:80:9d:a4:85:99:17:15:e9:07:b4:39:25:cb: f1:a4:e8:5b:87:8b:46:e0:19:3a:3b:ab:94:90:92: 5f:7b:02:15:be:68:6e:ad:01:85:7b:2b:93:b5:5e: 87:ad:14:a6:ee:77:30:46:37:b6:ba:d9:e2:2c:e9: c5:cb:c8:47:84:b4:d8:d0:0b:68:d1:1e:92:06:71: ea:e5:80:c2:7d:26:53:19:29:85:92:eb:c2:74:89: ee:88:ae:0a:73:93:f9:e3:7b:67:ef:b1:18:18:07: ab:03:fc:97:97:cd:2b:74:b6:4b:89:cf:7a:34:6e: b3:47:e9:16:dd:d6:e9:0d:90:38:5c:c7:86:d8:71: 45:76:ba:96:f0:26:02:bf:54:36:3e:6e:bb:4a:81: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:B9:09:23:56:B6:89:76:6D:71:42:B5:05:9E:DF:95:D8:62:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a3:1a:78:1f:7d:76:80:da:ba:f2:9f:a2:fc:a3:87:44:36: 0d:da:1a:3e:cb:f0:e8:7e:ba:1b:ec:96:14:53:96:b4:ca:c8: ad:a1:f5:f8:76:9b:2e:38:84:80:9b:ce:d3:9c:ac:88:46:d4: 82:de:3b:d6:04:43:3b:60:1a:b6:78:89:7a:52:0a:d7:66:a9: a1:90:fe:67:d5:fe:2f:8f:4d:fd:6f:34:8e:23:bc:b1:68:90: 5c:ed:3a:04:db:8a:33:14:07:82:a6:0b:16:1e:9d:85:d5:72: 55:c3:a2:2b:ab:de:90:21:15:99:9a:73:c6:4f:1c:a4:15:7a: 1a:d5:f3:d5:46:77:0c:f3:15:c8:9b:2d:0e:1f:88:3e:99:de: fe:97:8d:8e:09:88:05:f3:b1:b7:c7:65:27:fc:99:ed:bc:eb: 8b:02:34:12:fc:50:83:4f:28:01:3d:42:4f:fd:a3:9f:68:c2: c6:f5:42:82:49:49:ca:a1:2d:1a:02:f4:f8:04:f9:5d:a8:96: 63:03:5c:0b:b0:67:90:8b:ff:fa:db:37:e9:4d:01:7b:f9:2c: 8a:09:76:2e:3a:07:1c:27:0a:e9:d7:d3:2c:9f:f8:88:94:67: 58:0f:01:80:a9:bc:8e:c2:ee:a4:87:da:97:32:68:b7:cd:7f: 88:a9:64:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujcDzemcikAuI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGEwZmVhZTItZmZhZC00ZGI4LTg0ZTgtNmM5MWE5MDAyOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eOPmyqHaWzW4/2isrZ7CyRQrEnjaeVFdGZx yZFVqni/tDtgoUuuNp0g7pYzXMinnsfrzrtakHvQLG5CjkFb2MG5pE4e2GJNuY25 wASKvZZoAKHzRjk+IF3TjZ3TB7AMM+83BhGr/jDaFYCdpIWZFxXpB7Q5JcvxpOhb h4tG4Bk6O6uUkJJfewIVvmhurQGFeyuTtV6HrRSm7ncwRje2utniLOnFy8hHhLTY 0Ato0R6SBnHq5YDCfSZTGSmFkuvCdInuiK4Kc5P543tn77EYGAerA/yXl80rdLZL ic96NG6zR+kW3dbpDZA4XMeG2HFFdrqW8CYCv1Q2Pm67SoFwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgMuQkjVraJdm1xQrUFnt+V2GJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDk0NTdlMTUtNDhkYS0z MzA2LThmMWYtZmU5ZTJkYTBmYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGjGngffXaA2rryn6L8o4dENg3aGj7L8Oh+uhvslhRTlrTKyK2h9fh2 my44hICbztOcrIhG1ILeO9YEQztgGrZ4iXpSCtdmqaGQ/mfV/i+PTf1vNI4jvLFo kFztOgTbijMUB4KmCxYenYXVclXDoiur3pAhFZmac8ZPHKQVehrV89VGdwzzFcib LQ4fiD6Z3v6XjY4JiAXzsbfHZSf8me2864sCNBL8UINPKAE9Qk/9o59owsb1QoJJ ScqhLRoC9PgE+V2olmMDXAuwZ5CL//rbN+lNAXv5LIoJdi46BxwnCunX0yyf+IiU Z1gPAYCpvI7C7qSH2pcyaLfNf4ipZP0= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:08 2025 by rpki-client