$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5295c4a-7939-346f-884e-ccf0f411e8e3.roa File: d5295c4a-7939-346f-884e-ccf0f411e8e3.roa (raw, json) Hash identifier: 3yiJMOAhr5Q55q6y7wsAzgKX65BRpn4RFI1ne6kubmo= Subject key identifier: 83:6D:59:E2:A3:F5:16:25:17:4C:A1:D6:42:FD:02:16:94:75:61:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDF186601A1974E43AA200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5295c4a-7939-346f-884e-ccf0f411e8e3.roa Signing time: Thu 24 Apr 2025 11:53:55 +0000 ROA not before: Thu 24 Apr 2025 11:53:55 +0000 ROA not after: Wed 23 Jul 2025 11:53:55 +0000 asID: 19905 IP address blocks: 173.31.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:f1:86:60:1a:19:74:e4:3a:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:55 2025 GMT Not After : Jul 23 11:53:55 2025 GMT Subject: CN=509f02cb-87dc-40dd-870a-eaf45c35fc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:99:c6:79:ed:e6:cb:16:3a:2c:af:79:d1: c5:b9:48:e8:66:9d:f4:fe:d6:cc:86:89:38:fb:fb: ef:4f:c5:e8:f8:91:f7:94:d8:65:ee:2b:8b:46:bc: cf:46:65:4f:fa:fa:9d:f2:13:c7:09:42:19:b7:5c: 2d:3c:b9:59:b9:e4:85:41:25:5e:ea:e6:f7:01:ba: ba:89:25:40:74:1d:d3:a7:23:69:76:78:9b:0d:5e: 4d:d7:5c:b1:29:eb:81:98:0b:5e:28:4e:7d:1c:28: 79:f2:2c:96:98:49:4e:d4:b4:4e:e7:f5:90:14:21: 08:df:01:d1:6d:1d:e8:ba:15:78:24:1a:a7:f5:d4: 27:a5:0f:eb:17:a4:06:a1:bb:8d:83:63:a2:25:f5: 5b:bb:ec:bc:a6:62:26:d5:c8:fb:6b:12:b5:25:6f: 50:1e:13:79:b8:3d:e4:f0:29:46:46:71:db:df:a2: 89:70:18:0f:e9:ae:b0:48:c7:24:93:56:40:75:c6: 12:c7:08:08:3b:db:96:49:71:c4:3b:1d:f2:44:1c: 69:b8:78:bd:50:e3:7f:6c:4d:24:66:9c:e1:c1:e9: 00:95:a5:85:d0:0d:bc:aa:85:b9:37:fd:91:f6:53: f7:7e:0e:e4:fd:6c:cb:48:1b:99:1e:ca:a3:ce:12: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6D:59:E2:A3:F5:16:25:17:4C:A1:D6:42:FD:02:16:94:75:61:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5295c4a-7939-346f-884e-ccf0f411e8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:42:de:94:7f:ec:54:da:00:b6:ce:83:3f:5f:78:bc:b8:e0: cf:bb:bf:91:89:8c:2d:32:ac:72:b3:ac:62:5d:cb:96:26:c2: 2b:0c:55:c0:7b:0c:87:cc:0b:0e:3b:e8:ce:c1:12:75:14:9c: d5:92:02:d5:38:df:67:5e:77:44:60:be:d5:20:22:e1:6f:04: e0:3a:24:6c:d2:1c:b0:ff:51:e1:00:53:73:4f:a1:64:07:f6: 11:e7:7d:75:75:fa:e0:5c:ea:12:77:6a:6f:6f:05:19:0d:af: 86:23:7c:29:ee:de:c0:e2:73:fc:fe:a2:55:a4:29:d3:46:d5: 9e:bd:e4:27:ee:55:39:da:c7:68:32:06:69:66:52:3b:91:86: df:19:cc:dd:b1:70:79:6d:8a:d8:02:17:e6:79:15:e7:e8:59: bc:45:fa:df:4b:71:7a:70:d1:2f:f1:1b:f8:34:15:18:f9:5b: ff:3f:54:a0:dc:2d:5e:3e:74:12:ee:c5:ce:b3:3c:c8:a8:46: 9a:e3:4b:ad:e6:90:c6:08:80:4e:3b:9d:14:5a:2a:dd:d6:42: f2:32:91:af:42:e7:0d:84:04:7a:27:80:14:0c:98:f8:6e:08: 04:07:68:79:ed:cd:70:97:8a:fa:e0:86:5c:92:72:70:91:ee: 20:cb:6a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzfGGYBoZdOQ6ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTM1NVoXDTI1MDcyMzExNTM1NVowLzEtMCsGA1UEAxMk NTA5ZjAyY2ItODdkYy00MGRkLTg3MGEtZWFmNDVjMzVmYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwqZxnnt5ssWOiyvedHFuUjoZp30/tbMhok4 +/vvT8Xo+JH3lNhl7iuLRrzPRmVP+vqd8hPHCUIZt1wtPLlZueSFQSVe6ub3Abq6 iSVAdB3TpyNpdnibDV5N11yxKeuBmAteKE59HCh58iyWmElO1LRO5/WQFCEI3wHR bR3ouhV4JBqn9dQnpQ/rF6QGobuNg2OiJfVbu+y8pmIm1cj7axK1JW9QHhN5uD3k 8ClGRnHb36KJcBgP6a6wSMckk1ZAdcYSxwgIO9uWSXHEOx3yRBxpuHi9UON/bE0k ZpzhwekAlaWF0A28qoW5N/2R9lP3fg7k/WzLSBuZHsqjzhKh5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINtWeKj9RYlF0yh1kL9AhaUdWGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDUyOTVjNGEtNzkzOS0z NDZmLTg4NGUtY2NmMGY0MTFlOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR89MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRC3pR/7FTaALbOgz9feLy44M+7v5GJjC0yrHKzrGJdy5YmwisMVcB7 DIfMCw476M7BEnUUnNWSAtU432ded0RgvtUgIuFvBOA6JGzSHLD/UeEAU3NPoWQH 9hHnfXV1+uBc6hJ3am9vBRkNr4YjfCnu3sDic/z+olWkKdNG1Z695CfuVTnax2gy BmlmUjuRht8ZzN2xcHltitgCF+Z5FefoWbxF+t9LcXpw0S/xG/g0FRj5W/8/VKDc LV4+dBLuxc6zPMioRprjS63mkMYIgE47nRRaKt3WQvIyka9C5w2EBHongBQMmPhu CAQHaHntzXCXivrghlyScnCR7iDLavA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:19 2025 by rpki-client