$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/13b182f4-3c0e-32f4-b8f5-691ff79e6ffc.roa File: 13b182f4-3c0e-32f4-b8f5-691ff79e6ffc.roa (raw, json) Hash identifier: 0LVO8romCmQ+t3P5GJYWX3kTxT0hErWlEXOTHsdYmcY= Subject key identifier: 3E:4D:A3:91:9A:55:A2:01:29:E9:70:88:63:21:86:62:48:F5:C2:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2BBC96B8B90E08547D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/13b182f4-3c0e-32f4-b8f5-691ff79e6ffc.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2b:bc:96:b8:b9:0e:08:54:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6ea2a1c9-dcd2-4f3c-b305-9fe0b2829785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:db:74:3d:69:28:41:d2:de:6b:19:39:8a: 9c:af:35:77:45:31:e6:0f:4c:ff:18:de:b5:a0:0c: bf:84:b5:18:14:a1:bf:d7:33:ec:8a:de:9c:97:44: 4f:52:96:fd:89:06:5d:33:6e:ca:b2:7e:4b:a8:69: 58:3c:1d:a1:5e:ca:cf:35:a4:39:f2:2a:ff:18:ff: bb:ac:db:23:42:6e:d6:71:fb:d1:fb:82:c7:f7:c2: 04:be:b3:d0:e0:f4:2f:a8:7c:77:00:f0:63:ea:b0: 6a:13:c6:5a:cd:69:af:f4:74:6b:e8:23:37:1c:8b: d5:0e:0a:6f:b5:a8:e0:55:c9:07:d9:0a:b0:7c:7b: 66:b6:ae:e2:55:d0:ae:f1:66:01:63:8d:ca:32:e1: a3:c2:82:1e:6d:22:3a:98:98:6b:34:cf:64:34:0c: d8:50:2d:df:da:26:4d:80:b5:f4:06:1e:3e:6b:1c: 1c:fa:82:81:9f:e9:84:a7:11:e0:f3:96:37:5a:0e: 39:47:93:1b:ce:da:6e:05:4e:61:f5:12:74:48:da: b7:93:f4:8f:d4:58:06:36:60:af:59:68:47:88:ac: a0:01:fa:b7:b2:35:7e:f4:32:02:f7:cd:4f:4d:44: 25:18:6e:e6:3d:17:29:db:0b:32:91:0a:25:a7:4d: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4D:A3:91:9A:55:A2:01:29:E9:70:88:63:21:86:62:48:F5:C2:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/13b182f4-3c0e-32f4-b8f5-691ff79e6ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d0:66:4c:71:de:33:fc:a6:08:32:2c:7a:e0:b3:cb:04:c7: b3:c0:cd:79:b0:05:5c:59:b2:12:5d:38:ee:eb:a7:38:e6:c1: 61:bb:83:34:ea:dc:22:d6:18:00:03:84:3b:bd:e6:b0:63:60: 91:9a:4d:e2:43:42:1c:da:2c:09:7b:7c:8d:e5:7b:c3:7c:78: 96:d4:27:09:7c:0d:8d:5a:90:56:be:70:7f:b9:7e:ec:ba:d8: 50:4d:76:70:4c:b6:91:5a:45:0c:e2:ed:30:2f:b1:d5:c7:fd: fc:c6:04:68:da:38:e6:99:e9:ea:f5:d9:12:bf:8b:c3:ac:5b: 23:3a:ca:04:e6:80:d3:a8:f4:6d:19:62:7a:59:79:2e:cc:a1: b1:c7:d7:36:94:5c:a6:94:9e:d0:f4:e8:21:be:ff:82:f0:c1: 30:93:f8:34:12:eb:b8:5f:e5:1b:45:8c:57:1b:7b:cd:86:90: 81:98:81:25:2e:81:8a:8b:e8:a3:df:ae:17:48:63:0b:f7:20: 0c:37:66:ff:6c:a9:fd:98:1b:43:90:83:8c:f3:dc:65:a2:d9: 7c:85:7e:b7:4e:66:74:d8:74:46:19:11:fb:f2:aa:c9:30:3c: 74:d7:77:ff:b7:61:bd:b3:88:e7:c1:2d:41:7b:f3:15:50:58: 62:7a:3d:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuiu8lri5DghUfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmVhMmExYzktZGNkMi00ZjNjLWIzMDUtOWZlMGIyODI5Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1PbdD1pKEHS3msZOYqcrzV3RTHmD0z/GN61 oAy/hLUYFKG/1zPsit6cl0RPUpb9iQZdM27Ksn5LqGlYPB2hXsrPNaQ58ir/GP+7 rNsjQm7WcfvR+4LH98IEvrPQ4PQvqHx3APBj6rBqE8ZazWmv9HRr6CM3HIvVDgpv tajgVckH2QqwfHtmtq7iVdCu8WYBY43KMuGjwoIebSI6mJhrNM9kNAzYUC3f2iZN gLX0Bh4+axwc+oKBn+mEpxHg85Y3Wg45R5MbztpuBU5h9RJ0SNq3k/SP1FgGNmCv WWhHiKygAfq3sjV+9DIC981PTUQlGG7mPRcp2wsykQolp03z3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5No5GaVaIBKelwiGMhhmJI9cJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTNiMTgyZjQtM2MwZS0z MmY0LWI4ZjUtNjkxZmY3OWU2ZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXQZkxx3jP8pggyLHrgs8sEx7PAzXmwBVxZshJdOO7rpzjmwWG7gzTq 3CLWGAADhDu95rBjYJGaTeJDQhzaLAl7fI3le8N8eJbUJwl8DY1akFa+cH+5fuy6 2FBNdnBMtpFaRQzi7TAvsdXH/fzGBGjaOOaZ6er12RK/i8OsWyM6ygTmgNOo9G0Z YnpZeS7MobHH1zaUXKaUntD06CG+/4LwwTCT+DQS67hf5RtFjFcbe82GkIGYgSUu gYqL6KPfrhdIYwv3IAw3Zv9sqf2YG0OQg4zz3GWi2XyFfrdOZnTYdEYZEfvyqskw PHTXd/+3Yb2ziOfBLUF78xVQWGJ6Pdk= -----END CERTIFICATE-----Generated at Sun Apr 27 08:18:36 2025 by rpki-client