$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/422f09ce-096c-37b9-9248-dc937a0b94aa.roa File: 422f09ce-096c-37b9-9248-dc937a0b94aa.roa (raw, json) Hash identifier: Vb/JcnxNJCL3XDOpGaAkgMCvRWYGw5H61zdOElJs4L4= Subject key identifier: 95:F7:20:69:DF:D6:8F:A0:DA:9E:78:12:D6:7E:EC:95:5C:85:94:DD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B735DFE24DCE6E7BCD43E4C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/422f09ce-096c-37b9-9248-dc937a0b94aa.roa Signing time: Thu 30 Jan 2025 11:08:22 +0000 ROA not before: Thu 30 Jan 2025 11:08:22 +0000 ROA not after: Wed 30 Apr 2025 10:08:22 +0000 asID: 30036 IP address blocks: 173.31.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:35:df:e2:4d:ce:6e:7b:cd:43:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:08:22 2025 GMT Not After : Apr 30 10:08:22 2025 GMT Subject: CN=5879641a-8f03-4996-9055-2cf74fff637a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:87:61:b5:04:9e:bd:4a:8c:6a:63:16:39: d1:cf:36:56:e1:2f:00:4c:89:f0:b1:84:23:67:66: 1e:30:35:ce:92:16:e3:86:ab:be:be:6f:a3:4e:4a: d7:ad:04:a5:25:8a:c9:73:a9:3e:03:b5:14:49:4c: 8d:50:9c:3c:f6:ec:18:bb:1e:8e:ad:82:bf:10:d2: fa:11:19:d7:48:f7:3e:fd:94:8f:f6:6f:33:9a:05: 12:37:f7:96:1a:2a:98:1b:d9:6f:56:f6:6f:4e:5f: 68:4d:27:89:d4:05:66:4f:86:ed:01:7d:49:6f:87: 34:ad:23:80:f0:8b:92:b5:f0:c3:45:ac:7b:f0:fe: 95:6b:9d:a9:52:44:75:0f:71:1c:a5:b8:58:a2:7a: 41:85:6f:d5:ec:18:37:1b:8b:d2:92:03:be:1a:0a: 1d:36:24:54:db:47:44:06:a9:75:97:3b:59:a8:ae: fc:7f:2a:09:d4:97:d3:84:54:27:9f:38:a3:90:e0: bf:86:9c:e8:44:57:5f:d5:71:db:83:e0:de:3d:81: 4b:e6:c5:ba:dd:e1:bc:c8:8b:34:98:50:72:ba:91: 3b:07:29:21:48:9f:74:3e:94:f3:74:7b:f1:8f:ee: f6:4d:fa:ce:e2:27:58:df:78:ea:b8:60:51:1a:b8: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F7:20:69:DF:D6:8F:A0:DA:9E:78:12:D6:7E:EC:95:5C:85:94:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/422f09ce-096c-37b9-9248-dc937a0b94aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:53:19:15:ec:c3:a0:a4:5b:3a:3b:35:0e:63:b3:0d:8f:0f: e6:65:98:1d:0a:50:60:60:18:de:80:6c:8e:90:fb:17:2b:44: 68:1b:a7:97:d6:13:71:83:f6:d5:3a:78:fd:96:02:f0:79:be: f1:59:43:5f:eb:1a:c7:5f:00:a9:32:2e:02:bc:66:36:5e:69: f4:37:4c:5a:38:34:d9:59:ce:0a:e1:e6:2a:aa:f2:71:b7:14: f3:10:2d:b2:fb:e4:8a:e5:c6:37:b0:75:11:19:4f:8f:1b:be: 6d:a7:01:94:c8:7d:f9:11:5f:50:13:6a:3e:14:f4:e8:b0:a0: 07:53:83:e0:49:43:1a:38:ec:f1:28:8e:54:17:b9:4a:b7:38: 7f:be:44:3f:d6:f0:2b:68:36:4b:84:20:65:c3:74:d7:e8:d0: 9d:b2:b6:02:71:a1:ee:96:26:fb:d1:e7:ab:04:d7:70:4f:f3: 06:6d:f0:80:b3:58:d5:54:bd:e2:c9:78:17:67:c5:0d:99:2d: 36:81:11:25:34:b2:64:03:9a:dd:30:c4:9c:7e:3e:5e:09:91: 76:b4:55:e5:38:c3:a7:26:64:40:71:0f:a6:55:97:cb:15:30: 67:93:ca:50:68:76:4a:53:33:b6:c0:df:08:db:48:06:21:18: 8d:cd:74:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nd/iTc5ue81D5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDgyMloXDTI1MDQzMDEwMDgyMlowLzEtMCsGA1UEAxMk NTg3OTY0MWEtOGYwMy00OTk2LTkwNTUtMmNmNzRmZmY2MzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYeHYbUEnr1KjGpjFjnRzzZW4S8ATInwsYQj Z2YeMDXOkhbjhqu+vm+jTkrXrQSlJYrJc6k+A7UUSUyNUJw89uwYux6OrYK/ENL6 ERnXSPc+/ZSP9m8zmgUSN/eWGiqYG9lvVvZvTl9oTSeJ1AVmT4btAX1Jb4c0rSOA 8IuStfDDRax78P6Va52pUkR1D3EcpbhYonpBhW/V7Bg3G4vSkgO+GgodNiRU20dE Bql1lztZqK78fyoJ1JfThFQnnzijkOC/hpzoRFdf1XHbg+DePYFL5sW63eG8yIs0 mFByupE7BykhSJ90PpTzdHvxj+72TfrO4idY33jquGBRGrjQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX3IGnf1o+g2p54EtZ+7JVchZTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDIyZjA5Y2UtMDk2Yy0z N2I5LTkyNDgtZGM5MzdhMGI5NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlTGRXsw6CkWzo7NQ5jsw2PD+ZlmB0KUGBgGN6AbI6Q+xcrRGgbp5fW E3GD9tU6eP2WAvB5vvFZQ1/rGsdfAKkyLgK8ZjZeafQ3TFo4NNlZzgrh5iqq8nG3 FPMQLbL75IrlxjewdREZT48bvm2nAZTIffkRX1ATaj4U9OiwoAdTg+BJQxo47PEo jlQXuUq3OH++RD/W8CtoNkuEIGXDdNfo0J2ytgJxoe6WJvvR56sE13BP8wZt8ICz WNVUveLJeBdnxQ2ZLTaBESU0smQDmt0wxJx+Pl4JkXa0VeU4w6cmZEBxD6ZVl8sV MGeTylBodkpTM7bA3wjbSAYhGI3NdOc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:31 2025 by rpki-client