$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7aa00dfc-0d8a-3e97-9a2f-4977c342c536.roa File: 7aa00dfc-0d8a-3e97-9a2f-4977c342c536.roa (raw, json) Hash identifier: /hav3iHaylOnocAMUzyt/2mpuxJfI5LIZikYZR963t4= Subject key identifier: CF:BA:1C:7D:08:64:26:6C:13:67:66:FB:31:80:35:4F:30:6A:8A:6A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA0AD93A3B319E3A980F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7aa00dfc-0d8a-3e97-9a2f-4977c342c536.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:0a:d9:3a:3b:31:9e:3a:98:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=43f65e75-ec6b-40e4-9024-9a932bc38100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e2:df:83:81:ce:7d:41:12:d3:3d:d8:e4:eb: 2f:1d:6b:47:50:e0:0e:1d:f4:24:08:d9:ac:59:77: cf:00:3e:b0:4f:7b:db:e1:1b:37:b5:51:88:87:43: 26:97:c9:f9:41:53:40:b9:6d:b0:15:3c:81:64:3f: 83:08:54:09:f6:9a:1e:f6:e8:ce:2f:d8:ca:b0:1e: 62:a7:53:b4:ec:74:7a:1c:ae:0a:78:ba:52:08:4e: 6c:61:e3:0d:da:7a:7a:a1:42:16:70:d0:80:5d:d5: 9c:02:e6:06:61:a0:f3:3f:83:fb:3e:dd:88:23:a4: ff:00:33:46:07:0a:c6:e3:de:a5:fb:5b:33:28:f4: 28:ae:46:a1:0e:c1:03:0e:92:7e:5d:68:3f:49:45: a3:6d:58:13:ac:66:da:d5:c3:dd:b7:b9:4e:f9:d5: 05:65:c9:29:ef:1b:0c:87:0d:5e:db:43:94:1f:4f: a6:10:8c:3e:5e:f6:ad:a8:54:b2:40:a0:d3:cc:b8: 52:37:29:15:f7:87:cb:ce:da:0c:74:eb:ba:6c:24: a3:22:55:23:ab:0e:cc:1c:3d:e4:4e:b3:88:77:b9: 3c:db:fb:b3:53:35:46:bf:59:3a:21:69:17:1e:21: e1:49:81:88:bc:ca:29:5a:43:74:6f:1f:f1:00:99: b7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BA:1C:7D:08:64:26:6C:13:67:66:FB:31:80:35:4F:30:6A:8A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7aa00dfc-0d8a-3e97-9a2f-4977c342c536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:83:7d:b6:e4:1d:1e:5e:ca:82:a6:af:68:fe:c7:f1:de:18: 5c:01:dd:08:58:3d:29:26:5c:a0:18:27:b8:89:58:eb:20:84: 9c:fa:3f:c7:ce:ac:7a:d8:ca:27:64:6b:0f:81:df:a4:43:20: 5e:16:ee:32:fa:66:f3:68:23:84:05:35:eb:d4:19:c7:1a:74: 87:f8:0c:03:f4:37:6e:a0:1b:44:3f:6d:a0:bc:1a:31:3b:80: f7:c1:8b:0f:0b:36:88:40:98:0a:4b:b8:fb:f6:9a:dc:8a:98: 72:14:a7:2a:3c:bb:53:3c:52:ca:2b:25:04:2f:f2:6c:4f:01: 3c:fd:b0:0e:3d:b7:a9:44:56:14:6b:e1:6f:aa:05:63:bb:dc: 83:38:64:20:31:82:fd:30:03:d9:f1:25:a1:3f:5f:c2:1b:6b: 56:96:2e:10:13:82:9e:f6:16:cd:6e:f6:c1:df:cb:fc:53:bf: 80:13:9e:d5:8a:f6:1b:f0:84:74:8b:fb:b4:71:82:6c:78:bb: 7b:91:d3:28:3b:c9:d0:9c:b8:cc:aa:dd:a9:3b:8c:03:be:f5: 01:9f:ed:a3:59:b3:18:b0:20:ff:1b:e3:2f:e4:45:76:3b:91: 93:49:3c:45:e6:df:c4:27:f4:33:dd:6f:d2:2d:18:d7:7f:c1: 1f:0d:b7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugrZOjsxnjqYD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDNmNjVlNzUtZWM2Yi00MGU0LTkwMjQtOWE5MzJiYzM4MTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+Lfg4HOfUES0z3Y5OsvHWtHUOAOHfQkCNms WXfPAD6wT3vb4Rs3tVGIh0Mml8n5QVNAuW2wFTyBZD+DCFQJ9poe9ujOL9jKsB5i p1O07HR6HK4KeLpSCE5sYeMN2np6oUIWcNCAXdWcAuYGYaDzP4P7Pt2II6T/ADNG BwrG496l+1szKPQorkahDsEDDpJ+XWg/SUWjbVgTrGba1cPdt7lO+dUFZckp7xsM hw1e20OUH0+mEIw+XvatqFSyQKDTzLhSNykV94fLztoMdOu6bCSjIlUjqw7MHD3k TrOId7k82/uzUzVGv1k6IWkXHiHhSYGIvMopWkN0bx/xAJm3kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+6HH0IZCZsE2dm+zGANU8waopqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2FhMDBkZmMtMGQ4YS0z ZTk3LTlhMmYtNDk3N2MzNDJjNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqDfbbkHR5eyoKmr2j+x/HeGFwB3QhYPSkmXKAYJ7iJWOsghJz6P8fO rHrYyidkaw+B36RDIF4W7jL6ZvNoI4QFNevUGccadIf4DAP0N26gG0Q/baC8GjE7 gPfBiw8LNohAmApLuPv2mtyKmHIUpyo8u1M8UsorJQQv8mxPATz9sA49t6lEVhRr 4W+qBWO73IM4ZCAxgv0wA9nxJaE/X8Iba1aWLhATgp72Fs1u9sHfy/xTv4ATntWK 9hvwhHSL+7Rxgmx4u3uR0yg7ydCcuMyq3ak7jAO+9QGf7aNZsxiwIP8b4y/kRXY7 kZNJPEXm38Qn9DPdb9ItGNd/wR8Nt3Q= -----END CERTIFICATE-----Generated at Sun Apr 27 09:25:42 2025 by rpki-client