$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa File: f35ce1d9-4792-36cc-964a-028ad14820ea.roa (raw, json) Hash identifier: Jdnv5bBIyAitSHY/n1dDjsGYkyrCjgNwGd88Uo4vuyM= Subject key identifier: 51:89:D2:1F:27:DB:58:63:6F:C0:FF:71:A2:02:95:BA:39:B5:85:A5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B17343590D39522652F0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.31.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b1:73:43:59:0d:39:52:26:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ab444794-9292-4add-be1d-b4f69e10b0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:66:e3:56:78:7b:1d:f9:ab:0d:15:0b:d6:ea: fb:4d:1f:f7:81:af:21:03:91:f6:79:b3:78:79:c0: d4:92:8e:62:fa:55:dd:9b:4e:f2:6c:13:58:51:15: bc:e5:f7:c4:4f:87:82:4c:46:ba:5f:a9:6c:8f:23: 4f:16:dc:15:52:fd:b7:0b:83:84:04:84:ad:05:71: aa:2d:bf:38:ba:a1:36:49:f6:30:55:0c:e2:85:dd: f9:c7:d9:a9:a9:62:5d:ab:6e:65:d6:96:96:48:7f: dd:60:dd:88:c5:84:26:df:75:03:94:cc:1f:3f:a6: 98:2a:31:65:f5:9f:8a:c2:00:bc:5f:0c:d6:66:7f: ca:a0:f3:7d:53:8a:8c:89:b7:78:3c:9d:06:58:4b: fa:9f:53:6e:c8:f9:41:d1:7b:e8:08:d5:07:c7:dc: 9a:dc:db:12:f0:dc:38:f4:8e:1b:36:32:28:4d:64: ec:96:a6:32:75:04:ea:76:00:21:63:30:03:75:bb: d5:84:f9:b0:6b:56:4e:7d:6a:a9:27:72:e7:11:eb: ee:09:44:49:b3:1c:62:66:ac:24:77:26:f9:db:b9: ec:06:93:25:fa:c3:d3:c6:bb:17:ff:4d:09:1d:2f: 95:17:bf:c6:64:9e:96:47:9f:98:eb:77:ed:2a:e3: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:89:D2:1F:27:DB:58:63:6F:C0:FF:71:A2:02:95:BA:39:B5:85:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:bc:34:e4:3d:b1:36:a2:82:f7:c7:96:5c:5b:c1:7a:d1:07: cf:73:78:1f:99:13:08:86:bb:a8:26:8b:2f:75:3b:3d:cc:d0: a8:99:df:44:cd:06:6c:3a:2f:2a:eb:66:18:4f:3c:ab:cc:80: 88:c3:a7:cb:5a:ee:50:05:8e:4e:7c:aa:20:53:25:69:30:fd: 61:85:4e:1a:ef:47:85:32:f7:79:b0:bd:e0:9d:2e:5a:c7:71: 48:9c:46:17:16:18:3d:e7:c7:a2:e6:bf:ae:8a:6b:79:54:ee: 38:7f:75:0a:7c:7a:ca:f4:47:ea:62:88:bc:f5:98:39:bf:40: 15:70:c7:1e:e0:83:a1:46:ba:1a:9e:be:d8:b9:97:28:d0:e0: 8e:9f:76:8d:7a:36:b7:d0:35:af:b2:7b:e9:f4:35:d9:41:bb: 0f:f7:05:27:16:0f:7a:5b:bf:a7:39:31:d3:48:14:40:2b:d6: a0:9d:4d:86:b7:9c:8a:49:00:09:0b:cd:8a:40:30:d1:b1:16: e7:72:11:51:c4:94:98:bb:54:50:1f:a2:be:87:a7:c7:f3:41: 35:c5:fc:db:73:1f:c6:81:b3:8b:04:69:70:e1:cc:0e:e6:9a: 20:8b:04:8a:90:bf:e0:98:ea:fc:0b:78:b0:97:be:fd:db:43: f9:9c:1d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLFzQ1kNOVImUvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWI0NDQ3OTQtOTI5Mi00YWRkLWJlMWQtYjRmNjllMTBiMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmbjVnh7HfmrDRUL1ur7TR/3ga8hA5H2ebN4 ecDUko5i+lXdm07ybBNYURW85ffET4eCTEa6X6lsjyNPFtwVUv23C4OEBIStBXGq Lb84uqE2SfYwVQzihd35x9mpqWJdq25l1paWSH/dYN2IxYQm33UDlMwfP6aYKjFl 9Z+KwgC8XwzWZn/KoPN9U4qMibd4PJ0GWEv6n1NuyPlB0XvoCNUHx9ya3NsS8Nw4 9I4bNjIoTWTslqYydQTqdgAhYzADdbvVhPmwa1ZOfWqpJ3LnEevuCURJsxxiZqwk dyb527nsBpMl+sPTxrsX/00JHS+VF7/GZJ6WR5+Y63ftKuNu+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGJ0h8n21hjb8D/caIClbo5tYWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjM1Y2UxZDktNDc5Mi0z NmNjLTk2NGEtMDI4YWQxNDgyMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK8NOQ9sTaigvfHllxbwXrRB89zeB+ZEwiGu6gmiy91Oz3M0KiZ30TN Bmw6LyrrZhhPPKvMgIjDp8ta7lAFjk58qiBTJWkw/WGFThrvR4Uy93mwveCdLlrH cUicRhcWGD3nx6Lmv66Ka3lU7jh/dQp8esr0R+piiLz1mDm/QBVwxx7gg6FGuhqe vti5lyjQ4I6fdo16NrfQNa+ye+n0NdlBuw/3BScWD3pbv6c5MdNIFEAr1qCdTYa3 nIpJAAkLzYpAMNGxFudyEVHElJi7VFAfor6Hp8fzQTXF/NtzH8aBs4sEaXDhzA7m miCLBIqQv+CY6vwLeLCXvv3bQ/mcHQI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:07 2025 by rpki-client