$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa File: a1954fa4-3a55-38fb-8f20-034f813e98cf.roa (raw, json) Hash identifier: NdIbSzCk72w/3YDto+44ooQ/vsus4GpHGrG9qTp/Aq4= Subject key identifier: B7:11:D1:CA:AC:61:BF:01:54:36:E4:7B:DE:2A:2C:E8:D3:1E:B4:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FD005167687EAC41696600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa Signing time: Wed 05 Feb 2025 11:22:31 +0000 ROA not before: Wed 05 Feb 2025 11:22:31 +0000 ROA not after: Tue 06 May 2025 10:22:31 +0000 asID: 30036 IP address blocks: 173.31.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:00:51:67:68:7e:ac:41:69:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:22:31 2025 GMT Not After : May 6 10:22:31 2025 GMT Subject: CN=ef98c1f0-dd15-46ce-82d7-06f00eadad6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:04:6f:c3:5c:6c:43:aa:1d:c0:47:a3:f7: 99:8b:33:0e:d4:60:3b:43:02:d2:16:f3:07:c2:b7: 38:80:b6:e6:c1:18:e5:25:77:2b:32:c0:39:e6:d9: e0:c6:da:b8:0d:89:5c:3d:25:ea:f9:4b:9f:58:0b: 6a:37:f5:71:9f:36:2c:50:0e:49:a7:04:29:db:a3: ab:1a:aa:0f:29:6a:3e:31:fb:e8:64:31:52:df:ad: cf:2c:f1:06:43:9b:fa:a9:e6:cf:40:ba:a7:70:b3: 01:68:43:dd:ee:6f:e4:af:60:6c:98:3c:eb:41:2f: 54:e5:77:1f:8d:03:70:8a:3a:82:57:b5:cf:6c:04: 3f:10:24:fa:ff:f5:29:8d:1b:d7:ab:bd:3f:70:e9: c6:71:0d:b5:62:68:10:a0:1e:71:05:97:3e:e6:83: 2c:5f:52:72:79:53:5d:ba:01:b4:c8:17:73:ae:35: ed:b2:75:d3:56:0c:b8:23:3c:88:ea:8c:56:00:d1: d6:e9:cf:6d:a0:f0:ee:38:0f:4c:6a:ff:01:e9:9e: 22:6a:63:d0:da:6c:3f:af:f1:3e:f4:49:95:4c:9f: d5:88:36:44:80:0f:fe:d8:f8:45:da:89:47:89:64: c2:f4:51:95:79:f9:97:49:28:3f:dd:47:d4:11:5b: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:D1:CA:AC:61:BF:01:54:36:E4:7B:DE:2A:2C:E8:D3:1E:B4:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4e:e7:9c:d4:73:90:13:4f:86:e3:49:4f:b8:e1:7a:76:64: e7:53:d0:ce:36:b1:1f:0c:1c:4a:25:a0:80:e6:8d:33:a0:a3: 50:a8:9e:04:b2:17:9d:ca:91:a4:34:93:24:90:70:09:dc:96: f4:8c:8c:72:74:7b:f0:cb:c3:30:bc:a6:f0:73:98:70:8a:50: e8:23:80:18:5e:e0:63:4c:ce:d1:13:1d:c6:d6:70:4a:ed:1c: 86:8e:d9:ea:e6:4b:4c:7e:ef:29:75:67:dc:65:c9:eb:8e:5b: 64:6a:52:63:a3:3a:aa:b6:dd:a1:64:da:dc:ba:56:fe:18:c5: 52:69:14:a0:40:14:5a:d1:d8:15:22:fa:6f:2e:25:cb:b7:99: b1:65:ae:e4:25:6a:a4:c5:bf:1b:4b:e9:8f:4d:aa:a5:0a:fc: 95:d6:fb:59:10:d4:09:c4:79:f8:d4:47:4f:cc:c0:28:a1:52: c8:db:59:de:c7:bc:5d:b6:96:63:08:85:62:1d:97:25:bf:ac: 91:aa:74:07:bb:a8:96:8b:5c:bd:54:2b:4d:5a:84:b2:89:c0: a0:1d:38:47:41:6c:c8:ec:2e:68:e0:fe:69:84:1f:16:58:9d: 55:75:66:0d:33:ed:03:40:ec:72:77:ae:3e:b9:ae:18:58:d0: 43:5d:92:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/QBRZ2h+rEFpZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjIzMVoXDTI1MDUwNjEwMjIzMVowLzEtMCsGA1UEAxMk ZWY5OGMxZjAtZGQxNS00NmNlLTgyZDctMDZmMDBlYWRhZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPMEb8NcbEOqHcBHo/eZizMO1GA7QwLSFvMH wrc4gLbmwRjlJXcrMsA55tngxtq4DYlcPSXq+UufWAtqN/VxnzYsUA5JpwQp26Or GqoPKWo+MfvoZDFS363PLPEGQ5v6qebPQLqncLMBaEPd7m/kr2BsmDzrQS9U5Xcf jQNwijqCV7XPbAQ/ECT6//UpjRvXq70/cOnGcQ21YmgQoB5xBZc+5oMsX1JyeVNd ugG0yBdzrjXtsnXTVgy4IzyI6oxWANHW6c9toPDuOA9Mav8B6Z4iamPQ2mw/r/E+ 9EmVTJ/ViDZEgA/+2PhF2olHiWTC9FGVefmXSSg/3UfUEVvZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcR0cqsYb8BVDbke94qLOjTHrTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTE5NTRmYTQtM2E1NS0z OGZiLThmMjAtMDM0ZjgxM2U5OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtO55zUc5ATT4bjSU+44Xp2ZOdT0M42sR8MHEoloIDmjTOgo1CongSy F53KkaQ0kySQcAnclvSMjHJ0e/DLwzC8pvBzmHCKUOgjgBhe4GNMztETHcbWcErt HIaO2ermS0x+7yl1Z9xlyeuOW2RqUmOjOqq23aFk2ty6Vv4YxVJpFKBAFFrR2BUi +m8uJcu3mbFlruQlaqTFvxtL6Y9NqqUK/JXW+1kQ1AnEefjUR0/MwCihUsjbWd7H vF22lmMIhWIdlyW/rJGqdAe7qJaLXL1UK01ahLKJwKAdOEdBbMjsLmjg/mmEHxZY nVV1Zg0z7QNA7HJ3rj65rhhY0ENdksI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:23 2025 by rpki-client