$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa File: 31592171-b7c5-351e-9e88-b38ea9311cea.roa (raw, json) Hash identifier: ZY1Y2t2Acn7ZWrfoZz88BcgcQSJDVQruG5muCqgYgbQ= Subject key identifier: 6F:16:36:22:08:A6:0B:9C:65:C5:6F:EC:26:BF:B8:FB:0B:1E:59:5C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C58452D37B14F94F2E91F480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa Signing time: Tue 04 Feb 2025 14:07:45 +0000 ROA not before: Tue 04 Feb 2025 14:07:45 +0000 ROA not after: Mon 05 May 2025 13:07:45 +0000 asID: 30036 IP address blocks: 173.21.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:84:52:d3:7b:14:f9:4f:2e:91:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:07:45 2025 GMT Not After : May 5 13:07:45 2025 GMT Subject: CN=cf16ece1-a246-41cf-83d1-90c073863748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:5f:c0:44:7b:32:b6:83:f7:db:86:57:7c: 60:22:c4:ac:e3:85:01:a4:7e:a3:0b:38:e6:6f:2d: 6b:fb:88:7b:a5:76:61:f5:3c:1a:e9:48:50:d1:2a: 2e:a4:e1:e8:f8:14:bd:70:74:c7:d6:b5:9b:15:88: a0:82:31:21:2f:1b:ca:13:2d:9d:a3:51:cf:bc:f1: bb:4e:ab:f7:86:1e:be:62:0f:5c:20:c5:ea:f9:2c: a4:8b:9f:33:89:4a:2b:d1:c1:96:2e:72:9e:55:22: 08:22:50:50:06:f5:e5:17:0c:c4:1b:d5:0a:5a:e4: 4d:80:21:a6:5c:0c:b4:a0:bc:66:c1:ce:1e:e6:0f: 70:25:d1:35:7f:52:5b:f1:46:31:26:f8:4b:1f:71: de:e0:4d:0d:da:3d:14:96:0c:22:f2:15:f6:89:a8: 95:d1:66:fe:64:53:ba:41:4c:aa:c9:fa:2b:8c:54: 69:28:51:cb:e7:70:2a:44:e0:81:06:68:f4:78:ff: 49:3f:2e:fc:bb:f1:f9:28:86:12:1a:15:89:8b:33: 74:25:dd:bf:96:ea:3c:5a:21:0e:13:14:6f:0c:8c: 41:9c:d2:8b:60:cd:40:4b:00:3f:7c:da:64:4a:a4: c3:54:df:f4:4e:9b:9b:ce:80:78:e7:a1:57:fa:b6: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:16:36:22:08:A6:0B:9C:65:C5:6F:EC:26:BF:B8:FB:0B:1E:59:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:48:63:1e:4c:03:a6:ae:8b:f8:f5:f6:ab:cc:44:0a:23:96: ab:71:18:2d:58:1a:cb:fe:c0:8c:ea:86:3b:ce:01:c5:37:d3: 27:52:4b:fb:86:3a:04:29:e5:02:e9:7f:16:8a:71:8c:96:2c: 10:50:1f:18:2a:02:97:f6:6d:04:dd:6a:6f:13:47:c4:0c:0e: 52:a8:02:bf:d1:6e:16:dc:63:47:22:19:32:92:cc:59:72:9b: 86:ca:48:43:a1:20:c1:4b:95:21:71:bd:b9:78:11:86:f6:c7: 13:40:a0:42:50:4f:d5:e8:0d:46:24:16:78:ec:63:f7:02:f7: 9b:22:34:54:38:af:f3:5e:14:ec:11:ba:7b:76:56:0f:bb:36: ad:cb:ef:0e:5a:1b:28:f0:9d:22:39:f0:d4:96:f6:10:31:51: 9c:3a:75:d0:b3:de:0d:45:3f:b3:8a:4e:cb:c1:95:b4:29:d7: 36:9d:d5:e4:e1:9a:fa:a4:a7:10:1e:ae:33:77:53:62:4b:d2: 44:82:ab:ad:66:94:7d:30:43:0b:5f:5c:32:e5:73:5f:35:4f: f0:f4:8c:80:7f:ff:f3:85:4a:12:5a:70:45:8e:c6:c2:76:55: 55:93:e4:94:36:8e:53:27:cc:95:f3:7a:08:f5:29:ca:36:6f: 1a:88:dd:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFhFLTexT5Ty6R9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDE0MDc0NVoXDTI1MDUwNTEzMDc0NVowLzEtMCsGA1UEAxMk Y2YxNmVjZTEtYTI0Ni00MWNmLTgzZDEtOTBjMDczODYzNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleBfwER7MraD99uGV3xgIsSs44UBpH6jCzjm by1r+4h7pXZh9Twa6UhQ0SoupOHo+BS9cHTH1rWbFYiggjEhLxvKEy2do1HPvPG7 Tqv3hh6+Yg9cIMXq+Syki58ziUor0cGWLnKeVSIIIlBQBvXlFwzEG9UKWuRNgCGm XAy0oLxmwc4e5g9wJdE1f1Jb8UYxJvhLH3He4E0N2j0Ulgwi8hX2iaiV0Wb+ZFO6 QUyqyforjFRpKFHL53AqROCBBmj0eP9JPy78u/H5KIYSGhWJizN0Jd2/luo8WiEO ExRvDIxBnNKLYM1ASwA/fNpkSqTDVN/0TpubzoB456FX+rY5BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8WNiIIpgucZcVv7Ca/uPsLHllcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzE1OTIxNzEtYjdjNS0z NTFlLTllODgtYjM4ZWE5MzExY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChIYx5MA6aui/j19qvMRAojlqtxGC1YGsv+wIzqhjvOAcU30ydSS/uG OgQp5QLpfxaKcYyWLBBQHxgqApf2bQTdam8TR8QMDlKoAr/RbhbcY0ciGTKSzFly m4bKSEOhIMFLlSFxvbl4EYb2xxNAoEJQT9XoDUYkFnjsY/cC95siNFQ4r/NeFOwR unt2Vg+7Nq3L7w5aGyjwnSI58NSW9hAxUZw6ddCz3g1FP7OKTsvBlbQp1zad1eTh mvqkpxAerjN3U2JL0kSCq61mlH0wQwtfXDLlc181T/D0jIB///OFShJacEWOxsJ2 VVWT5JQ2jlMnzJXzegj1Kco2bxqI3do= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:25 2025 by rpki-client