$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa File: 23633882-4f4c-353c-88a8-3732f64f6b69.roa (raw, json) Hash identifier: AsSTBV1ClOeezhMlv3iwefQGY2FRb/OOQNfGEah8eLU= Subject key identifier: C3:DA:A0:37:0E:77:87:92:05:5A:38:96:4D:9B:FE:7F:50:A8:66:FC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA190946ED32515DC83E90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:19:09:46:ed:32:51:5d:c8:3e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b16bd1ab-9bdc-4f71-aad8-eeadae4a60a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a1:ff:a3:8d:80:22:c9:cc:72:30:79:59:50: d2:9e:81:3a:fb:2b:83:2c:1b:dc:6a:93:c1:d3:af: 79:2c:9f:e8:23:5a:e0:bd:d3:26:50:45:74:78:5f: 36:2f:fb:0a:eb:8d:cb:e9:48:e1:e4:18:e6:bd:c0: be:91:43:ea:ff:35:9d:f5:5b:89:57:2a:c8:d0:2b: 63:46:5d:81:a4:10:9b:e3:b2:de:0a:43:66:ae:d5: e5:cc:8b:ce:43:44:e3:c3:be:f6:94:8b:1b:b2:4f: 93:5e:8f:ca:63:23:32:df:2e:82:8a:17:10:91:28: f8:7e:23:36:f3:2b:71:0d:ba:12:b9:d5:67:8d:0a: ae:0b:3e:87:57:9a:fe:af:c4:4e:6d:04:09:50:5f: eb:25:a6:99:5c:ba:b0:79:b6:0e:30:b3:d5:3d:19: 9d:9d:bc:3a:9d:68:ae:75:ff:8d:ad:ae:07:47:19: f7:32:c7:61:aa:6e:9e:f2:be:ce:9f:b9:e1:df:7b: 12:ae:86:51:1b:8d:ec:c9:11:72:be:1b:2b:18:f2: 89:fc:83:61:d8:d9:94:1b:12:f5:7e:3e:85:08:eb: 8f:4d:4e:d6:77:fd:42:e9:bf:37:42:84:47:5c:f3: c3:25:8c:ba:ef:15:67:a7:e5:ea:5a:7b:02:ac:83: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DA:A0:37:0E:77:87:92:05:5A:38:96:4D:9B:FE:7F:50:A8:66:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:45:10:5a:2c:21:2e:cf:d2:89:2f:d5:6e:1e:51:c8:22:c4: d9:8d:c4:9d:49:3b:9b:c3:32:06:86:4b:e9:82:8e:53:c2:e8: 64:d4:df:e0:80:b8:7b:ee:8b:6c:dd:41:f1:2c:fd:45:56:03: 09:15:d3:e8:a4:64:d7:c4:33:c2:0a:41:c0:08:39:5b:7e:33: 5a:39:9e:12:08:dc:e5:f3:e4:18:ed:78:d7:5e:66:d4:92:95: 0d:6e:d4:5d:96:ff:e0:2b:ff:26:a6:9a:b1:29:b2:51:ea:3e: 06:b9:f2:b8:f2:33:c9:71:d0:60:44:35:f3:9e:b4:68:6b:50: 80:c2:5c:07:d8:4e:d1:6e:b8:80:04:be:6f:1a:c4:4e:f1:67: 15:e0:fe:a0:58:37:3c:1f:58:66:31:5a:4a:88:11:ba:fe:d6: 82:75:f7:aa:1a:ae:8a:65:74:2b:bb:8a:3a:72:9c:2e:11:43: 34:06:61:c5:d0:05:47:49:bc:b1:c9:a4:46:04:69:f2:21:51: 2e:29:d7:7d:39:0a:b2:c7:56:b0:76:0c:7a:a4:a7:0b:2e:2b: e3:57:86:67:65:91:11:a7:b6:46:86:95:b6:b1:40:c9:50:8c: 75:f3:2d:be:6f:94:4c:45:a2:df:6a:a9:b1:b6:11:16:34:18: 21:fe:53:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhkJRu0yUV3IPpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjE2YmQxYWItOWJkYy00ZjcxLWFhZDgtZWVhZGFlNGE2MGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6H/o42AIsnMcjB5WVDSnoE6+yuDLBvcapPB 0695LJ/oI1rgvdMmUEV0eF82L/sK643L6Ujh5BjmvcC+kUPq/zWd9VuJVyrI0Ctj Rl2BpBCb47LeCkNmrtXlzIvOQ0Tjw772lIsbsk+TXo/KYyMy3y6CihcQkSj4fiM2 8ytxDboSudVnjQquCz6HV5r+r8RObQQJUF/rJaaZXLqwebYOMLPVPRmdnbw6nWiu df+Nra4HRxn3Msdhqm6e8r7On7nh33sSroZRG43syRFyvhsrGPKJ/INh2NmUGxL1 fj6FCOuPTU7Wd/1C6b83QoRHXPPDJYy67xVnp+XqWnsCrIP8TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPaoDcOd4eSBVo4lk2b/n9QqGb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM2MzM4ODItNGY0Yy0z NTNjLTg4YTgtMzczMmY2NGY2YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJFEFosIS7P0okv1W4eUcgixNmNxJ1JO5vDMgaGS+mCjlPC6GTU3+CA uHvui2zdQfEs/UVWAwkV0+ikZNfEM8IKQcAIOVt+M1o5nhII3OXz5BjteNdeZtSS lQ1u1F2W/+Ar/yammrEpslHqPga58rjyM8lx0GBENfOetGhrUIDCXAfYTtFuuIAE vm8axE7xZxXg/qBYNzwfWGYxWkqIEbr+1oJ196oaropldCu7ijpynC4RQzQGYcXQ BUdJvLHJpEYEafIhUS4p1305CrLHVrB2DHqkpwsuK+NXhmdlkRGntkaGlbaxQMlQ jHXzLb5vlExFot9qqbG2ERY0GCH+U0A= -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:26 2025 by rpki-client