$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa File: db192c87-71b8-3a46-a574-845bd837a8f4.roa (raw, json) Hash identifier: E17hVsq3sqj6AIWhJl6gdM1HixmEtGa66xhh0cXEB1E= Subject key identifier: 7B:2E:B8:1F:D8:C7:A7:5F:C9:0D:84:F9:EA:AC:2E:58:48:28:AA:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA0A8BAE1358BA67829FA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.31.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:0a:8b:ae:13:58:ba:67:82:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b089a358-da35-424d-a325-4dc994b47d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:b1:8a:62:83:ee:d3:fb:c9:59:47:3f:de: 58:b6:d2:50:48:7f:d6:21:d9:fd:f0:48:dd:b7:fc: 57:8d:38:69:c0:d2:0f:df:38:0f:7b:57:10:09:24: 11:c7:09:cb:aa:06:90:e2:62:00:ba:3d:e4:0f:89: bf:f5:12:25:a8:2f:bc:b2:72:72:fa:92:6a:09:ae: 16:8d:89:ac:bd:27:98:de:f2:ae:5b:9b:53:d5:61: 13:60:a9:88:df:03:42:92:1f:38:53:ae:d1:5e:89: df:d9:8f:63:b4:77:cd:78:1c:92:20:a7:d0:58:27: 4a:68:ff:60:9e:8c:19:35:36:ab:9e:b0:6b:ed:f5: 3f:7b:a6:e1:e3:ba:3b:45:d7:1c:d4:c8:e7:6e:69: 3e:d0:66:f2:1f:14:72:d2:17:9c:ec:17:d6:cd:47: 5c:29:29:20:4f:f9:c0:35:07:33:cf:11:56:68:8f: 3d:4f:35:7e:0f:ee:73:e1:b3:4d:28:59:ae:30:c3: ea:17:54:ba:95:78:bf:a4:15:2e:bb:48:6c:aa:df: d2:e6:2c:ae:96:e4:48:70:ea:d0:58:72:51:ae:0b: b3:4a:9e:ab:cf:48:cf:5f:52:ce:ab:28:cf:9f:c7: 81:25:78:49:cb:64:3c:d8:a5:c0:24:e6:6b:71:bb: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2E:B8:1F:D8:C7:A7:5F:C9:0D:84:F9:EA:AC:2E:58:48:28:AA:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:45:24:ee:6f:4a:19:f4:c0:b4:58:f3:b0:be:b3:ca:e0:ef: d6:27:66:b9:cc:89:1a:d8:d5:e7:23:fd:30:fc:bb:bb:bb:5b: ef:ee:66:89:54:e1:a5:49:9d:c6:f6:93:3d:1f:d4:cb:b2:dc: df:79:58:ce:97:36:30:ff:cb:43:93:7d:4a:dc:17:6e:e4:3b: f4:b0:5e:26:93:99:f3:d6:1b:53:95:6e:dc:4f:cd:e7:b1:24: 9a:87:a4:f2:6c:b6:d0:05:c9:34:d0:e3:9a:5a:b9:dc:ad:23: fd:02:68:08:0d:22:d3:70:18:06:7c:31:5f:88:3a:25:eb:99: 83:ec:d4:0a:0c:b7:c0:3e:ad:ad:9e:eb:f6:49:df:d8:18:20: 4f:f2:5c:6f:e6:24:e8:04:04:e2:ad:ed:db:d4:44:85:b8:a9: 6f:8d:90:c9:b2:a8:b2:cc:4b:6d:92:73:f3:59:06:ca:a1:ce: be:be:f3:3e:64:7e:31:e5:f5:b3:b8:ce:b6:cc:93:a1:30:39: 60:f2:32:e6:c4:81:bd:71:bc:5b:b1:c3:86:ff:66:d6:e2:85: 6b:60:96:e9:62:66:8a:00:0b:ed:69:51:31:ff:57:a2:47:6e: 58:85:c5:6e:ba:e1:96:d7:36:16:76:1b:11:1f:31:03:a3:a8: 84:a9:c1:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugqLrhNYumeCn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjA4OWEzNTgtZGEzNS00MjRkLWEzMjUtNGRjOTk0YjQ3ZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua2ximKD7tP7yVlHP95YttJQSH/WIdn98Ejd t/xXjThpwNIP3zgPe1cQCSQRxwnLqgaQ4mIAuj3kD4m/9RIlqC+8snJy+pJqCa4W jYmsvSeY3vKuW5tT1WETYKmI3wNCkh84U67RXonf2Y9jtHfNeBySIKfQWCdKaP9g nowZNTarnrBr7fU/e6bh47o7Rdcc1Mjnbmk+0GbyHxRy0hec7BfWzUdcKSkgT/nA NQczzxFWaI89TzV+D+5z4bNNKFmuMMPqF1S6lXi/pBUuu0hsqt/S5iyuluRIcOrQ WHJRrguzSp6rz0jPX1LOqyjPn8eBJXhJy2Q82KXAJOZrcbvJEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsuuB/Yx6dfyQ2E+eqsLlhIKKrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGIxOTJjODctNzFiOC0z YTQ2LWE1NzQtODQ1YmQ4MzdhOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARFJO5vShn0wLRY87C+s8rg79YnZrnMiRrY1ecj/TD8u7u7W+/uZolU 4aVJncb2kz0f1Muy3N95WM6XNjD/y0OTfUrcF27kO/SwXiaTmfPWG1OVbtxPzeex JJqHpPJsttAFyTTQ45paudytI/0CaAgNItNwGAZ8MV+IOiXrmYPs1AoMt8A+ra2e 6/ZJ39gYIE/yXG/mJOgEBOKt7dvURIW4qW+NkMmyqLLMS22Sc/NZBsqhzr6+8z5k fjHl9bO4zrbMk6EwOWDyMubEgb1xvFuxw4b/ZtbihWtgluliZooAC+1pUTH/V6JH bliFxW664ZbXNhZ2GxEfMQOjqISpwVU= -----END CERTIFICATE-----Generated at Mon Apr 28 15:28:30 2025 by rpki-client