$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa File: bfef74fc-994c-3502-b355-4ccb17c00e10.roa (raw, json) Hash identifier: vheoh+ERdSx7+S7qMBGlLI5Ai7Dzh+1rv1X1ycziqls= Subject key identifier: 35:55:17:14:0F:25:C5:69:53:6F:BD:BC:60:90:78:16:A2:35:40:04 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4949412978AB289A0AC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa Signing time: Tue 22 Apr 2025 09:36:55 +0000 ROA not before: Tue 22 Apr 2025 09:36:55 +0000 ROA not after: Mon 21 Jul 2025 09:36:55 +0000 asID: 19905 IP address blocks: 173.31.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:94:94:12:97:8a:b2:89:a0:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:36:55 2025 GMT Not After : Jul 21 09:36:55 2025 GMT Subject: CN=21914259-79b6-48c8-9808-5732993b27e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:5d:fe:ad:10:55:09:ab:99:d8:9d:da:f4: c1:9d:3a:d4:cf:ed:c3:09:f0:a6:28:e6:8a:63:44: e3:80:84:4b:48:84:2b:51:cc:cf:94:15:f9:95:52: fe:38:ec:88:7a:fa:57:93:21:b5:47:b0:49:01:ae: 27:9b:78:41:4b:e7:62:d3:b6:b5:33:d5:28:d9:b5: 31:b4:1e:78:aa:74:f7:2a:cb:b8:32:92:a2:a5:7d: ab:5d:e7:c3:9c:c2:c7:d3:9e:24:9d:e5:cb:32:bc: f0:e6:99:4e:e8:a8:6a:3e:a5:5f:b8:4d:49:80:de: 42:61:d6:85:86:44:ff:eb:1d:de:4b:f3:93:1b:19: d6:90:f4:b3:fb:a6:33:b7:9f:a7:ab:90:51:13:f2: 61:32:46:86:72:94:11:0e:13:0a:c8:9f:40:28:1e: d1:ed:15:ab:f2:34:77:ce:b9:18:81:8d:f6:7a:70: a4:89:34:91:9c:06:c6:51:ba:31:27:a3:9e:25:eb: 78:b1:6d:f9:53:1f:1b:a4:e4:c1:85:c0:25:42:40: bb:78:2c:4a:16:b3:d8:9a:27:67:6c:87:1c:c4:a5: 44:a4:02:8c:1a:a3:08:ef:5c:e8:0a:e2:9f:aa:81: db:5b:23:32:5f:95:2c:2e:3b:26:5a:09:ff:93:55: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:55:17:14:0F:25:C5:69:53:6F:BD:BC:60:90:78:16:A2:35:40:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:da:ca:29:45:3a:b7:82:b5:31:d3:47:09:a3:20:34:f9:db: 2f:08:c5:34:15:a7:01:6d:c9:65:9e:03:57:06:a4:25:e1:40: d2:00:1d:c3:de:f0:f0:a4:32:d6:db:a4:10:7f:be:01:7e:e7: 61:24:8a:2e:b5:f5:59:6a:09:53:c2:65:df:50:ec:74:3c:d4: df:63:df:f8:5f:e5:cc:5b:2c:0f:92:b0:87:01:44:a9:88:c4: bb:c0:35:77:94:17:10:89:f4:de:97:85:c8:60:80:9b:f6:2a: b1:99:f0:79:fe:c2:9f:52:d6:c7:f7:97:af:fc:8e:2a:c7:5c: 2f:7f:d0:84:a7:de:60:27:81:37:32:6c:29:82:83:d8:e7:bd: de:df:6b:61:51:48:97:20:a8:7b:72:7a:53:2c:71:7c:61:70: 31:a5:ee:41:a2:33:c8:38:1c:89:12:98:38:5b:89:46:7d:27: 9b:ef:09:1e:67:3b:90:1c:56:eb:1b:51:f7:cb:41:1d:a8:9f: b4:cc:ca:f8:11:48:b6:07:9f:0d:99:de:43:04:f4:89:94:c2: 33:1e:e6:9c:28:ba:e1:ca:39:b0:ed:e1:2e:53:88:bb:6d:00: 20:b4:00:ce:7c:7f:a3:bb:85:da:19:24:a7:7c:b2:84:c6:da: 0a:46:08:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9JSUEpeKsomgrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5MzY1NVoXDTI1MDcyMTA5MzY1NVowLzEtMCsGA1UEAxMk MjE5MTQyNTktNzliNi00OGM4LTk4MDgtNTczMjk5M2IyN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu21d/q0QVQmrmdid2vTBnTrUz+3DCfCmKOaK Y0TjgIRLSIQrUczPlBX5lVL+OOyIevpXkyG1R7BJAa4nm3hBS+di07a1M9Uo2bUx tB54qnT3Ksu4MpKipX2rXefDnMLH054kneXLMrzw5plO6KhqPqVfuE1JgN5CYdaF hkT/6x3eS/OTGxnWkPSz+6Yzt5+nq5BRE/JhMkaGcpQRDhMKyJ9AKB7R7RWr8jR3 zrkYgY32enCkiTSRnAbGUboxJ6OeJet4sW35Ux8bpOTBhcAlQkC7eCxKFrPYmidn bIccxKVEpAKMGqMI71zoCuKfqoHbWyMyX5UsLjsmWgn/k1XtFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVVFxQPJcVpU2+9vGCQeBaiNUAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlZjc0ZmMtOTk0Yy0z NTAyLWIzNTUtNGNjYjE3YzAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfayilFOreCtTHTRwmjIDT52y8IxTQVpwFtyWWeA1cGpCXhQNIAHcPe 8PCkMtbbpBB/vgF+52Ekii619VlqCVPCZd9Q7HQ81N9j3/hf5cxbLA+SsIcBRKmI xLvANXeUFxCJ9N6XhchggJv2KrGZ8Hn+wp9S1sf3l6/8jirHXC9/0ISn3mAngTcy bCmCg9jnvd7fa2FRSJcgqHtyelMscXxhcDGl7kGiM8g4HIkSmDhbiUZ9J5vvCR5n O5AcVusbUffLQR2on7TMyvgRSLYHnw2Z3kME9ImUwjMe5pwouuHKObDt4S5TiLtt ACC0AM58f6O7hdoZJKd8soTG2gpGCD0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:39 2025 by rpki-client