$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9a58ca-719c-3b6a-8ae3-bc48cd31dcca.roa File: 0c9a58ca-719c-3b6a-8ae3-bc48cd31dcca.roa (raw, json) Hash identifier: XahFShua8ei+bJQqpDKfHx6jN/UYNMfAdTusR5Wokus= Subject key identifier: DD:FD:FA:6C:9B:90:76:36:20:4D:A9:24:B3:60:02:7D:AC:82:3E:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDF36B0E751AB75BA98F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9a58ca-719c-3b6a-8ae3-bc48cd31dcca.roa Signing time: Thu 24 Apr 2025 11:53:56 +0000 ROA not before: Thu 24 Apr 2025 11:53:56 +0000 ROA not after: Wed 23 Jul 2025 11:53:56 +0000 asID: 19905 IP address blocks: 173.31.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:f3:6b:0e:75:1a:b7:5b:a9:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:56 2025 GMT Not After : Jul 23 11:53:56 2025 GMT Subject: CN=2bbf1f9d-ab73-4c8d-b780-50db3b38ed72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:52:67:9f:33:c6:38:08:f4:00:9b:3f:08:6a: e2:8a:ee:c0:50:0c:dd:d3:83:c0:ba:89:b1:d4:27: 7e:f0:32:49:e0:c4:46:e3:40:39:3d:70:9a:77:26: ef:2c:95:11:36:8e:b3:2c:23:d5:93:9f:33:d9:12: 83:32:6b:6f:c5:8e:77:04:bf:4a:9d:a2:b3:a7:97: c3:c1:df:01:a3:11:0d:4e:fc:10:28:12:60:25:11: 02:1e:b7:58:e4:1b:2b:48:e7:68:11:2e:d9:11:75: b6:7e:cc:f8:48:fb:69:79:39:3d:9e:7b:d8:22:a1: 93:5d:bc:73:55:f6:91:a8:69:63:ba:47:98:f4:08: 33:36:b7:17:d4:fa:5c:cc:10:34:bf:57:1a:7a:a9: d7:c0:ce:aa:ff:75:2d:9a:cc:fb:6c:27:60:00:5c: 34:07:4e:c3:35:e5:78:bb:57:c7:9c:f5:44:7f:10: 39:b6:ed:0d:a1:e9:fa:1f:86:b3:29:0f:ad:93:0d: 7f:f3:11:72:a0:63:8f:f2:26:a0:22:3e:73:c1:63: 14:5a:7c:50:f5:65:30:86:64:39:43:d8:dc:9e:1f: 37:a4:fb:80:9b:e5:2c:cb:ac:29:f6:c4:d8:1e:4f: cb:3c:f1:11:2a:8b:9b:4b:fc:4e:c7:68:28:01:ae: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:FA:6C:9B:90:76:36:20:4D:A9:24:B3:60:02:7D:AC:82:3E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9a58ca-719c-3b6a-8ae3-bc48cd31dcca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:60:0a:67:9b:1c:3c:93:a1:9c:46:f0:d4:f0:52:69:08:95: 84:cb:8e:d1:a1:df:29:ae:13:bc:aa:40:cc:38:6d:6e:e7:3e: f6:cd:13:e9:cc:84:70:27:fd:87:74:42:74:86:71:53:f0:1b: f8:80:5d:16:6e:70:99:ba:4b:b5:76:b4:97:fa:81:1f:eb:2a: 64:24:20:dd:5f:c9:9b:82:ed:d5:b1:30:84:a6:78:a6:5b:47: 72:fc:14:e8:67:bd:ec:d3:e4:48:69:a0:72:56:5b:53:f6:84: 6e:23:f6:15:46:ed:2a:16:63:b6:c0:9d:12:f3:ed:ea:c6:22: 93:ea:19:48:b6:05:d9:5c:3c:09:7d:30:5d:35:15:84:72:0a: 63:71:66:36:1c:ed:2e:97:7f:17:75:c9:e1:72:2a:1f:d1:a7: 48:b8:b7:1e:a1:cb:40:5c:f5:a6:b7:bb:21:a3:89:31:9f:79: 96:53:19:77:17:c8:ff:9d:b1:9a:af:3b:e7:af:41:6a:99:18: 44:59:27:85:80:db:4f:d5:1e:6c:33:d1:2c:3e:df:7d:7a:a8: 7b:6c:5f:f8:5e:60:b6:82:ef:ff:93:c0:a5:eb:85:81:e9:da: 8a:d2:cc:bd:61:33:aa:f4:89:46:9e:88:61:74:b7:60:4b:2a: d1:a4:99:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzfNrDnUat1upj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTM1NloXDTI1MDcyMzExNTM1NlowLzEtMCsGA1UEAxMk MmJiZjFmOWQtYWI3My00YzhkLWI3ODAtNTBkYjNiMzhlZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVJnnzPGOAj0AJs/CGriiu7AUAzd04PAuomx 1Cd+8DJJ4MRG40A5PXCadybvLJURNo6zLCPVk58z2RKDMmtvxY53BL9KnaKzp5fD wd8BoxENTvwQKBJgJRECHrdY5BsrSOdoES7ZEXW2fsz4SPtpeTk9nnvYIqGTXbxz VfaRqGljukeY9AgzNrcX1PpczBA0v1caeqnXwM6q/3Utmsz7bCdgAFw0B07DNeV4 u1fHnPVEfxA5tu0Noen6H4azKQ+tkw1/8xFyoGOP8iagIj5zwWMUWnxQ9WUwhmQ5 Q9jcnh83pPuAm+Usy6wp9sTYHk/LPPERKoubS/xOx2goAa4T4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN39+mybkHY2IE2pJLNgAn2sgj5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGM5YTU4Y2EtNzE5Yy0z YjZhLThhZTMtYmM0OGNkMzFkY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFgCmebHDyToZxG8NTwUmkIlYTLjtGh3ymuE7yqQMw4bW7nPvbNE+nM hHAn/Yd0QnSGcVPwG/iAXRZucJm6S7V2tJf6gR/rKmQkIN1fyZuC7dWxMISmeKZb R3L8FOhnvezT5EhpoHJWW1P2hG4j9hVG7SoWY7bAnRLz7erGIpPqGUi2BdlcPAl9 MF01FYRyCmNxZjYc7S6Xfxd1yeFyKh/Rp0i4tx6hy0Bc9aa3uyGjiTGfeZZTGXcX yP+dsZqvO+evQWqZGERZJ4WA20/VHmwz0Sw+3316qHtsX/heYLaC7/+TwKXrhYHp 2orSzL1hM6r0iUaeiGF0t2BLKtGkme0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:41:20 2025 by rpki-client