$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/993a1552-1245-3ef7-a3ee-c8e5b3ccf1ac.roa File: 993a1552-1245-3ef7-a3ee-c8e5b3ccf1ac.roa (raw, json) Hash identifier: lTg727qi0UU+gBm5/v105O5yjSH4cV2HJa/sDkqHpgU= Subject key identifier: 83:25:9D:07:B8:E3:FE:29:08:AF:5A:04:B9:17:65:45:78:C0:8F:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B1816670B20352C5AA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/993a1552-1245-3ef7-a3ee-c8e5b3ccf1ac.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.31.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b1:81:66:70:b2:03:52:c5:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d78244cb-a931-48cc-814f-bb4d56148808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a8:f8:3e:cb:d4:a1:4d:6b:e1:69:90:26:a9: 76:26:29:ae:58:d7:b7:08:06:58:87:31:14:43:75: eb:6b:e8:9e:75:59:5b:37:20:ab:f3:6f:3f:41:5e: 9f:e7:89:54:07:ab:86:94:7f:ba:9d:9a:ef:d8:e7: c6:de:41:07:dd:65:e3:d1:73:f4:89:9c:37:78:7f: 18:54:d6:04:b9:d9:e1:e7:c2:c7:1a:ce:45:53:7c: 99:43:e4:50:2d:96:ad:ec:c2:b1:ec:05:05:20:e3: 45:c1:4d:2a:14:7a:a0:5a:0a:ff:e9:7c:ef:65:92: ee:e0:2b:4d:25:fa:cc:45:ce:f8:db:b6:f5:99:75: bd:b7:40:dd:58:c3:c5:33:9e:59:60:1f:e0:17:ee: 39:ef:b1:70:cf:e3:18:23:e6:2d:27:da:38:64:f3: ab:48:50:18:7e:f1:bb:e2:91:9f:e0:33:8a:cc:45: 3c:aa:ab:2f:ff:e5:bd:1c:85:95:e1:42:bc:cc:f7: e2:57:46:fe:b2:11:05:d1:89:73:cb:28:6f:d6:2d: 6f:56:dd:c8:04:e9:53:d5:40:f5:cb:d2:d5:bb:78: 34:d5:44:41:68:ca:3c:a5:4e:06:26:22:ed:22:d5: fb:3c:8b:9b:36:3f:6a:8e:dc:6e:b9:6f:9d:9d:fc: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:25:9D:07:B8:E3:FE:29:08:AF:5A:04:B9:17:65:45:78:C0:8F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/993a1552-1245-3ef7-a3ee-c8e5b3ccf1ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1e:f3:43:43:e2:3b:8a:33:61:00:8c:40:08:21:e7:e1:4d: 30:ea:a2:73:5e:2e:70:5d:ce:aa:98:f8:9b:39:a5:e3:e3:9f: 7e:44:54:df:c8:e4:c0:e4:8b:c8:6d:85:12:56:d2:88:43:de: fb:e6:5d:a6:15:ba:75:93:e8:59:8c:aa:08:69:dc:b3:cf:48: eb:14:08:f3:d3:b7:b8:56:6d:55:27:be:1a:b5:2a:31:8a:ef: bf:db:04:25:60:69:dc:cb:0f:6b:fd:2c:a9:55:a1:9f:80:5e: 37:18:74:5f:e9:15:04:14:dc:e9:f1:60:64:ba:38:8e:fe:e7: 11:6e:af:69:6c:57:ab:ed:f5:aa:22:5d:57:d6:1d:c3:70:3a: b7:94:da:22:2d:c1:3c:78:6e:28:fb:72:23:90:97:4e:88:df: 7a:9c:7e:5e:1e:fb:2d:3d:df:7a:04:25:8e:68:3b:43:28:ae: ca:22:44:08:57:01:97:46:26:6d:3c:2d:d4:74:38:33:78:e9: 1e:a8:f2:7b:0b:8a:0d:9f:c9:7b:89:31:a7:0a:83:06:86:4d: b3:88:9c:da:71:eb:ca:ac:47:d2:e7:bb:f7:79:1a:d1:e3:9d: 39:6b:b3:a7:14:2d:74:2f:0c:96:b2:b9:17:92:b3:a3:70:c4: f3:c0:d1:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLGBZnCyA1LFqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDc4MjQ0Y2ItYTkzMS00OGNjLTgxNGYtYmI0ZDU2MTQ4ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6j4PsvUoU1r4WmQJql2JimuWNe3CAZYhzEU Q3Xra+iedVlbNyCr828/QV6f54lUB6uGlH+6nZrv2OfG3kEH3WXj0XP0iZw3eH8Y VNYEudnh58LHGs5FU3yZQ+RQLZat7MKx7AUFIONFwU0qFHqgWgr/6XzvZZLu4CtN JfrMRc7427b1mXW9t0DdWMPFM55ZYB/gF+4577Fwz+MYI+YtJ9o4ZPOrSFAYfvG7 4pGf4DOKzEU8qqsv/+W9HIWV4UK8zPfiV0b+shEF0Ylzyyhv1i1vVt3IBOlT1UD1 y9LVu3g01URBaMo8pU4GJiLtItX7PIubNj9qjtxuuW+dnfztTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMlnQe44/4pCK9aBLkXZUV4wI/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTkzYTE1NTItMTI0NS0z ZWY3LWEzZWUtYzhlNWIzY2NmMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEse80ND4juKM2EAjEAIIefhTTDqonNeLnBdzqqY+Js5pePjn35EVN/I 5MDki8hthRJW0ohD3vvmXaYVunWT6FmMqghp3LPPSOsUCPPTt7hWbVUnvhq1KjGK 77/bBCVgadzLD2v9LKlVoZ+AXjcYdF/pFQQU3OnxYGS6OI7+5xFur2lsV6vt9aoi XVfWHcNwOreU2iItwTx4bij7ciOQl06I33qcfl4e+y0933oEJY5oO0MorsoiRAhX AZdGJm08LdR0ODN46R6o8nsLig2fyXuJMacKgwaGTbOInNpx68qsR9Lnu/d5GtHj nTlrs6cULXQvDJayuReSs6NwxPPA0eM= -----END CERTIFICATE-----Generated at Sat Apr 26 23:41:46 2025 by rpki-client