$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb241fe9-c44f-3a81-b662-e58168471a3a.roa File: eb241fe9-c44f-3a81-b662-e58168471a3a.roa (raw, json) Hash identifier: sD1aHjD3yaIM3hNrxlX1t5bClyGIu1PtPPWFk8aoBoA= Subject key identifier: 29:8B:39:A8:EB:D9:3A:B6:5C:81:43:74:42:51:A3:C7:2D:75:B4:44 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2644F96EEC134317D123600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb241fe9-c44f-3a81-b662-e58168471a3a.roa Signing time: Mon 03 Feb 2025 11:15:49 +0000 ROA not before: Mon 03 Feb 2025 11:15:49 +0000 ROA not after: Sun 04 May 2025 10:15:49 +0000 asID: 30036 IP address blocks: 173.31.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:64:4f:96:ee:c1:34:31:7d:12:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:15:49 2025 GMT Not After : May 4 10:15:49 2025 GMT Subject: CN=6a4739c9-b642-478e-9afb-0cc52a257432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0e:95:57:a4:53:a9:e8:77:19:9c:69:ca:09: ae:ac:03:97:1f:d9:8e:d7:d6:90:92:53:57:29:8f: 05:00:10:fc:92:d3:43:78:e7:d2:ad:e7:04:fc:e1: 28:25:4b:06:f3:53:4f:c2:05:27:86:27:fa:e1:5d: dd:3a:e3:06:da:f3:54:f6:02:03:a2:40:0c:78:53: b5:53:22:a0:3a:a2:33:69:43:04:b7:37:75:ab:4d: b7:fc:fe:09:93:51:f3:eb:38:2e:02:ef:14:aa:67: 42:5c:aa:12:15:88:e5:62:fe:7b:d3:78:ab:15:2a: db:1d:f4:ef:a7:f8:39:a4:75:85:13:20:1e:c3:30: 9e:3f:21:e9:6c:c6:9b:bd:07:ec:34:f9:c9:55:27: c6:d1:a0:53:32:b9:86:f0:d5:9a:41:c7:3b:24:49: 99:1c:b7:ad:6c:bb:b3:77:f2:a5:d4:a1:47:09:08: e4:df:c1:8f:fe:58:5e:be:00:30:31:2c:18:3f:74: 58:36:b4:da:d4:f4:04:f8:dd:04:54:81:c7:96:21: 6e:08:c3:7c:19:1d:46:af:b9:7b:13:5f:53:f4:ec: 40:e1:b5:a6:8d:65:27:c5:a0:29:41:96:49:bb:ba: 93:05:73:b2:cc:4e:5d:28:fe:fd:c6:ac:95:a0:ac: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:39:A8:EB:D9:3A:B6:5C:81:43:74:42:51:A3:C7:2D:75:B4:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb241fe9-c44f-3a81-b662-e58168471a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:25:b0:35:97:70:14:0c:99:c7:f1:5d:d2:12:5f:3c:a9:9f: 65:1f:fb:72:6e:4f:05:e1:c5:b6:4d:c0:43:94:35:84:0d:2a: 52:04:d4:e9:02:de:9e:df:99:6c:c6:4e:3a:4a:bd:e4:68:ff: 0f:62:a4:fa:df:b5:5a:f8:f5:10:5f:6f:13:70:b4:e7:4e:ec: 38:ae:e8:88:db:1a:fb:d6:be:46:bb:96:51:02:a8:28:e2:65: 12:ee:7d:42:1e:ac:68:fd:ed:23:fe:05:0c:e8:0c:59:1f:b0: 0c:4d:a1:d9:8a:af:10:12:ce:51:ee:cb:9e:8e:3c:98:7c:15: 81:09:9d:6b:a2:2e:8d:9f:60:25:fb:94:d4:a5:03:11:fd:e0: f3:b6:a1:a2:ef:f5:71:39:ae:d5:73:1e:e9:e0:b2:04:b5:cb: c7:ec:fe:6d:6f:d6:35:f4:72:4f:7a:cb:23:d4:82:22:9b:ff: a9:b5:1d:82:28:01:f1:9c:1b:7d:c2:e4:ca:39:5f:3d:a1:c1: 9d:3a:e9:9f:53:ac:d4:45:f5:a5:5b:57:1b:08:e1:25:00:60: bb:f6:44:fd:a4:2e:25:ef:37:b1:9c:f2:e9:e2:1e:a9:d4:17: 58:4d:df:b4:bf:d2:08:fa:50:c3:1d:2f:1d:57:4c:4b:21:c1: 5c:66:c1:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCZE+W7sE0MX0SNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTU0OVoXDTI1MDUwNDEwMTU0OVowLzEtMCsGA1UEAxMk NmE0NzM5YzktYjY0Mi00NzhlLTlhZmItMGNjNTJhMjU3NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw6VV6RTqeh3GZxpygmurAOXH9mO19aQklNX KY8FABD8ktNDeOfSrecE/OEoJUsG81NPwgUnhif64V3dOuMG2vNU9gIDokAMeFO1 UyKgOqIzaUMEtzd1q023/P4Jk1Hz6zguAu8UqmdCXKoSFYjlYv5703irFSrbHfTv p/g5pHWFEyAewzCePyHpbMabvQfsNPnJVSfG0aBTMrmG8NWaQcc7JEmZHLetbLuz d/Kl1KFHCQjk38GP/lhevgAwMSwYP3RYNrTa1PQE+N0EVIHHliFuCMN8GR1Gr7l7 E19T9OxA4bWmjWUnxaApQZZJu7qTBXOyzE5dKP79xqyVoKx82wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmLOajr2Tq2XIFDdEJRo8ctdbREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWIyNDFmZTktYzQ0Zi0z YTgxLWI2NjItZTU4MTY4NDcxYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR87MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABElsDWXcBQMmcfxXdISXzypn2Uf+3JuTwXhxbZNwEOUNYQNKlIE1OkC 3p7fmWzGTjpKveRo/w9ipPrftVr49RBfbxNwtOdO7Diu6IjbGvvWvka7llECqCji ZRLufUIerGj97SP+BQzoDFkfsAxNodmKrxASzlHuy56OPJh8FYEJnWuiLo2fYCX7 lNSlAxH94PO2oaLv9XE5rtVzHungsgS1y8fs/m1v1jX0ck96yyPUgiKb/6m1HYIo AfGcG33C5Mo5Xz2hwZ066Z9TrNRF9aVbVxsI4SUAYLv2RP2kLiXvN7Gc8uniHqnU F1hN37S/0gj6UMMdLx1XTEshwVxmwbk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:01 2025 by rpki-client