$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa File: f517e84b-69d0-3448-9570-af536e4d8faf.roa (raw, json) Hash identifier: M4XzHxNcPNnLfDv0tsYlw5vuQpGZH0xFppYgJ1GOpUs= Subject key identifier: E2:06:82:2D:B8:DD:8F:2F:68:66:98:24:AA:DA:45:8F:41:D2:3B:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849EB667C6914D12088A63E3B20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa Signing time: Tue 20 May 2025 20:35:17 +0000 ROA not before: Tue 20 May 2025 20:35:17 +0000 ROA not after: Mon 18 Aug 2025 20:35:17 +0000 asID: 30036 IP address blocks: 173.31.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:66:7c:69:14:d1:20:88:a6:3e:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 20 20:35:17 2025 GMT Not After : Aug 18 20:35:17 2025 GMT Subject: CN=0f2a0e14-c422-4104-a87e-8a0d0861656d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:4b:2e:a1:71:6e:04:7a:60:db:c1:f2:20: bb:91:99:8f:e2:75:4b:90:1a:ff:7e:1b:13:b2:9c: 6a:6c:e9:1b:11:ff:98:84:bc:4d:5b:9d:22:10:27: ae:c6:55:88:e4:48:f6:43:86:f5:8f:21:49:89:4b: e0:06:e9:cd:7e:6a:a1:2a:17:12:0f:77:42:7e:9b: 7e:a4:ac:61:d8:28:a2:dc:e4:03:e9:73:80:2b:4e: 25:6b:92:8d:0b:7c:a7:de:8f:8d:7f:5b:f1:ef:cb: c3:ff:be:1b:3f:13:6b:c4:c5:6e:de:66:dc:d2:b8: 46:7e:90:27:94:71:6e:d5:34:51:b6:a6:3c:10:45: 7b:d6:9c:5a:d9:06:37:b0:b8:b3:ad:92:a1:ac:b4: ce:27:1c:98:85:e4:31:e2:b4:7a:11:82:e6:30:54: 78:fc:07:a0:e9:40:88:11:f4:4e:ad:da:eb:99:cb: 5c:73:cb:fb:87:d3:47:a8:3c:bd:ad:a4:59:e5:cd: f8:7b:f9:b2:1f:45:b1:4f:65:2d:f9:1a:3c:e3:9e: 3b:d7:a4:23:7e:9f:41:50:68:fe:f9:ea:06:11:6a: 48:6c:67:11:e7:cf:58:c4:23:08:b6:eb:2b:38:37: 15:a5:06:52:ba:b5:e3:5d:15:d6:35:57:09:f6:59: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:06:82:2D:B8:DD:8F:2F:68:66:98:24:AA:DA:45:8F:41:D2:3B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:db:4f:7b:e8:ab:3d:c1:82:5c:ee:25:17:7e:ac:60:92:14: b9:68:93:17:d1:fa:49:96:21:54:e1:43:c2:73:60:88:5c:ae: 7c:11:51:4d:c9:62:be:34:17:a1:de:a9:ba:0a:b4:d8:d8:43: 7e:3f:af:e1:5d:05:01:96:49:98:9d:b7:ad:b5:3d:43:ae:30: 78:37:b6:ff:da:9c:0c:72:b4:f4:c8:25:d1:04:b0:11:da:4c: 7e:65:77:2f:0e:d5:68:e8:a6:3d:c9:9f:d2:0a:bb:42:6f:7b: 58:95:16:b3:28:cc:6d:c8:37:fe:25:84:8d:a3:1c:7e:75:e3: ff:86:b5:80:65:73:df:3c:f3:c8:b2:82:7d:b3:39:f2:e8:db: 9c:72:39:ab:d9:46:56:29:e5:61:0c:f0:86:45:eb:2b:7f:42: 04:72:4e:f3:cb:01:c8:5b:94:fc:58:e1:b9:0c:45:dc:3b:53: 44:5b:af:92:0e:45:3d:d6:c8:84:f2:7b:92:ce:74:1c:f1:b8: 8a:32:96:00:8c:ad:b5:38:dc:52:96:0c:47:a8:c1:a2:96:f7: f7:d5:8f:76:16:56:79:20:5f:18:83:2c:c9:67:2f:42:cf:b5: a7:c8:69:a6:36:cd:28:78:de:1c:72:78:f5:1e:d2:ba:4b:d3: a5:04:ad:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnrZnxpFNEgiKY+OyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyMDIwMzUxN1oXDTI1MDgxODIwMzUxN1owLzEtMCsGA1UEAxMk MGYyYTBlMTQtYzQyMi00MTA0LWE4N2UtOGEwZDA4NjE2NTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQFLLqFxbgR6YNvB8iC7kZmP4nVLkBr/fhsT spxqbOkbEf+YhLxNW50iECeuxlWI5Ej2Q4b1jyFJiUvgBunNfmqhKhcSD3dCfpt+ pKxh2Cii3OQD6XOAK04la5KNC3yn3o+Nf1vx78vD/74bPxNrxMVu3mbc0rhGfpAn lHFu1TRRtqY8EEV71pxa2QY3sLizrZKhrLTOJxyYheQx4rR6EYLmMFR4/Aeg6UCI EfROrdrrmctcc8v7h9NHqDy9raRZ5c34e/myH0WxT2Ut+Ro8454716Qjfp9BUGj+ +eoGEWpIbGcR589YxCMItusrODcVpQZSurXjXRXWNVcJ9lk1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIGgi243Y8vaGaYJKraRY9B0jvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjUxN2U4NGItNjlkMC0z NDQ4LTk1NzAtYWY1MzZlNGQ4ZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7bT3voqz3BglzuJRd+rGCSFLlokxfR+kmWIVThQ8JzYIhcrnwRUU3J Yr40F6HeqboKtNjYQ34/r+FdBQGWSZidt621PUOuMHg3tv/anAxytPTIJdEEsBHa TH5ldy8O1Wjopj3Jn9IKu0Jve1iVFrMozG3IN/4lhI2jHH514/+GtYBlc98888iy gn2zOfLo25xyOavZRlYp5WEM8IZF6yt/QgRyTvPLAchblPxY4bkMRdw7U0Rbr5IO RT3WyITye5LOdBzxuIoylgCMrbU43FKWDEeowaKW9/fVj3YWVnkgXxiDLMlnL0LP tafIaaY2zSh43hxyePUe0rpL06UErXc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:30:06 2025 by rpki-client