$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95ac0b09-5a78-3aff-a53b-f4678007b8a3.roa File: 95ac0b09-5a78-3aff-a53b-f4678007b8a3.roa (raw, json) Hash identifier: HwTKnJtmlXq6m4s/r0u1i9s1x41eGFjbwgiRqpBbacU= Subject key identifier: 5D:27:4F:FF:A0:74:D9:D8:B8:87:34:9B:6F:66:2D:29:AA:1C:F1:6B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57789B456818569865BE680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95ac0b09-5a78-3aff-a53b-f4678007b8a3.roa Signing time: Tue 04 Feb 2025 13:41:59 +0000 ROA not before: Tue 04 Feb 2025 13:41:59 +0000 ROA not after: Mon 05 May 2025 12:41:59 +0000 asID: 30036 IP address blocks: 173.31.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:89:b4:56:81:85:69:86:5b:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:41:59 2025 GMT Not After : May 5 12:41:59 2025 GMT Subject: CN=0aecb2d9-c198-41cc-bcac-5f2f253d1c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:4f:2d:ab:de:3f:5c:34:bd:0b:45:3b:82: 58:99:3a:8c:1e:4a:97:b2:e8:ea:0e:94:c8:fc:98: cd:60:f5:3c:ae:00:9d:71:59:c6:fe:0c:00:3b:8d: 63:d3:0d:9d:08:94:89:2a:f4:09:c5:21:0a:d7:d8: 0c:b1:99:de:44:86:64:d8:6d:12:8c:05:35:4a:45: 99:61:0d:79:74:a0:42:95:f9:a6:8f:91:8d:23:00: d9:b0:0b:26:95:f9:cb:b3:08:48:9b:cc:db:61:07: 66:9f:95:61:fd:81:de:05:30:b0:5b:90:11:3f:b5: bf:07:5d:32:63:73:7c:93:5e:f3:1f:cd:f9:c7:11: 72:7a:5d:a7:92:01:e0:bc:3c:f9:d5:a7:2b:b0:61: 8e:69:7b:a2:d1:ee:7b:dd:e7:fc:ee:4d:e5:ba:37: 14:55:09:54:4a:7a:0c:a6:b0:84:e7:35:a3:37:c2: 06:2f:b4:9e:4d:8e:05:7b:27:df:c5:0f:9c:5c:cf: 19:0a:db:36:40:77:05:86:ea:97:cb:d3:c8:9b:7c: 3e:6f:f1:67:b7:4b:a8:f7:90:f7:73:b9:cc:b2:ed: e3:3a:54:a7:d4:d5:13:71:f2:32:22:96:75:24:09: 34:1f:65:9f:cf:ba:f1:db:c4:e9:a1:83:65:15:16: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:27:4F:FF:A0:74:D9:D8:B8:87:34:9B:6F:66:2D:29:AA:1C:F1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95ac0b09-5a78-3aff-a53b-f4678007b8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6f:8b:6e:57:60:25:3c:50:c2:c3:e1:4e:1a:be:8a:42:4b: 51:89:4b:a9:a6:2f:21:13:a9:8f:94:c9:fe:5e:20:d6:64:b5: 0e:1b:ff:fd:1d:30:9d:09:d1:d7:d4:a7:fd:fc:c1:50:9c:33: c6:c9:53:03:9e:a0:84:a8:c2:da:91:16:58:bd:0e:e4:0b:c3: e6:8f:07:cd:34:2c:4b:2d:30:03:21:b3:85:1b:32:bd:29:00: 5a:28:20:cb:16:24:51:e7:c6:11:e4:8b:7d:b5:bf:bd:83:eb: 57:ec:30:30:c4:26:61:3f:9d:a4:f6:d7:46:66:e2:77:62:ba: 45:7e:28:05:13:36:29:dc:c1:01:6d:52:c4:20:4d:d9:b0:96: da:4b:bf:10:e9:83:9c:c4:e5:32:fc:dd:ed:70:0e:57:7e:6b: ed:c3:ef:b0:61:6f:d4:09:3d:64:37:96:4e:5e:58:ea:ac:78: c9:5f:2e:b6:4e:1d:b3:0c:f9:8e:42:49:ae:45:06:b2:3a:1b: ff:18:46:44:77:e3:16:3d:f4:56:11:be:cc:67:f4:65:52:6d: ef:67:24:c4:db:14:b1:69:ec:7d:e3:d1:a8:f3:ad:58:af:3e: ac:3c:ce:cd:7c:7f:ff:b0:12:03:a3:f5:0e:a9:16:dc:3a:13: f0:a8:99:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFd4m0VoGFaYZb5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDE1OVoXDTI1MDUwNTEyNDE1OVowLzEtMCsGA1UEAxMk MGFlY2IyZDktYzE5OC00MWNjLWJjYWMtNWYyZjI1M2QxYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrRPLaveP1w0vQtFO4JYmTqMHkqXsujqDpTI /JjNYPU8rgCdcVnG/gwAO41j0w2dCJSJKvQJxSEK19gMsZneRIZk2G0SjAU1SkWZ YQ15dKBClfmmj5GNIwDZsAsmlfnLswhIm8zbYQdmn5Vh/YHeBTCwW5ARP7W/B10y Y3N8k17zH835xxFyel2nkgHgvDz51acrsGGOaXui0e573ef87k3lujcUVQlUSnoM prCE5zWjN8IGL7SeTY4FeyffxQ+cXM8ZCts2QHcFhuqXy9PIm3w+b/Fnt0uo95D3 c7nMsu3jOlSn1NUTcfIyIpZ1JAk0H2Wfz7rx28TpoYNlFRZfxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0nT/+gdNnYuIc0m29mLSmqHPFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTVhYzBiMDktNWE3OC0z YWZmLWE1M2ItZjQ2NzgwMDdiOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtvi25XYCU8UMLD4U4avopCS1GJS6mmLyETqY+Uyf5eINZktQ4b//0d MJ0J0dfUp/38wVCcM8bJUwOeoISowtqRFli9DuQLw+aPB800LEstMAMhs4UbMr0p AFooIMsWJFHnxhHki321v72D61fsMDDEJmE/naT210Zm4ndiukV+KAUTNincwQFt UsQgTdmwltpLvxDpg5zE5TL83e1wDld+a+3D77Bhb9QJPWQ3lk5eWOqseMlfLrZO HbMM+Y5CSa5FBrI6G/8YRkR34xY99FYRvsxn9GVSbe9nJMTbFLFp7H3j0ajzrViv Pqw8zs18f/+wEgOj9Q6pFtw6E/Comac= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:04 2025 by rpki-client