$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a77a3a4-187f-3516-b157-98be2c04b6f9.roa File: 3a77a3a4-187f-3516-b157-98be2c04b6f9.roa (raw, json) Hash identifier: W9aAfX5ghhONvpsNzZTNsubeUfYv/eEdeYx3uKTfVVA= Subject key identifier: 32:20:61:A7:08:3D:7F:FE:4A:99:FC:C7:91:5F:70:81:48:65:D5:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA21084808B07A0B812F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a77a3a4-187f-3516-b157-98be2c04b6f9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:21:08:48:08:b0:7a:0b:81:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8f177247-0139-4559-8842-9087a17e8fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:c2:62:6c:fc:12:0e:2c:9f:50:d0:65:18: b0:40:ed:f3:14:74:a4:bc:ff:42:b5:1b:69:9b:d9: 5f:7b:1d:0e:50:1d:8e:d3:06:fe:c3:9f:89:21:d7: e3:22:89:3f:33:de:c0:99:8b:1c:c0:61:a9:2e:3c: 67:a1:a4:c0:9c:83:9e:b6:77:94:ba:7e:88:5b:7b: 71:c5:a8:70:6a:44:54:11:6c:a6:b7:89:cc:c7:4d: 5b:dd:c9:57:67:79:0b:df:4b:6c:69:25:ad:54:af: 64:20:f1:f0:ce:f0:46:42:2f:f2:0f:52:c1:77:83: 8a:00:db:ee:e9:87:e3:1c:75:18:c5:54:6c:dd:47: 26:0f:e4:0b:dc:85:61:1e:2b:1c:27:10:06:b6:12: ea:04:e4:1e:26:d8:4e:80:9f:92:a3:71:f7:61:a2: 4e:06:c9:54:8f:56:d5:93:2f:99:24:fa:1b:f7:d5: a2:d3:44:ae:64:98:92:7e:c3:0a:28:6f:14:d4:56: a0:f1:de:a6:63:12:97:e7:82:87:dc:44:f5:62:16: 89:47:05:d4:fd:ab:68:b9:ef:ae:e8:86:82:21:d1: d5:0e:1c:d4:3a:69:27:7f:38:64:b5:dd:08:52:3b: 79:73:f0:5f:8d:0e:10:4a:49:83:c2:c9:a6:4c:05: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:20:61:A7:08:3D:7F:FE:4A:99:FC:C7:91:5F:70:81:48:65:D5:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a77a3a4-187f-3516-b157-98be2c04b6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:aa:05:19:e7:7a:74:f5:4b:60:dd:64:7d:38:79:7d:16:2a: de:5c:13:c5:70:01:d6:6e:59:e5:b9:d9:bb:b5:71:e0:52:92: 44:2d:d5:b5:79:d5:ab:1b:06:2d:1a:0e:07:91:bc:0a:6a:2d: 5f:ef:fa:58:94:ce:92:b4:97:5f:75:69:f8:b9:83:a3:80:11: 45:ba:ce:f2:88:4a:2a:ad:e9:85:db:80:2f:32:ab:b4:5c:52: 69:4b:63:69:f4:52:99:96:78:7b:8a:e1:c2:89:b3:34:c9:6d: 25:a8:fe:19:7d:18:9f:a4:52:9b:63:40:f5:87:a9:1f:ed:ac: 44:a4:8d:01:8b:12:a3:dc:72:c5:7c:1d:5e:df:72:b8:42:c8: fd:19:06:fb:54:dd:93:b6:33:62:dc:ef:c3:49:c2:d4:69:fd: dc:69:06:77:7d:a2:09:1e:9f:2e:ea:a3:7a:ad:a4:c5:d9:4a: 28:93:30:1c:34:2c:60:7f:4c:40:a4:4c:6b:0c:81:fa:e6:ed: ae:1e:c3:b9:f5:71:92:77:bd:6a:81:34:57:ca:d6:7b:7e:fb: b8:02:1a:89:0c:20:b7:2b:14:7a:48:20:da:26:0b:6d:27:78: ff:13:f1:81:a6:80:dd:b9:cf:e0:9b:df:2e:95:14:d7:d8:96: a0:86:84:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuiEISAiweguBLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGYxNzcyNDctMDEzOS00NTU5LTg4NDItOTA4N2ExN2U4ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJbCYmz8Eg4sn1DQZRiwQO3zFHSkvP9CtRtp m9lfex0OUB2O0wb+w5+JIdfjIok/M97AmYscwGGpLjxnoaTAnIOetneUun6IW3tx xahwakRUEWymt4nMx01b3clXZ3kL30tsaSWtVK9kIPHwzvBGQi/yD1LBd4OKANvu 6YfjHHUYxVRs3UcmD+QL3IVhHiscJxAGthLqBOQeJthOgJ+So3H3YaJOBslUj1bV ky+ZJPob99Wi00SuZJiSfsMKKG8U1Fag8d6mYxKX54KH3ET1YhaJRwXU/atoue+u 6IaCIdHVDhzUOmknfzhktd0IUjt5c/BfjQ4QSkmDwsmmTAVc+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIgYacIPX/+Spn8x5FfcIFIZdUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2E3N2EzYTQtMTg3Zi0z NTE2LWIxNTctOThiZTJjMDRiNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6qBRnnenT1S2DdZH04eX0WKt5cE8VwAdZuWeW52bu1ceBSkkQt1bV5 1asbBi0aDgeRvApqLV/v+liUzpK0l191afi5g6OAEUW6zvKISiqt6YXbgC8yq7Rc UmlLY2n0UpmWeHuK4cKJszTJbSWo/hl9GJ+kUptjQPWHqR/trESkjQGLEqPccsV8 HV7fcrhCyP0ZBvtU3ZO2M2Lc78NJwtRp/dxpBnd9ogkeny7qo3qtpMXZSiiTMBw0 LGB/TECkTGsMgfrm7a4ew7n1cZJ3vWqBNFfK1nt++7gCGokMILcrFHpIINomC20n eP8T8YGmgN25z+Cb3y6VFNfYlqCGhOc= -----END CERTIFICATE-----Generated at Sun Apr 27 12:26:26 2025 by rpki-client