$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa File: bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa (raw, json) Hash identifier: 4fY7EQIRS4sPzQnCK+mblHgb42Gev1sCkYXDqeJS/ps= Subject key identifier: 08:68:FD:FB:9D:10:19:98:87:48:97:D7:6F:C2:E9:F3:B7:A6:BB:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412571BC6956F5688E6B100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.31.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:57:1b:c6:95:6f:56:88:e6:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fe2359e9-d41f-48b1-8a0b-951a51e07dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:0d:12:3e:8c:7d:4f:7b:bf:b8:51:90:ad: 2a:a2:74:c4:82:f1:26:a5:61:fc:9c:92:63:d1:a2: 94:62:0d:70:d2:af:af:1c:e4:91:5f:dc:32:d6:71: 10:6b:23:46:7f:f9:0b:5d:05:11:18:a2:b2:23:16: e7:41:a5:77:27:58:41:45:1e:5e:08:b6:37:a8:e5: dd:f3:ae:f1:23:63:4f:b2:29:db:67:ad:fe:b9:48: 19:76:65:e6:d4:c3:99:c3:d0:5f:8a:24:9f:a2:18: 68:d5:6f:9b:f3:c6:8d:e3:09:4c:93:14:aa:b5:80: 59:1e:3d:e3:17:b9:5a:f4:68:9d:9a:64:68:e1:d1: 13:e0:5e:bb:af:08:14:33:08:d1:0d:f2:e8:74:8e: ca:b8:ca:b7:9a:14:ef:91:da:01:97:98:0f:cd:c8: 87:2f:78:59:24:21:99:7f:b9:59:d5:b2:2d:6e:89: 37:c0:3c:38:18:d5:9e:2e:ab:56:f7:83:70:b3:0e: 46:b7:b4:28:9e:c3:e3:cd:f4:bf:f7:de:93:64:92: 9f:80:1d:3b:a6:e1:95:6e:e9:54:15:44:2a:31:20: 7c:9d:8d:a2:65:31:21:b6:18:18:e5:a4:ea:78:11: 67:43:7c:ce:ed:3b:4d:b7:af:33:60:74:87:df:57: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:68:FD:FB:9D:10:19:98:87:48:97:D7:6F:C2:E9:F3:B7:A6:BB:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a7:65:b7:64:b9:ee:92:9d:38:ff:6f:02:45:c7:b1:41:53: 18:6f:08:77:5e:dd:0c:6f:18:63:f5:40:28:59:76:9a:c5:fc: bd:8c:92:c2:68:8c:97:16:86:ae:c9:fb:b7:47:36:bc:83:06: 50:82:21:2a:76:b3:84:ff:77:2f:56:40:61:68:bf:8e:e8:7e: 17:71:b3:92:97:cb:03:5b:ef:6e:26:2a:61:61:32:fa:51:a8: e6:15:02:ed:12:18:de:bf:db:51:f9:60:ff:b2:15:83:4e:54: 20:82:aa:34:7c:2c:0f:a1:0d:d1:f3:cf:33:ac:14:c4:8e:1f: 1b:c0:84:27:c7:36:d7:65:3e:b5:01:62:df:84:81:2f:f8:ea: f0:d8:e3:e5:f1:a3:ee:cf:c5:b1:15:42:e4:21:59:2a:b1:78: 39:3b:09:4d:b2:65:07:86:1c:40:ba:07:6a:a7:3f:68:75:f7: b5:5d:c2:ed:3e:b8:d9:9a:9b:0e:36:52:5b:02:53:76:01:2e: e7:54:fc:89:1d:79:8e:46:2c:b6:68:0b:24:02:c2:0b:6b:c2: c1:ed:26:07:23:23:7a:3b:5c:b1:6d:51:93:d7:ed:3c:cb:5f: 30:d9:b0:25:f7:96:94:f9:37:1d:bc:1e:fa:a9:a7:f4:2f:96: 45:52:fa:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElcbxpVvVojmsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmUyMzU5ZTktZDQxZi00OGIxLThhMGItOTUxYTUxZTA3ZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu8NEj6MfU97v7hRkK0qonTEgvEmpWH8nJJj 0aKUYg1w0q+vHOSRX9wy1nEQayNGf/kLXQURGKKyIxbnQaV3J1hBRR5eCLY3qOXd 867xI2NPsinbZ63+uUgZdmXm1MOZw9BfiiSfohho1W+b88aN4wlMkxSqtYBZHj3j F7la9GidmmRo4dET4F67rwgUMwjRDfLodI7KuMq3mhTvkdoBl5gPzciHL3hZJCGZ f7lZ1bItbok3wDw4GNWeLqtW94Nwsw5Gt7QonsPjzfS/996TZJKfgB07puGVbulU FUQqMSB8nY2iZTEhthgY5aTqeBFnQ3zO7TtNt68zYHSH31fRMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAho/fudEBmYh0iX12/C6fO3prtlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZmN2MyNWQtMGUzOC0z OWRiLWFiZjYtZDBmNGM2YWVlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR86MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGnZbdkue6SnTj/bwJFx7FBUxhvCHde3QxvGGP1QChZdprF/L2MksJo jJcWhq7J+7dHNryDBlCCISp2s4T/dy9WQGFov47ofhdxs5KXywNb724mKmFhMvpR qOYVAu0SGN6/21H5YP+yFYNOVCCCqjR8LA+hDdHzzzOsFMSOHxvAhCfHNtdlPrUB Yt+EgS/46vDY4+Xxo+7PxbEVQuQhWSqxeDk7CU2yZQeGHEC6B2qnP2h197Vdwu0+ uNmamw42UlsCU3YBLudU/IkdeY5GLLZoCyQCwgtrwsHtJgcjI3o7XLFtUZPX7TzL XzDZsCX3lpT5Nx28Hvqpp/QvlkVS+kc= -----END CERTIFICATE-----Generated at Tue Aug 5 22:56:00 2025 by rpki-client