$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa File: a1954fa4-3a55-38fb-8f20-034f813e98cf.roa (raw, json) Hash identifier: v2MIqNA0QHdshnSuI0/QeqTDagPwhdrPU9ybRzSg0ag= Subject key identifier: 2D:80:19:07:77:BE:57:EF:54:5E:2A:EA:E1:E6:EB:ED:24:64:CA:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B7C7A1B51B6A2C4FE780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.31.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b7:c7:a1:b5:1b:6a:2c:4f:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9cd3253c-7276-4db1-bd12-4895fd3cc76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:a1:4d:f2:11:d0:1b:4e:17:ef:6b:5d:52: 51:4f:f3:93:4b:38:58:33:a3:e8:08:eb:7d:09:56: c1:21:13:05:8d:39:bc:7a:b6:5b:7e:03:b4:48:18: 8d:a9:1f:81:dc:0f:96:15:43:d3:ac:dc:e6:15:43: aa:2d:57:2b:0e:98:8d:f5:b2:5b:e3:9e:07:c2:45: d4:01:80:01:b5:3d:d3:a6:ba:0e:59:ef:51:f2:0b: 23:a8:88:9a:50:0f:6d:20:93:9e:24:45:60:4a:63: 08:cc:2a:33:d9:92:64:d0:54:1d:0c:b4:a2:aa:33: 9a:5b:ba:26:62:be:7d:98:31:ed:40:3e:97:94:bf: f4:15:ec:dc:d5:a3:38:0d:e8:74:21:d4:c1:d1:45: d6:0a:ed:1d:15:25:0d:d1:75:43:6a:1d:3f:fd:ba: 7f:4f:c2:30:92:81:b0:62:46:aa:61:f9:ba:e1:86: 7e:be:5c:5d:55:ed:42:ba:1e:1a:80:33:4e:c4:87: 87:f6:5b:73:a0:59:c5:36:07:32:fd:82:67:95:21: c1:e5:b1:4a:04:4d:b5:38:8e:ba:19:28:4f:83:9c: d9:9e:07:75:49:b7:51:66:f5:35:dc:b5:4c:7a:d1: 82:11:48:48:d1:7f:de:48:13:a2:d6:2d:b2:72:43: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:80:19:07:77:BE:57:EF:54:5E:2A:EA:E1:E6:EB:ED:24:64:CA:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bb:2f:8b:8c:67:c0:b2:fb:49:fb:19:a5:80:97:1a:86:b3: 9f:b8:47:a7:a1:6c:69:a1:23:ed:10:f1:f8:fd:84:36:9a:35: a2:34:39:f1:d1:04:9b:80:aa:b7:c4:12:a8:b8:c2:6f:7a:1d: 60:16:0e:7d:e8:3f:4e:97:99:89:e0:54:ad:af:1d:4c:21:2c: 20:cb:84:6c:05:6f:42:04:91:8c:d7:d1:15:1f:ab:dd:d3:cf: 53:2e:dc:a5:7b:9f:07:4d:af:c9:9e:c5:61:20:f8:60:a0:65: fd:62:58:be:5f:7e:c3:23:3a:fb:0d:a5:da:1b:3e:c8:6a:82: 89:de:cb:e5:78:ea:7b:88:28:f4:93:9f:1d:6e:d1:66:f3:54: 92:a8:e4:f0:26:0e:c0:fd:30:9f:08:f2:3f:12:8e:1c:e4:d8: d8:8e:0d:31:3e:ef:dd:a1:d6:2a:76:ee:17:c4:a8:25:33:02: 9b:5d:a8:6c:1e:3a:a2:c8:c1:30:50:a5:c1:e5:af:7d:e9:ab: fb:b8:15:46:a2:45:bb:b0:3f:93:85:85:01:5a:8c:c1:6d:93: d6:f4:a6:96:82:30:c1:66:a1:3b:f7:1a:ca:23:35:41:c9:d6: bc:b1:42:6a:e7:01:e3:e9:0c:69:2d:41:d5:fa:5c:bf:05:61: 78:a5:c4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLfHobUbaixP54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWNkMzI1M2MtNzI3Ni00ZGIxLWJkMTItNDg5NWZkM2NjNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3+hTfIR0BtOF+9rXVJRT/OTSzhYM6PoCOt9 CVbBIRMFjTm8erZbfgO0SBiNqR+B3A+WFUPTrNzmFUOqLVcrDpiN9bJb454HwkXU AYABtT3TproOWe9R8gsjqIiaUA9tIJOeJEVgSmMIzCoz2ZJk0FQdDLSiqjOaW7om Yr59mDHtQD6XlL/0Fezc1aM4Deh0IdTB0UXWCu0dFSUN0XVDah0//bp/T8IwkoGw YkaqYfm64YZ+vlxdVe1Cuh4agDNOxIeH9ltzoFnFNgcy/YJnlSHB5bFKBE21OI66 GShPg5zZngd1SbdRZvU13LVMetGCEUhI0X/eSBOi1i2yckMOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2AGQd3vlfvVF4q6uHm6+0kZMpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTE5NTRmYTQtM2E1NS0z OGZiLThmMjAtMDM0ZjgxM2U5OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi7L4uMZ8Cy+0n7GaWAlxqGs5+4R6ehbGmhI+0Q8fj9hDaaNaI0OfHR BJuAqrfEEqi4wm96HWAWDn3oP06XmYngVK2vHUwhLCDLhGwFb0IEkYzX0RUfq93T z1Mu3KV7nwdNr8mexWEg+GCgZf1iWL5ffsMjOvsNpdobPshqgoney+V46nuIKPST nx1u0WbzVJKo5PAmDsD9MJ8I8j8Sjhzk2NiODTE+792h1ip27hfEqCUzAptdqGwe OqLIwTBQpcHlr33pq/u4FUaiRbuwP5OFhQFajMFtk9b0ppaCMMFmoTv3GsojNUHJ 1ryxQmrnAePpDGktQdX6XL8FYXilxJQ= -----END CERTIFICATE-----Generated at Sun Apr 27 11:11:35 2025 by rpki-client