$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa File: d01ab5bd-8e67-3001-a4ea-48358502331a.roa (raw, json) Hash identifier: SdqrwmAKRflw4KX/DMhPbm5tjC6frNPLxFxvMj/e18M= Subject key identifier: C8:6C:76:9F:94:22:5C:FB:0D:CF:28:57:29:84:52:B9:3F:CF:12:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C53428D81000924D9D981D60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa Signing time: Tue 04 Feb 2025 11:26:14 +0000 ROA not before: Tue 04 Feb 2025 11:26:14 +0000 ROA not after: Mon 05 May 2025 10:26:14 +0000 asID: 30036 IP address blocks: 173.31.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:34:28:d8:10:00:92:4d:9d:98:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:26:14 2025 GMT Not After : May 5 10:26:14 2025 GMT Subject: CN=fe07af79-306d-412b-ab75-9531e66297b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:e2:bc:c4:d5:16:13:3b:4d:47:90:b1:f0: 79:36:58:02:1a:61:50:3b:bd:6e:c4:4a:75:9b:9e: 14:19:15:9c:84:4a:da:52:72:5c:32:29:08:13:6b: 99:47:4e:f5:d4:03:7d:38:a3:6b:61:00:82:f4:f5: a0:45:8f:cd:79:ef:42:92:8c:51:e9:2d:b3:6c:5e: 7c:b0:b1:64:dd:b1:c3:92:fb:57:ef:9c:ca:d5:8c: 04:59:d0:2c:7e:21:ab:39:6d:bb:fa:4b:b5:0d:ac: 0c:a0:e8:86:7b:f2:1b:f9:8b:89:a8:f9:9f:db:ff: 28:6d:fe:39:f8:55:0b:5b:f0:de:5a:82:a4:f4:06: 77:e8:35:c0:ec:5a:ae:2c:5c:aa:b7:3f:04:39:22: 92:4f:25:97:ff:00:e3:5d:bd:7d:92:05:a1:2a:3f: ca:ee:4d:ae:af:cb:15:29:d8:29:20:73:ef:cd:53: f4:51:36:ee:ef:b5:b8:38:24:df:80:d6:61:56:12: 22:f9:48:d9:37:71:e3:18:b8:36:b5:bb:89:ae:31: 01:8e:ae:9b:bf:f1:c2:28:0f:34:56:1d:45:32:a5: bc:db:f2:3c:d7:da:4d:4d:48:45:9b:12:bc:30:dc: aa:98:de:3d:1d:26:7f:89:6b:ff:ef:2e:ce:e1:62: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6C:76:9F:94:22:5C:FB:0D:CF:28:57:29:84:52:B9:3F:CF:12:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d01ab5bd-8e67-3001-a4ea-48358502331a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7a:10:66:64:ca:b4:ef:69:e6:43:21:f5:49:d5:79:db:b4: ba:d7:cf:7f:0a:22:71:90:a4:ab:2c:08:41:8a:6b:a6:17:64: 29:30:56:f7:ca:c7:01:e6:c2:43:d4:14:f7:2c:d8:4d:a4:75: 2b:48:3f:45:df:60:c1:4e:df:4d:4d:39:fa:34:c4:68:7a:63: dd:3b:d2:24:4f:ea:3c:9b:30:15:99:ca:ec:a7:0e:52:12:d0: a7:28:27:7d:67:c7:b8:08:fd:61:ec:6e:81:82:65:bc:e2:e9: a1:d5:8d:d4:fc:0b:85:fc:78:27:67:31:74:1d:d6:f3:50:2a: d6:24:1b:2a:3b:01:86:23:17:25:3e:75:53:97:f7:f4:06:7b: f7:96:26:38:5d:9d:87:a5:ba:7b:80:d2:56:87:6c:86:63:07: 83:ff:c5:58:a6:69:86:f9:cf:be:dc:18:6e:88:de:3c:ff:97: ad:e2:2b:c3:91:47:dc:2d:24:21:52:f6:71:91:3c:4e:9a:6a: 85:7b:8c:73:75:61:b6:5e:34:0e:4a:4f:a7:be:b0:52:74:4c: 2c:63:70:77:15:19:ad:80:16:cf:6e:5d:5d:95:5c:87:50:f3: 78:39:64:a1:be:ec:a9:a9:2a:c8:e3:81:4e:e1:af:22:17:0f: d3:43:d4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFNCjYEACSTZ2YHWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjYxNFoXDTI1MDUwNTEwMjYxNFowLzEtMCsGA1UEAxMk ZmUwN2FmNzktMzA2ZC00MTJiLWFiNzUtOTUzMWU2NjI5N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyPivMTVFhM7TUeQsfB5NlgCGmFQO71uxEp1 m54UGRWchEraUnJcMikIE2uZR0711AN9OKNrYQCC9PWgRY/Nee9CkoxR6S2zbF58 sLFk3bHDkvtX75zK1YwEWdAsfiGrOW27+ku1DawMoOiGe/Ib+YuJqPmf2/8obf45 +FULW/DeWoKk9AZ36DXA7FquLFyqtz8EOSKSTyWX/wDjXb19kgWhKj/K7k2ur8sV KdgpIHPvzVP0UTbu77W4OCTfgNZhVhIi+UjZN3HjGLg2tbuJrjEBjq6bv/HCKA80 Vh1FMqW82/I819pNTUhFmxK8MNyqmN49HSZ/iWv/7y7O4WLlrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhsdp+UIlz7Dc8oVymEUrk/zxKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDAxYWI1YmQtOGU2Ny0z MDAxLWE0ZWEtNDgzNTg1MDIzMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl6EGZkyrTvaeZDIfVJ1XnbtLrXz38KInGQpKssCEGKa6YXZCkwVvfK xwHmwkPUFPcs2E2kdStIP0XfYMFO301NOfo0xGh6Y9070iRP6jybMBWZyuynDlIS 0KcoJ31nx7gI/WHsboGCZbzi6aHVjdT8C4X8eCdnMXQd1vNQKtYkGyo7AYYjFyU+ dVOX9/QGe/eWJjhdnYelunuA0laHbIZjB4P/xVimaYb5z77cGG6I3jz/l63iK8OR R9wtJCFS9nGRPE6aaoV7jHN1YbZeNA5KT6e+sFJ0TCxjcHcVGa2AFs9uXV2VXIdQ 83g5ZKG+7KmpKsjjgU7hryIXD9ND1GE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:40 2025 by rpki-client