$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa File: bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa (raw, json) Hash identifier: hUKcPvw6fdNJOAdmOyhtMkeOF+TJh6nX9Y4wxFen5HI= Subject key identifier: 59:7C:53:A6:5A:5E:ED:B5:51:99:93:02:CE:42:AA:38:32:0E:05:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3736CD0EDB299ECA6F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:37:36:cd:0e:db:29:9e:ca:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=03996677-c2fd-4395-9d58-18a597ad29e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:5d:3d:3d:54:cd:df:bf:07:9d:37:d9:79: 8e:8f:9d:04:90:66:49:be:da:47:8a:1f:ca:04:89: ab:b3:67:7b:0e:0a:3d:e9:b8:0d:6e:08:8c:5b:b0: b2:ec:62:70:26:3c:7d:d8:41:30:e9:1a:c3:47:24: f5:7e:80:2e:e1:7f:5c:12:e7:a3:4d:42:a6:b6:be: 22:b5:cb:72:a1:97:98:f1:1c:19:4e:ae:af:1d:9a: 9f:5e:e8:3c:ab:4a:6f:dd:cd:b4:4b:a9:c3:23:01: 66:ca:5c:52:c6:ec:09:dd:d6:3f:7c:81:69:13:1c: 07:2d:7e:f6:9e:6a:15:70:8b:d6:52:47:7e:51:6b: cb:81:36:c6:99:77:7c:b1:da:3f:6a:f2:d6:63:b8: 52:82:61:b7:50:13:19:d1:36:da:f4:9e:76:16:c1: 63:0b:8d:b7:dd:86:eb:15:aa:f2:b6:7e:22:92:eb: 22:26:c8:72:6f:f3:42:51:f2:48:35:2e:eb:ed:99: 3b:20:10:3b:22:63:21:ec:8c:31:6c:60:02:81:26: cd:08:c1:c5:b2:40:6b:ee:f1:a5:e3:4d:ce:87:03: 0d:10:60:a0:08:88:07:59:bb:2a:6d:dd:72:9a:38: cd:d6:9e:75:b8:d8:b9:d7:62:6d:56:12:cc:4a:9a: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7C:53:A6:5A:5E:ED:B5:51:99:93:02:CE:42:AA:38:32:0E:05:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4e:4f:bd:52:ab:b9:90:c4:a7:b4:0a:57:62:a5:c2:d7:1a: b2:69:f7:f5:af:77:23:2f:18:96:86:fe:4e:ea:10:de:75:f0: 9f:78:02:43:d7:b0:29:19:6a:66:9f:2f:53:23:fc:f5:38:67: 2e:46:56:71:4a:51:65:56:cb:45:92:e0:31:18:48:3a:bb:c9: bb:a3:3f:b2:72:fa:7b:b7:27:28:09:fd:3b:9a:99:26:1a:f0: f6:db:7d:c6:57:cb:b2:0d:aa:95:26:68:85:9d:db:6a:34:3b: 47:4d:0a:ad:7d:9d:3f:9f:52:10:63:a5:f5:5f:2e:92:0f:7f: 0a:bd:73:79:27:d0:85:40:5f:73:8f:0f:6c:02:80:9d:75:52: 91:c5:83:de:05:5f:0c:68:1f:91:18:68:14:3a:24:4a:ca:97: 63:ec:b4:25:dc:74:3e:c9:2a:43:ed:06:71:6a:3b:bf:00:62: 47:63:53:13:36:15:5e:56:c9:f3:b1:6f:66:4d:fd:6e:ee:fb: ba:fa:d4:75:ad:c0:b3:c8:6c:90:f9:47:df:13:e4:ca:ff:e7: b1:3d:0e:b7:e0:e6:bf:12:df:71:33:43:0c:db:c2:36:0c:52: d8:5f:fe:3a:51:b9:6a:2c:df:3d:bd:74:98:22:60:25:a1:8f: bd:cd:e7:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujc2zQ7bKZ7Kb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDM5OTY2NzctYzJmZC00Mzk1LTlkNTgtMThhNTk3YWQyOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3VdPT1Uzd+/B5032XmOj50EkGZJvtpHih/K BImrs2d7Dgo96bgNbgiMW7Cy7GJwJjx92EEw6RrDRyT1foAu4X9cEuejTUKmtr4i tctyoZeY8RwZTq6vHZqfXug8q0pv3c20S6nDIwFmylxSxuwJ3dY/fIFpExwHLX72 nmoVcIvWUkd+UWvLgTbGmXd8sdo/avLWY7hSgmG3UBMZ0Tba9J52FsFjC4233Ybr Farytn4ikusiJshyb/NCUfJINS7r7Zk7IBA7ImMh7IwxbGACgSbNCMHFskBr7vGl 403OhwMNEGCgCIgHWbsqbd1ymjjN1p51uNi512JtVhLMSpr8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl8U6ZaXu21UZmTAs5CqjgyDgX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZmN2MyNWQtMGUzOC0z OWRiLWFiZjYtZDBmNGM2YWVlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR86MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChOT71Sq7mQxKe0CldipcLXGrJp9/WvdyMvGJaG/k7qEN518J94AkPX sCkZamafL1Mj/PU4Zy5GVnFKUWVWy0WS4DEYSDq7ybujP7Jy+nu3JygJ/TuamSYa 8PbbfcZXy7INqpUmaIWd22o0O0dNCq19nT+fUhBjpfVfLpIPfwq9c3kn0IVAX3OP D2wCgJ11UpHFg94FXwxoH5EYaBQ6JErKl2PstCXcdD7JKkPtBnFqO78AYkdjUxM2 FV5WyfOxb2ZN/W7u+7r61HWtwLPIbJD5R98T5Mr/57E9Drfg5r8S33EzQwzbwjYM Uthf/jpRuWos3z29dJgiYCWhj73N50I= -----END CERTIFICATE-----Generated at Sun Jun 15 19:25:29 2025 by rpki-client