$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa File: c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa (raw, json) Hash identifier: k0lxNdos8ofMJIw07+UYSZ4tDGhuz7ZaOomfzAjJsps= Subject key identifier: 60:D9:A7:81:C2:DD:87:D6:73:7F:F9:5E:9D:D8:D9:23:29:EA:38:CA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F5B1D954B12EFF46DDDE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa Signing time: Wed 05 Feb 2025 11:07:48 +0000 ROA not before: Wed 05 Feb 2025 11:07:48 +0000 ROA not after: Tue 06 May 2025 10:07:48 +0000 asID: 30036 IP address blocks: 173.31.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f5:b1:d9:54:b1:2e:ff:46:dd:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:07:48 2025 GMT Not After : May 6 10:07:48 2025 GMT Subject: CN=25aaa7ea-3c77-4631-aeeb-16748b38c914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d3:68:3f:98:28:eb:f7:8b:32:e4:2a:a2:b2: 2e:24:f7:bc:19:09:a2:a9:44:97:d4:ad:95:b4:13: 34:3d:53:43:16:d6:4a:e0:08:3b:85:cd:6f:76:26: 11:34:3b:f0:d0:3e:42:eb:74:dc:ef:b2:2e:5e:90: b2:44:31:2b:66:9c:02:54:aa:df:f0:e5:66:9c:54: 74:e4:5c:7f:e8:e9:52:8d:77:d5:56:ee:4d:b5:56: 39:ca:c9:3a:9d:a8:64:17:1b:d3:1f:90:72:a1:3f: e2:96:61:e5:8f:11:ad:45:e5:f3:93:ef:26:dc:7f: cb:5b:10:34:ae:97:c5:cc:1e:d2:0b:05:3a:b3:81: d1:9a:d3:34:4e:fc:d9:c1:12:c4:a8:22:9a:74:58: 7f:03:43:ce:84:71:b0:93:a5:d1:fb:af:f2:c9:ea: c7:7d:19:25:f9:9a:eb:0f:6d:dd:ec:cb:17:1f:d5: 84:4d:36:7e:c0:c5:df:33:f3:d1:a8:e1:07:af:74: b2:af:f5:f5:13:31:83:31:12:ce:af:17:df:b7:3a: 87:69:f9:b0:87:5d:6a:75:7a:81:ea:2b:16:d9:e6: b2:04:5e:00:14:96:78:90:3c:08:54:10:6b:2a:5b: 2c:70:bd:de:b0:f7:6e:d2:05:d6:78:84:67:6b:77: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D9:A7:81:C2:DD:87:D6:73:7F:F9:5E:9D:D8:D9:23:29:EA:38:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b5:14:b1:06:eb:20:38:70:2c:86:5e:92:9c:3c:6e:d6:11: 7b:fa:a5:cc:e7:ac:0b:a5:e9:ae:51:e0:78:9e:84:7a:b8:03: 17:3b:59:eb:b9:54:b3:20:86:07:08:a4:60:d5:51:48:ab:e1: d1:55:af:a4:ad:81:a7:3f:6c:87:85:f1:05:ab:6c:93:d2:16: 9a:6c:ed:f5:99:68:74:15:bf:06:1d:6c:9d:f0:22:64:97:f8: 06:f8:62:38:fd:0e:8f:4b:00:f7:ef:af:2a:45:74:9c:42:df: e2:01:19:ee:2e:5c:fe:1f:04:6b:c4:01:b1:3d:c5:ad:6e:f8: 98:0a:30:17:e0:6f:8f:44:4e:b5:80:0e:31:63:d3:5b:f7:2c: 9a:6b:0a:b7:59:ad:54:fb:c0:e1:fd:c4:12:11:60:50:9d:2d: a8:59:73:98:75:38:2e:f1:f3:5e:8a:31:0a:f4:66:b1:7a:fc: 46:1c:9f:b0:08:c5:14:5f:51:15:49:ad:e7:79:a0:01:9d:dd: b7:bd:ce:14:9f:06:0e:9b:c8:fb:65:7d:ad:fd:b7:a0:ab:64: 3e:a2:8a:8a:3a:d1:ca:87:74:c2:9c:a0:71:cf:3e:cd:8c:27: 12:da:b2:29:73:be:7c:a4:e4:1c:48:7f:a4:c8:bf:3c:b7:5e: e5:6c:fc:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9bHZVLEu/0bd3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMDc0OFoXDTI1MDUwNjEwMDc0OFowLzEtMCsGA1UEAxMk MjVhYWE3ZWEtM2M3Ny00NjMxLWFlZWItMTY3NDhiMzhjOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69NoP5go6/eLMuQqorIuJPe8GQmiqUSX1K2V tBM0PVNDFtZK4Ag7hc1vdiYRNDvw0D5C63Tc77IuXpCyRDErZpwCVKrf8OVmnFR0 5Fx/6OlSjXfVVu5NtVY5ysk6nahkFxvTH5ByoT/ilmHljxGtReXzk+8m3H/LWxA0 rpfFzB7SCwU6s4HRmtM0TvzZwRLEqCKadFh/A0POhHGwk6XR+6/yyerHfRkl+Zrr D23d7MsXH9WETTZ+wMXfM/PRqOEHr3Syr/X1EzGDMRLOrxfftzqHafmwh11qdXqB 6isW2eayBF4AFJZ4kDwIVBBrKlsscL3esPdu0gXWeIRna3dWpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDZp4HC3YfWc3/5Xp3Y2SMp6jjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzVhOWQzZjItODYwZi0z MGRiLWFlYzUtYzlkNWRkYjU5MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm1FLEG6yA4cCyGXpKcPG7WEXv6pcznrAul6a5R4HiehHq4Axc7Weu5 VLMghgcIpGDVUUir4dFVr6Stgac/bIeF8QWrbJPSFpps7fWZaHQVvwYdbJ3wImSX +Ab4Yjj9Do9LAPfvrypFdJxC3+IBGe4uXP4fBGvEAbE9xa1u+JgKMBfgb49ETrWA DjFj01v3LJprCrdZrVT7wOH9xBIRYFCdLahZc5h1OC7x816KMQr0ZrF6/EYcn7AI xRRfURVJred5oAGd3be9zhSfBg6byPtlfa39t6CrZD6iioo60cqHdMKcoHHPPs2M JxLasilzvnyk5BxIf6TIvzy3XuVs/JI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:39 2025 by rpki-client