$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa File: d01ab5bd-8e67-3001-a4ea-48358502331a.roa (raw, json) Hash identifier: D/6Gx3LsRnqv/41GNtm+t04ARWOtuBZTSZVDDQFeCmY= Subject key identifier: C5:97:53:9B:19:6E:FE:16:21:C5:E6:37:66:0E:77:AA:43:49:7E:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA0ABB638506DD1B5CDF60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:0a:bb:63:85:06:dd:1b:5c:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=73fcc164-dc1e-446c-b152-15fd027974fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:d5:1d:40:92:51:8a:81:f8:99:5e:bf:ae: a9:26:16:a7:f3:c8:ae:6e:b7:cb:46:04:8c:74:54: 27:75:ac:f3:e6:56:56:2e:68:db:0b:a7:59:61:5c: 1a:b1:ad:8b:98:ac:db:22:81:ab:08:b5:ef:b7:4a: 1f:45:7c:b1:12:12:08:0c:a2:76:85:9f:2c:d7:b3: 01:87:39:d7:a2:67:4a:43:d0:3e:0c:2e:bf:38:1b: 56:9e:8d:73:17:bf:a4:77:24:e5:5f:2c:68:1d:84: 50:9b:39:92:17:93:f4:d4:83:82:f8:70:e3:9a:72: 8b:37:42:1d:84:40:85:ce:5d:1f:a1:50:a9:7f:a8: 88:dc:8d:16:6e:a8:22:2c:b5:27:d8:aa:8c:09:e2: f5:25:11:a6:88:9e:ff:8b:71:e2:87:80:a4:2e:92: 15:a6:78:65:63:15:ab:e4:30:81:9e:b0:75:5e:9e: e8:40:3f:dc:62:f6:56:98:9c:7e:b3:c0:1e:43:45: 04:d6:54:e7:6d:86:1e:f3:1b:b4:09:66:7b:63:4b: d9:de:cf:98:c7:48:c5:ca:78:02:56:64:d9:87:07: 8c:5c:0c:1c:07:d2:81:35:26:86:96:63:43:22:ff: cc:ab:24:2e:a7:1d:e6:c6:02:7f:d3:fc:83:53:9b: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:97:53:9B:19:6E:FE:16:21:C5:E6:37:66:0E:77:AA:43:49:7E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:91:93:6a:46:b8:b2:c3:36:d9:60:df:df:5f:ae:38:54:71: 72:4f:09:32:1e:e9:2d:6b:01:90:bf:54:5f:19:5f:68:36:16: 9e:47:14:53:a2:0a:5c:0a:e4:70:7f:5c:5e:ae:5c:96:7f:ca: 46:46:88:7d:c5:1d:93:d5:88:aa:49:9c:16:7d:f5:6d:3a:59: fe:88:e0:ea:d8:25:ed:49:2d:63:89:e2:d0:27:66:9b:97:82: 5b:13:6b:61:bc:f1:5f:01:40:27:30:ba:24:f0:93:dc:59:04: 06:a8:5e:91:9a:e3:f8:34:cf:0a:1c:28:37:86:b4:5b:ef:1d: 41:84:cc:7b:cb:86:2a:9e:93:8f:6b:30:86:85:b8:a3:fb:df: 89:26:2f:4f:83:f7:cd:1b:73:e2:a6:cc:c6:f4:c8:d0:1d:6c: 92:bd:10:3c:39:29:4c:b3:31:cf:5c:94:b6:92:06:b0:1c:70: 23:99:ee:33:dc:19:05:6d:cc:22:f4:b9:51:2a:cb:d7:da:82: 69:bf:77:28:3c:9e:68:0a:d4:0b:02:98:69:d7:3b:40:1d:25: 69:5f:64:76:18:bc:be:de:df:7c:00:cd:7c:08:94:d5:a2:57: e4:4d:8e:c4:01:0d:4f:f8:e7:e8:9d:94:73:6c:cf:77:49:00: 67:00:35:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugq7Y4UG3Rtc32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzNmY2MxNjQtZGMxZS00NDZjLWIxNTItMTVmZDAyNzk3NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZzVHUCSUYqB+Jlev66pJhan88iubrfLRgSM dFQndazz5lZWLmjbC6dZYVwasa2LmKzbIoGrCLXvt0ofRXyxEhIIDKJ2hZ8s17MB hznXomdKQ9A+DC6/OBtWno1zF7+kdyTlXyxoHYRQmzmSF5P01IOC+HDjmnKLN0Id hECFzl0foVCpf6iI3I0WbqgiLLUn2KqMCeL1JRGmiJ7/i3Hih4CkLpIVpnhlYxWr 5DCBnrB1Xp7oQD/cYvZWmJx+s8AeQ0UE1lTnbYYe8xu0CWZ7Y0vZ3s+Yx0jFyngC VmTZhweMXAwcB9KBNSaGlmNDIv/MqyQupx3mxgJ/0/yDU5vRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWXU5sZbv4WIcXmN2YOd6pDSX7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDAxYWI1YmQtOGU2Ny0z MDAxLWE0ZWEtNDgzNTg1MDIzMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeRk2pGuLLDNtlg399frjhUcXJPCTIe6S1rAZC/VF8ZX2g2Fp5HFFOi ClwK5HB/XF6uXJZ/ykZGiH3FHZPViKpJnBZ99W06Wf6I4OrYJe1JLWOJ4tAnZpuX glsTa2G88V8BQCcwuiTwk9xZBAaoXpGa4/g0zwocKDeGtFvvHUGEzHvLhiqek49r MIaFuKP734kmL0+D980bc+KmzMb0yNAdbJK9EDw5KUyzMc9clLaSBrAccCOZ7jPc GQVtzCL0uVEqy9fagmm/dyg8nmgK1AsCmGnXO0AdJWlfZHYYvL7e33wAzXwIlNWi V+RNjsQBDU/45+idlHNsz3dJAGcANZc= -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:07 2025 by rpki-client