$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31026c0a-5194-364a-b92f-4a82d15ec548.roa File: 31026c0a-5194-364a-b92f-4a82d15ec548.roa (raw, json) Hash identifier: /VbmLZfZu++l055wrtJ926yXW5vx9D4RUS9o5vpPCgU= Subject key identifier: 21:87:78:C5:F9:B7:A0:9A:E4:2F:DE:B6:53:0F:3E:22:1A:7D:F8:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF47D87AB67506A5FA98A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31026c0a-5194-364a-b92f-4a82d15ec548.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:47:d8:7a:b6:75:06:a5:fa:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=e19bd2ce-a6f8-4510-9da9-ed8716c42c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:ff:f0:3c:2e:02:c2:28:95:aa:00:7a:f7: 2c:35:c9:5b:51:51:fb:7d:c4:a5:a3:77:0d:f8:61: e6:33:4d:5f:95:c6:c7:59:46:dc:b9:20:ca:78:1e: c4:c3:f6:7e:3e:96:3b:d1:21:d0:8c:2a:7b:56:56: b6:9c:ab:ad:93:6c:69:b7:47:5e:5b:93:a4:52:f9: fc:3f:e4:ec:b7:49:9e:94:cb:13:1b:7b:dc:54:a0: 22:d3:62:b2:50:27:17:a7:17:90:1f:e7:22:f6:15: c7:f0:5e:4c:d7:81:48:d8:98:50:a2:1c:a8:fc:bf: 12:e1:87:ff:78:ed:d3:ef:36:d3:6b:37:b4:55:cc: af:fa:d7:83:08:d9:49:bb:a2:af:39:54:7c:83:fa: db:40:0e:6c:62:14:c9:c7:1e:ec:c5:c9:12:d4:47: a6:06:3c:0f:b8:6b:65:ee:05:0a:79:ba:15:fb:f4: a8:b2:60:92:27:af:d7:7f:a4:7c:ac:0f:35:ce:ee: b7:71:f0:9d:2e:8e:2d:f1:da:32:b6:29:ba:3a:da: 58:28:e3:c4:36:45:96:a5:ae:84:73:83:09:e1:c0: 67:0d:11:ae:ef:78:c4:a1:87:ef:df:c0:8a:56:96: 5e:a2:c1:f0:e4:31:53:ea:8d:c4:28:9f:26:24:d1: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:78:C5:F9:B7:A0:9A:E4:2F:DE:B6:53:0F:3E:22:1A:7D:F8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31026c0a-5194-364a-b92f-4a82d15ec548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bf:fd:2d:8f:0b:8b:24:22:14:28:d0:da:b2:17:44:de:e2: 84:ca:76:3c:0a:40:2b:05:16:34:5a:40:65:71:89:8a:9f:06: 37:b3:ac:b6:9b:4c:43:c1:b8:32:98:2a:20:ac:5a:d4:48:99: c5:26:d0:fa:5d:82:d4:28:d8:23:ee:41:88:38:61:15:02:3b: 9e:8d:9f:fd:ee:f3:24:8c:82:18:a5:a8:74:f7:a7:da:18:00: 9e:b6:aa:4d:29:9c:1f:35:d7:15:2c:9d:44:8f:8b:30:8c:1d: 4e:88:38:0d:5b:b0:30:93:dd:39:03:5d:f7:65:b6:24:fe:d3: d3:8e:b3:18:4d:7d:7e:8c:99:ee:2c:7f:2c:a4:d3:66:f7:ec: 22:a0:ed:3b:39:c7:c9:07:50:30:fb:75:c4:6b:dd:b9:c7:33: 23:5f:44:bf:f3:6c:d4:d9:3a:98:63:e1:6a:3f:14:15:dd:d0: 17:45:04:da:bc:5e:73:23:62:69:88:92:d4:c9:86:d6:10:df: 29:fd:25:c1:e9:3c:31:49:f8:f6:6f:6a:19:89:0f:f5:f6:e2: bf:a4:84:69:f0:25:3d:c1:bb:7b:6a:25:c1:d3:5c:a3:8d:50: ff:65:ea:01:94:61:5a:10:0a:5f:f1:a2:a0:76:d0:70:fc:92: 0a:24:62:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70fYerZ1BqX6mKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTE5YmQyY2UtYTZmOC00NTEwLTlkYTktZWQ4NzE2YzQyYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLv/8DwuAsIolaoAevcsNclbUVH7fcSlo3cN +GHmM01flcbHWUbcuSDKeB7Ew/Z+PpY70SHQjCp7Vla2nKutk2xpt0deW5OkUvn8 P+Tst0melMsTG3vcVKAi02KyUCcXpxeQH+ci9hXH8F5M14FI2JhQohyo/L8S4Yf/ eO3T7zbTaze0Vcyv+teDCNlJu6KvOVR8g/rbQA5sYhTJxx7sxckS1EemBjwPuGtl 7gUKeboV+/SosmCSJ6/Xf6R8rA81zu63cfCdLo4t8doytim6OtpYKOPENkWWpa6E c4MJ4cBnDRGu73jEoYfv38CKVpZeosHw5DFT6o3EKJ8mJNHZ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGHeMX5t6Ca5C/etlMPPiIaffjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzEwMjZjMGEtNTE5NC0z NjRhLWI5MmYtNGE4MmQxNWVjNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW//S2PC4skIhQo0NqyF0Te4oTKdjwKQCsFFjRaQGVxiYqfBjezrLab TEPBuDKYKiCsWtRImcUm0PpdgtQo2CPuQYg4YRUCO56Nn/3u8ySMghilqHT3p9oY AJ62qk0pnB811xUsnUSPizCMHU6IOA1bsDCT3TkDXfdltiT+09OOsxhNfX6Mme4s fyyk02b37CKg7Ts5x8kHUDD7dcRr3bnHMyNfRL/zbNTZOphj4Wo/FBXd0BdFBNq8 XnMjYmmIktTJhtYQ3yn9JcHpPDFJ+PZvahmJD/X24r+khGnwJT3Bu3tqJcHTXKON UP9l6gGUYVoQCl/xoqB20HD8kgokYps= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:55 2025 by rpki-client