$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f1a1ebc-8705-38fc-bf8b-744966ee89dc.roa File: 0f1a1ebc-8705-38fc-bf8b-744966ee89dc.roa (raw, json) Hash identifier: elr5aXi2y7ck6GovKZIH9d8GJ1BzdkI5VFv9ZZstklA= Subject key identifier: B7:D8:A1:D9:1F:DA:73:EE:88:06:E5:FA:C6:68:4E:5F:E8:42:04:44 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1210B445BF5106F60580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f1a1ebc-8705-38fc-bf8b-744966ee89dc.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:12:10:b4:45:bf:51:06:f6:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1359d13b-24bc-40b6-906d-f0632d6014fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:97:96:76:1d:44:14:1f:96:22:c5:51:4c: 3f:f4:0e:99:42:0a:56:e5:84:f4:7f:e3:a5:c3:ab: 99:be:c1:ff:3c:57:93:ba:c8:c4:ac:52:75:b5:f6: d0:76:71:f8:c1:93:05:b5:e7:f1:44:29:00:8d:87: d9:54:cb:d7:e8:ed:a7:7b:3a:4b:17:91:43:c3:72: e3:21:3d:04:03:46:a1:27:1f:28:45:2f:33:53:cd: d5:57:36:c9:a5:d1:81:a2:6e:5b:62:23:0b:44:09: 58:4e:0a:5b:71:1a:5a:28:e4:5b:9b:93:25:b8:4d: 3a:1d:12:c2:08:ce:85:22:3c:20:39:41:93:3c:5a: e7:73:84:85:08:f1:90:12:e1:e0:85:23:c3:c0:a4: 90:cf:a8:11:79:b2:7f:4f:82:4b:0d:9d:a8:0a:97: cd:b2:28:71:21:47:62:29:50:dd:f6:0c:1c:5e:b8: d2:1c:0b:6d:59:b9:66:ed:b6:c7:08:6e:88:1d:39: d6:84:e1:09:c0:ed:f5:0b:24:7a:e8:b1:2f:89:70: 1a:5e:b3:5c:a1:1d:2b:7f:a1:bb:7f:94:9b:67:39: d8:b6:46:40:7a:8d:2c:11:97:98:7e:b8:06:49:dd: a8:1f:f3:ab:dd:db:c6:55:da:43:cd:c8:a8:48:91: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D8:A1:D9:1F:DA:73:EE:88:06:E5:FA:C6:68:4E:5F:E8:42:04:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f1a1ebc-8705-38fc-bf8b-744966ee89dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d7:73:84:94:bd:56:2d:c7:92:80:2f:63:01:e9:72:86:3f: a2:6c:96:88:79:e2:23:80:5e:26:e0:87:e4:bb:ee:f2:19:20: 6e:97:9d:97:ff:cf:f5:04:6c:fb:a2:b1:97:3e:c2:e0:92:61: 8c:3d:4b:b3:71:85:a3:ec:40:35:e4:2b:fb:0d:9a:ed:40:01: cc:35:3b:9f:8e:d1:a0:ec:a5:4c:c7:2d:4d:34:21:6a:10:e9: a4:53:64:d2:cd:35:7d:c0:7a:cc:2f:6a:ef:58:d6:eb:63:f1: 4d:05:a9:77:21:85:d7:43:c9:f7:6a:06:31:26:f8:78:06:ee: 38:75:6e:bb:d4:b7:f0:61:ea:ea:b5:0b:97:6d:eb:b0:b2:77: 8c:89:4c:a4:8b:1a:d0:d0:41:39:13:a3:1b:53:24:ff:34:67: 6a:0b:01:cb:21:ed:d7:3c:f8:1e:ec:d7:7b:48:5b:60:8a:49: 47:5c:f0:5c:3e:5c:f8:4d:75:5c:2d:03:07:cd:bf:16:4e:95: bd:26:a7:0d:86:ac:62:8b:cd:30:11:3e:82:25:2c:49:84:77: e7:b6:dd:9b:b5:d7:fc:67:ee:de:9b:26:e9:7e:e4:01:28:58: 2a:81:78:e1:f8:cd:d3:8b:a4:db:70:9e:37:48:1b:03:85:a4: e8:7f:8e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhIQtEW/UQb2BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTM1OWQxM2ItMjRiYy00MGI2LTkwNmQtZjA2MzJkNjAxNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYSXlnYdRBQfliLFUUw/9A6ZQgpW5YT0f+Ol w6uZvsH/PFeTusjErFJ1tfbQdnH4wZMFtefxRCkAjYfZVMvX6O2nezpLF5FDw3Lj IT0EA0ahJx8oRS8zU83VVzbJpdGBom5bYiMLRAlYTgpbcRpaKORbm5MluE06HRLC CM6FIjwgOUGTPFrnc4SFCPGQEuHghSPDwKSQz6gRebJ/T4JLDZ2oCpfNsihxIUdi KVDd9gwcXrjSHAttWblm7bbHCG6IHTnWhOEJwO31CyR66LEviXAaXrNcoR0rf6G7 f5SbZznYtkZAeo0sEZeYfrgGSd2oH/Or3dvGVdpDzcioSJElAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfYodkf2nPuiAbl+sZoTl/oQgREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGYxYTFlYmMtODcwNS0z OGZjLWJmOGItNzQ0OTY2ZWU4OWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXXc4SUvVYtx5KAL2MB6XKGP6Jsloh54iOAXibgh+S77vIZIG6XnZf/ z/UEbPuisZc+wuCSYYw9S7NxhaPsQDXkK/sNmu1AAcw1O5+O0aDspUzHLU00IWoQ 6aRTZNLNNX3Aeswvau9Y1utj8U0FqXchhddDyfdqBjEm+HgG7jh1brvUt/Bh6uq1 C5dt67Cyd4yJTKSLGtDQQTkToxtTJP80Z2oLAcsh7dc8+B7s13tIW2CKSUdc8Fw+ XPhNdVwtAwfNvxZOlb0mpw2GrGKLzTARPoIlLEmEd+e23Zu11/xn7t6bJul+5AEo WCqBeOH4zdOLpNtwnjdIGwOFpOh/jq8= -----END CERTIFICATE-----Generated at Sun Apr 27 03:01:19 2025 by rpki-client