$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ecf0257-2f8e-3d6a-83ae-2c7dd90637e3.roa File: 4ecf0257-2f8e-3d6a-83ae-2c7dd90637e3.roa (raw, json) Hash identifier: MABfEDqlPCUYJSrCvcb13BLZvUOby+oPv2N9JWNWvJc= Subject key identifier: DC:DC:34:12:16:4A:CC:E9:67:EA:33:2B:F2:76:35:F6:BD:92:21:CE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B18FFDFEC074BF9875F0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ecf0257-2f8e-3d6a-83ae-2c7dd90637e3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.31.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b1:8f:fd:fe:c0:74:bf:98:75:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0e0a8f29-0b5a-41cf-8413-f8a35148ce1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:0b:03:8a:b8:bc:dd:53:80:c0:28:a4:bc: 07:80:88:71:65:86:4e:6e:38:ca:14:9c:34:30:e6: 06:be:b9:c2:72:c0:d1:19:27:66:9d:72:9c:81:17: bb:c0:12:8b:cb:c2:75:c6:a3:2d:29:ae:65:83:87: c5:45:c2:a9:13:87:1c:fd:f9:9d:36:a1:85:42:09: a1:1f:8f:38:5b:05:53:6b:ff:43:ec:c9:9d:38:d0: 91:df:2c:21:13:0a:aa:91:25:69:cf:95:54:c0:58: b5:99:d4:18:0b:40:05:ff:1d:b1:0d:77:86:6a:f3: 3d:94:a9:30:f0:09:de:1d:f4:1c:35:df:2c:ec:c3: 99:09:8d:25:eb:c3:94:28:b3:07:59:9e:60:a7:46: bc:2e:e5:46:90:6f:44:2a:de:7c:94:fe:8d:72:85: 8e:02:45:6f:71:28:a3:ac:85:c3:72:52:ae:41:a6: 9a:d2:92:83:f6:a5:f8:80:76:f3:be:a8:ee:f5:08: 35:94:e6:89:1e:52:51:2a:30:d7:87:9e:ba:d9:f6: 97:c1:d3:ed:f1:fc:b5:96:b4:69:3f:1d:f5:16:f7: 10:d4:f3:09:d7:5c:cf:6d:69:1a:05:fc:4e:b2:9c: ae:27:ac:c8:d2:74:09:56:53:42:c6:37:77:e1:ae: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DC:34:12:16:4A:CC:E9:67:EA:33:2B:F2:76:35:F6:BD:92:21:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ecf0257-2f8e-3d6a-83ae-2c7dd90637e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:00:24:14:d1:8f:0a:ec:ca:68:33:60:85:72:8d:de:6c:90: 5b:98:f6:df:09:f1:b1:5f:76:6e:3f:d5:c9:8a:9e:c1:7b:ff: 5a:d1:4d:31:70:29:71:01:a8:7b:a1:ff:8f:4b:d7:95:2d:61: aa:90:55:37:90:6f:7d:28:1e:a2:e6:30:4c:70:9c:99:6f:b5: e5:3a:3c:35:7c:0d:16:62:23:d3:29:62:c5:02:74:ea:e8:f8: af:8b:97:e8:9c:e8:1f:80:6a:5b:0a:e8:3e:8a:6d:c9:0b:df: 81:49:17:c7:5d:96:ac:ba:01:38:ce:67:df:26:be:ec:37:e3: c4:a7:2a:d1:78:ba:de:66:6d:c9:1d:6a:08:a0:00:fa:9a:56: d1:e4:6c:07:9c:39:46:9e:39:0f:b4:26:1f:25:9c:cd:e3:53: c8:42:f2:6e:72:d6:d2:c7:10:dd:f5:17:55:87:9c:56:e9:04: ee:99:aa:5d:1c:23:58:b7:fd:76:63:08:aa:98:71:fc:63:e9: 1b:75:13:41:d5:9e:55:d4:b9:22:8b:16:fe:de:16:f8:17:40: 97:f8:6e:9a:1a:aa:46:06:84:1d:06:4e:06:9b:09:83:0f:6e: 2b:ef:17:d5:63:5e:2e:ef:43:1b:9a:b5:b5:38:ad:e5:e1:68: b5:b9:ac:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLGP/f7AdL+YdfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGUwYThmMjktMGI1YS00MWNmLTg0MTMtZjhhMzUxNDhjZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjkLA4q4vN1TgMAopLwHgIhxZYZObjjKFJw0 MOYGvrnCcsDRGSdmnXKcgRe7wBKLy8J1xqMtKa5lg4fFRcKpE4cc/fmdNqGFQgmh H484WwVTa/9D7MmdONCR3ywhEwqqkSVpz5VUwFi1mdQYC0AF/x2xDXeGavM9lKkw 8AneHfQcNd8s7MOZCY0l68OUKLMHWZ5gp0a8LuVGkG9EKt58lP6NcoWOAkVvcSij rIXDclKuQaaa0pKD9qX4gHbzvqju9Qg1lOaJHlJRKjDXh5662faXwdPt8fy1lrRp Px31FvcQ1PMJ11zPbWkaBfxOspyuJ6zI0nQJVlNCxjd34a43+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzcNBIWSszpZ+ozK/J2Nfa9kiHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGVjZjAyNTctMmY4ZS0z ZDZhLTgzYWUtMmM3ZGQ5MDYzN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAAJBTRjwrsymgzYIVyjd5skFuY9t8J8bFfdm4/1cmKnsF7/1rRTTFw KXEBqHuh/49L15UtYaqQVTeQb30oHqLmMExwnJlvteU6PDV8DRZiI9MpYsUCdOro +K+Ll+ic6B+AalsK6D6KbckL34FJF8ddlqy6ATjOZ98mvuw348SnKtF4ut5mbckd agigAPqaVtHkbAecOUaeOQ+0Jh8lnM3jU8hC8m5y1tLHEN31F1WHnFbpBO6Zql0c I1i3/XZjCKqYcfxj6Rt1E0HVnlXUuSKLFv7eFvgXQJf4bpoaqkYGhB0GTgabCYMP bivvF9VjXi7vQxuatbU4reXhaLW5rAI= -----END CERTIFICATE-----Generated at Sat Apr 26 21:52:43 2025 by rpki-client