$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa File: 823787c9-4c7c-389b-ba8a-83e6f50e1293.roa (raw, json) Hash identifier: QhTQa7de1/qkgxxEhPO7VD+Hwce48Km3TyzBZ5hioXQ= Subject key identifier: 6F:51:D2:DA:10:D4:5E:9C:19:FF:A0:42:4F:D8:D6:7D:E5:39:4F:9B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B73744AABB4D0971B389A500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa Signing time: Thu 30 Jan 2025 11:11:10 +0000 ROA not before: Thu 30 Jan 2025 11:11:10 +0000 ROA not after: Wed 30 Apr 2025 10:11:10 +0000 asID: 30036 IP address blocks: 173.31.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:44:aa:bb:4d:09:71:b3:89:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:11:10 2025 GMT Not After : Apr 30 10:11:10 2025 GMT Subject: CN=ad24b0e6-db13-4f6e-beeb-495827762386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cf:f8:f7:2f:f8:1b:9b:f0:ec:62:f9:e3:c9: 1c:28:f4:9f:4e:66:03:4e:31:b7:3a:da:54:ac:af: a8:70:95:be:f4:8f:cd:5b:2a:4e:7b:7e:56:e3:63: 13:41:c4:d8:2c:34:4a:fe:3b:f0:5d:49:f2:2e:a6: 25:c3:6d:3d:43:86:84:51:d2:98:9c:25:4a:1a:3f: 96:fd:c3:ca:68:43:09:1e:1e:c6:72:fe:4d:8b:43: d9:32:f1:6c:e1:e3:34:9c:48:48:2b:b9:ab:09:ec: a2:c7:64:11:c3:cb:4a:49:eb:65:98:a9:bc:44:1d: 0d:dd:c4:b4:38:6c:13:d4:c8:7d:8f:4d:b7:af:08: 41:8c:10:1a:f9:ee:6c:d9:6c:c2:f0:27:11:b2:a3: 81:ff:f8:8a:a2:9b:17:f6:d4:e1:cc:43:49:8d:5e: 6b:3d:da:2d:af:9f:ab:8a:0e:60:df:3e:de:27:76: 0c:da:33:e1:1d:1b:9d:15:63:90:27:03:be:cf:d7: 46:80:dd:41:4e:67:bb:f8:8b:a4:03:46:47:74:fa: ff:45:73:26:a5:22:c7:e8:a9:02:6c:08:2d:80:1a: 8c:bb:98:be:e6:8c:32:6b:6a:e4:9d:97:a6:15:80: 24:fe:fe:4e:fd:04:0e:52:b2:9d:51:5a:e3:59:43: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:51:D2:DA:10:D4:5E:9C:19:FF:A0:42:4F:D8:D6:7D:E5:39:4F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:36:bc:27:78:5f:57:19:a9:71:cb:81:06:20:b0:8e:12:85: 2f:01:27:a2:17:56:5b:8d:e0:58:03:a0:22:69:5a:70:ac:01: df:f9:36:67:00:1d:f6:3e:70:25:93:6b:c2:bd:47:44:df:46: e2:01:2b:8a:07:90:08:22:87:a4:9c:32:21:96:fe:61:b3:69: 88:00:e0:0b:9b:4d:27:7e:bc:26:a2:b0:cb:dd:23:4b:21:22: 24:77:34:c6:59:ba:ea:00:8b:fd:21:e0:e1:5d:00:07:cc:2e: 92:17:c7:c0:82:4e:44:e2:02:9b:43:52:1e:ef:94:41:07:8d: ff:fc:85:68:46:3f:37:c3:f2:99:22:2a:20:c4:3e:0e:93:ff: 34:b3:f5:8d:30:55:48:eb:cf:ad:8d:26:ad:da:61:53:df:3a: ec:16:e7:c2:b3:23:d7:8f:51:0a:7e:04:c1:4d:f5:b6:32:69: 8f:1b:27:0a:16:f7:ca:34:1b:75:6e:ae:c6:38:04:f2:90:a1: 15:1d:fa:5b:c8:df:f7:69:a6:5b:6b:36:3c:ee:e1:7d:40:d8: 7c:88:5a:35:2e:76:87:e6:51:91:5c:f1:8b:5f:64:06:26:55: f0:08:1f:58:7b:90:be:30:fc:2f:63:ba:80:3a:0a:92:e5:f7: 30:6c:5a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3N0Squ00JcbOJpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTExMFoXDTI1MDQzMDEwMTExMFowLzEtMCsGA1UEAxMk YWQyNGIwZTYtZGIxMy00ZjZlLWJlZWItNDk1ODI3NzYyMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8/49y/4G5vw7GL548kcKPSfTmYDTjG3OtpU rK+ocJW+9I/NWypOe35W42MTQcTYLDRK/jvwXUnyLqYlw209Q4aEUdKYnCVKGj+W /cPKaEMJHh7Gcv5Ni0PZMvFs4eM0nEhIK7mrCeyix2QRw8tKSetlmKm8RB0N3cS0 OGwT1Mh9j023rwhBjBAa+e5s2WzC8CcRsqOB//iKopsX9tThzENJjV5rPdotr5+r ig5g3z7eJ3YM2jPhHRudFWOQJwO+z9dGgN1BTme7+IukA0ZHdPr/RXMmpSLH6KkC bAgtgBqMu5i+5owya2rknZemFYAk/v5O/QQOUrKdUVrjWUM2QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9R0toQ1F6cGf+gQk/Y1n3lOU+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODIzNzg3YzktNGM3Yy0z ODliLWJhOGEtODNlNmY1MGUxMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA2vCd4X1cZqXHLgQYgsI4ShS8BJ6IXVluN4FgDoCJpWnCsAd/5NmcA HfY+cCWTa8K9R0TfRuIBK4oHkAgih6ScMiGW/mGzaYgA4AubTSd+vCaisMvdI0sh IiR3NMZZuuoAi/0h4OFdAAfMLpIXx8CCTkTiAptDUh7vlEEHjf/8hWhGPzfD8pki KiDEPg6T/zSz9Y0wVUjrz62NJq3aYVPfOuwW58KzI9ePUQp+BMFN9bYyaY8bJwoW 98o0G3VursY4BPKQoRUd+lvI3/dppltrNjzu4X1A2HyIWjUudofmUZFc8YtfZAYm VfAIH1h7kL4w/C9juoA6CpLl9zBsWp8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:44 2025 by rpki-client