$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1b0cc20-8d89-31cd-bdc6-13319dee8e09.roa File: c1b0cc20-8d89-31cd-bdc6-13319dee8e09.roa (raw, json) Hash identifier: 1pSzhSRmaFgybsYhXZKdKBYqBvAWf6yBuT68X5QKbHI= Subject key identifier: 35:5A:0A:9F:6E:2C:0A:A0:4E:F4:44:12:E2:A1:DF:FA:EF:E0:9D:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849F38AFAF3000BF4FCD80A1180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1b0cc20-8d89-31cd-bdc6-13319dee8e09.roa Signing time: Fri 23 May 2025 18:35:17 +0000 ROA not before: Fri 23 May 2025 18:35:17 +0000 ROA not after: Thu 21 Aug 2025 18:35:17 +0000 asID: 30036 IP address blocks: 173.31.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f3:8a:fa:f3:00:0b:f4:fc:d8:0a:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 23 18:35:17 2025 GMT Not After : Aug 21 18:35:17 2025 GMT Subject: CN=8138c58b-e700-4e05-9e0e-3dd7239309f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c3:df:7d:37:23:0e:18:e5:aa:cc:86:f5:60: b6:f1:35:9f:85:84:df:8b:7a:6f:f0:6c:45:ae:eb: 18:fa:35:4b:ba:4b:1c:8c:41:29:48:80:3b:7e:a1: ac:6d:12:db:17:13:4a:d7:cd:20:50:48:d2:42:56: 67:ca:64:96:16:80:4a:a2:72:57:02:1d:e4:f6:81: a9:31:cd:f9:60:24:d7:53:ac:2a:cd:62:31:95:1b: 72:bd:9e:97:2a:29:0d:2d:7c:11:41:16:55:0a:cc: cc:f0:77:9b:1e:47:f0:c9:34:f4:2e:b1:0b:c8:82: b3:f7:aa:0d:0c:f9:66:05:cb:cb:10:c0:3f:ab:7f: b6:49:08:09:00:39:83:ad:ff:cc:18:76:6a:7c:a1: e3:03:3c:1d:10:11:cb:07:3b:68:c5:27:55:9f:a8: 30:bf:bf:5b:26:0a:0c:65:0c:9a:d6:26:51:aa:36: a2:38:26:b6:43:02:23:78:ff:2c:16:a1:68:fa:db: 7c:7e:e5:61:f9:21:8b:72:7d:f0:6f:3c:55:48:1a: fa:2e:d1:b0:6a:9c:90:3f:74:33:d6:be:89:ce:89: d8:af:e5:a1:e9:74:7b:bf:ad:f0:cd:8e:51:01:16: 8a:20:53:bf:7c:11:2c:a2:8f:18:5d:ea:58:35:48: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5A:0A:9F:6E:2C:0A:A0:4E:F4:44:12:E2:A1:DF:FA:EF:E0:9D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1b0cc20-8d89-31cd-bdc6-13319dee8e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f5:88:4c:0a:7e:93:65:b0:55:24:a2:50:07:05:1b:b0:1b: bf:12:7c:6e:07:bf:82:66:8e:ae:16:97:ea:05:9e:ce:cc:15: 3c:5e:a0:68:98:5e:0a:57:30:1a:92:a4:a4:52:67:c8:dd:de: b4:3e:e3:68:9b:26:53:f7:30:ea:44:77:8c:78:f7:a6:56:d2: 7c:97:6b:19:36:98:4c:ba:08:a0:23:f1:ae:48:2b:bb:c1:c0: 06:54:60:89:5f:f0:1e:bb:dc:8c:b1:f1:b9:46:fd:4d:44:c8: 88:d8:77:16:e6:d1:fb:3e:c1:eb:3a:32:e8:e8:35:5b:bb:c4: bb:15:9c:66:4d:12:8d:8b:e6:63:dd:a0:91:85:07:0c:b0:d5: e9:1c:71:f0:ee:75:92:30:6f:bb:49:e3:9f:13:aa:04:c3:e8: be:f0:3b:a0:37:05:24:25:21:19:96:0c:94:4b:0e:1b:25:9b: 2a:63:9c:77:da:72:9e:b6:2f:0a:b1:b3:64:22:e9:8a:0a:6f: 03:41:9a:ec:d8:27:98:43:85:9f:38:a9:97:a1:03:52:0f:a1: 93:8f:ae:34:1f:07:91:c3:21:cc:23:63:2f:ac:80:a5:54:05: 5a:c5:5f:c8:a1:94:a5:00:17:62:2e:4d:ee:f6:ea:7f:fe:00: ae:6e:f6:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnzivrzAAv0/NgKEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyMzE4MzUxN1oXDTI1MDgyMTE4MzUxN1owLzEtMCsGA1UEAxMk ODEzOGM1OGItZTcwMC00ZTA1LTllMGUtM2RkNzIzOTMwOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsPffTcjDhjlqsyG9WC28TWfhYTfi3pv8GxF rusY+jVLukscjEEpSIA7fqGsbRLbFxNK180gUEjSQlZnymSWFoBKonJXAh3k9oGp Mc35YCTXU6wqzWIxlRtyvZ6XKikNLXwRQRZVCszM8HebHkfwyTT0LrELyIKz96oN DPlmBcvLEMA/q3+2SQgJADmDrf/MGHZqfKHjAzwdEBHLBztoxSdVn6gwv79bJgoM ZQya1iZRqjaiOCa2QwIjeP8sFqFo+tt8fuVh+SGLcn3wbzxVSBr6LtGwapyQP3Qz 1r6JzonYr+Wh6XR7v63wzY5RARaKIFO/fBEsoo8YXepYNUj0rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVaCp9uLAqgTvREEuKh3/rv4J1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzFiMGNjMjAtOGQ4OS0z MWNkLWJkYzYtMTMzMTlkZWU4ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD1iEwKfpNlsFUkolAHBRuwG78SfG4Hv4Jmjq4Wl+oFns7MFTxeoGiY XgpXMBqSpKRSZ8jd3rQ+42ibJlP3MOpEd4x496ZW0nyXaxk2mEy6CKAj8a5IK7vB wAZUYIlf8B673Iyx8blG/U1EyIjYdxbm0fs+wes6MujoNVu7xLsVnGZNEo2L5mPd oJGFBwyw1ekccfDudZIwb7tJ458TqgTD6L7wO6A3BSQlIRmWDJRLDhslmypjnHfa cp62Lwqxs2Qi6YoKbwNBmuzYJ5hDhZ84qZehA1IPoZOPrjQfB5HDIcwjYy+sgKVU BVrFX8ihlKUAF2IuTe726n/+AK5u9mo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:19:45 2025 by rpki-client