$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa File: 43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa (raw, json) Hash identifier: v/MCFY1NNLlRsJLVrZIi7dV01qc599dQkW1nAsmyZTs= Subject key identifier: 90:4A:3A:B8:FC:5E:49:5E:2A:BE:35:6D:56:EF:8D:22:37:4C:AB:B1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C48F2A5CF4700EA09D7D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.31.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:8f:2a:5c:f4:70:0e:a0:9d:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=9ce73127-c3a0-4727-ac57-46e8ae59759b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:18:53:d5:51:49:52:0f:fe:f0:08:28:fd:37: 25:a9:d9:4d:9b:20:98:6c:56:7b:a0:42:0a:4e:35: 86:aa:62:9f:8f:3a:00:9d:b7:68:61:32:9b:2f:54: 81:c0:7d:21:5f:9d:b6:a3:cd:c2:b8:ce:2e:3d:be: 63:b2:43:5e:a1:f0:91:cf:ce:93:6a:aa:51:36:b5: 43:ec:9a:88:a1:d7:a2:02:10:9c:fa:c2:21:e0:b7: ff:d4:15:88:21:7c:a0:99:f8:b5:32:9d:97:02:e4: 4e:72:73:e6:5d:42:6e:79:30:85:9e:4e:20:e7:b4: d2:bf:9a:18:fa:30:50:ae:12:d6:56:54:80:bb:ff: 81:00:c5:34:7c:67:c8:7f:e9:3b:2d:74:5e:18:8f: 95:0f:15:55:bb:b8:14:f1:b4:72:5f:6f:fc:7e:f9: 51:3e:fa:e0:2e:90:b5:1c:27:d6:18:ed:2a:b4:d1: e7:1c:47:03:7b:f1:fd:bc:f0:56:42:e8:a6:f4:0b: 70:84:37:78:d2:42:69:35:e7:5d:c3:92:2d:34:8b: 78:bd:32:bd:0d:ad:48:03:00:34:f1:87:7b:e6:3c: 91:8a:fd:7d:d0:14:47:0e:ec:09:30:ea:79:39:e5: c3:04:52:b1:ab:d8:41:aa:51:63:0d:e0:c1:81:12: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:3A:B8:FC:5E:49:5E:2A:BE:35:6D:56:EF:8D:22:37:4C:AB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d7:07:dc:e7:b3:d2:c7:ea:c5:70:e8:a5:16:5a:51:20:11: e7:f5:6e:a2:34:1a:b5:86:88:56:96:98:94:4a:6e:50:f0:c1: 81:1b:c7:fb:db:18:c7:78:91:0c:4d:af:36:84:75:80:f0:40: 59:3f:95:c4:d2:67:78:9b:58:b5:77:46:eb:fd:30:98:d9:6b: dc:78:61:3b:ee:da:f5:6a:07:4e:30:7f:05:89:d0:7c:91:a1: 49:23:97:08:4a:5b:71:30:b4:8e:60:ad:b0:e8:11:be:39:d5: 91:f5:8e:34:e1:aa:03:37:2c:43:5c:5d:ff:21:b7:45:ca:4b: f5:ed:91:d1:2c:61:03:c1:3a:2f:cd:a9:ac:bc:3a:e1:5b:51: 12:93:bc:27:24:fe:a2:44:d5:e5:84:d4:43:39:9b:ea:cf:e8: c0:ba:95:b9:8c:3f:b6:31:44:70:60:23:2e:90:52:8c:61:e0: 78:3e:3b:d7:f5:23:6e:22:0f:8b:95:90:c6:21:d9:9b:35:a1: a1:b4:e9:83:34:d4:a5:d5:fc:b0:bb:b2:7e:ec:56:4f:d4:6e: 17:ff:95:64:a5:5e:72:9d:76:86:50:c4:48:bc:55:05:8e:96: 79:6d:dc:b3:e6:26:07:84:56:9b:b2:28:3a:20:67:ed:c7:0e: 96:69:25:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxI8qXPRwDqCdfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk OWNlNzMxMjctYzNhMC00NzI3LWFjNTctNDZlOGFlNTk3NTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBhT1VFJUg/+8Ago/TclqdlNmyCYbFZ7oEIK TjWGqmKfjzoAnbdoYTKbL1SBwH0hX522o83CuM4uPb5jskNeofCRz86TaqpRNrVD 7JqIodeiAhCc+sIh4Lf/1BWIIXygmfi1Mp2XAuROcnPmXUJueTCFnk4g57TSv5oY +jBQrhLWVlSAu/+BAMU0fGfIf+k7LXReGI+VDxVVu7gU8bRyX2/8fvlRPvrgLpC1 HCfWGO0qtNHnHEcDe/H9vPBWQuim9AtwhDd40kJpNeddw5ItNIt4vTK9Da1IAwA0 8Yd75jyRiv190BRHDuwJMOp5OeXDBFKxq9hBqlFjDeDBgRJciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBKOrj8XkleKr41bVbvjSI3TKuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDNhMmQ0YjYtM2Y5ZC0z MGE0LWI5Y2QtZDQ0NDk2ZDI3OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPXB9zns9LH6sVw6KUWWlEgEef1bqI0GrWGiFaWmJRKblDwwYEbx/vb GMd4kQxNrzaEdYDwQFk/lcTSZ3ibWLV3Ruv9MJjZa9x4YTvu2vVqB04wfwWJ0HyR oUkjlwhKW3EwtI5grbDoEb451ZH1jjThqgM3LENcXf8ht0XKS/XtkdEsYQPBOi/N qay8OuFbURKTvCck/qJE1eWE1EM5m+rP6MC6lbmMP7YxRHBgIy6QUoxh4Hg+O9f1 I24iD4uVkMYh2Zs1oaG06YM01KXV/LC7sn7sVk/Ubhf/lWSlXnKddoZQxEi8VQWO lnlt3LPmJgeEVpuyKDogZ+3HDpZpJSA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:37:43 2025 by rpki-client