$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3b32292-4d13-3046-85c1-5918176518b2.roa File: e3b32292-4d13-3046-85c1-5918176518b2.roa (raw, json) Hash identifier: LcY/61DX67lQw83kFq3xnEKgjE6dhVTuPmnQNyTO54E= Subject key identifier: AF:7E:79:B0:49:29:0D:4D:95:AD:BA:E3:63:A9:B0:E8:9A:2E:E9:CC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B1DD8454765FE3B932A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3b32292-4d13-3046-85c1-5918176518b2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.31.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b1:dd:84:54:76:5f:e3:b9:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5a07abca-f0fe-4da0-acd7-1682d7647943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ab:65:2a:db:58:16:75:e4:2c:77:cc:8b:fd: 95:5a:45:91:c8:93:c9:17:ba:36:93:90:06:17:ca: 49:9e:b9:c2:62:7f:94:8b:6e:2b:eb:27:f1:ff:0f: 32:77:0c:0a:4f:6f:84:47:b8:05:55:59:40:5f:f7: 65:d1:01:94:22:b1:88:f7:b5:82:9a:f9:61:00:e7: 87:c6:48:40:bd:88:a7:4b:dc:85:f3:ea:b8:7f:ce: 55:74:c6:b0:d7:74:b0:8c:cd:e1:69:f1:4d:30:f1: 89:7f:b9:8b:ab:4d:ce:b1:ea:2d:78:03:1f:21:92: 5f:ef:ca:47:52:ca:87:48:93:01:0c:46:18:4a:1a: 30:b4:b6:87:97:0d:39:65:ed:5a:4f:31:e2:c4:20: c5:98:a6:03:1d:77:43:d3:34:d9:93:b4:97:db:00: 3c:d7:8b:ca:4c:40:a6:f9:45:4f:71:4c:14:3c:d2: 78:ce:b6:01:de:74:28:4c:48:48:0e:41:7a:44:c7: 42:e2:21:f8:d1:bc:98:05:47:34:38:2e:39:9d:7d: 32:0b:0c:14:7e:04:98:11:d8:00:e3:de:81:1a:2f: fc:a2:c2:77:2e:f8:d3:fa:02:bb:03:41:0a:00:61: 35:23:1d:4c:53:13:0b:63:75:d4:b2:f3:20:d9:0d: 2f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7E:79:B0:49:29:0D:4D:95:AD:BA:E3:63:A9:B0:E8:9A:2E:E9:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3b32292-4d13-3046-85c1-5918176518b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:71:6c:8b:0e:8a:73:6b:76:73:18:8f:84:51:c5:dd:b5:40: 48:26:07:91:db:b4:b9:2e:98:5d:c5:e2:fa:c7:80:5a:e7:77: f7:5a:68:b0:79:49:bb:05:c6:09:e6:04:8c:0f:ef:46:b9:5d: 79:6b:36:5d:2f:42:ed:9c:fb:54:cc:d1:6d:ac:51:6e:e6:8d: 6e:46:e2:2c:08:13:32:a9:30:15:47:b9:25:df:77:42:fa:16: d5:63:af:94:c6:7d:23:53:b6:25:4a:5c:f4:b7:bd:67:1b:fa: 14:d7:68:0e:2d:24:6d:59:3b:78:db:2e:84:eb:e8:32:f9:98: 84:b3:7e:0c:8d:2c:20:b7:c5:ae:b0:21:f6:60:55:6d:15:a3: 08:db:3e:05:99:3c:97:f8:18:2e:82:c1:ac:e9:38:d0:74:cb: 3e:2d:f1:11:58:26:e5:57:5d:d2:05:b5:1a:be:a0:14:93:13: 61:11:83:a5:36:aa:c6:0c:ff:84:a5:4c:89:a5:83:03:a9:fb: 91:2f:11:f8:b8:bc:cd:a1:79:3f:fb:83:65:51:0e:e7:3d:e5: 42:b6:78:ec:aa:45:3e:7b:c1:59:b9:2e:59:4e:5f:10:78:89: ab:b4:62:98:40:e9:76:a5:0b:72:41:2f:e5:5c:34:bd:7f:b0: bb:88:73:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLHdhFR2X+O5MqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWEwN2FiY2EtZjBmZS00ZGEwLWFjZDctMTY4MmQ3NjQ3OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqtlKttYFnXkLHfMi/2VWkWRyJPJF7o2k5AG F8pJnrnCYn+Ui24r6yfx/w8ydwwKT2+ER7gFVVlAX/dl0QGUIrGI97WCmvlhAOeH xkhAvYinS9yF8+q4f85VdMaw13SwjM3hafFNMPGJf7mLq03OseoteAMfIZJf78pH UsqHSJMBDEYYShowtLaHlw05Ze1aTzHixCDFmKYDHXdD0zTZk7SX2wA814vKTECm +UVPcUwUPNJ4zrYB3nQoTEhIDkF6RMdC4iH40byYBUc0OC45nX0yCwwUfgSYEdgA 496BGi/8osJ3LvjT+gK7A0EKAGE1Ix1MUxMLY3XUsvMg2Q0vWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9+ebBJKQ1Nla2642OpsOiaLunMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTNiMzIyOTItNGQxMy0z MDQ2LTg1YzEtNTkxODE3NjUxOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtxbIsOinNrdnMYj4RRxd21QEgmB5HbtLkumF3F4vrHgFrnd/daaLB5 SbsFxgnmBIwP70a5XXlrNl0vQu2c+1TM0W2sUW7mjW5G4iwIEzKpMBVHuSXfd0L6 FtVjr5TGfSNTtiVKXPS3vWcb+hTXaA4tJG1ZO3jbLoTr6DL5mISzfgyNLCC3xa6w IfZgVW0VowjbPgWZPJf4GC6CwazpONB0yz4t8RFYJuVXXdIFtRq+oBSTE2ERg6U2 qsYM/4SlTImlgwOp+5EvEfi4vM2heT/7g2VRDuc95UK2eOyqRT57wVm5LllOXxB4 iau0YphA6XalC3JBL+VcNL1/sLuIc3U= -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:43 2025 by rpki-client