$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa File: 31ce5d12-41df-3e90-a6ba-a79c0530d407.roa (raw, json) Hash identifier: igl3Ty0LckcAw6D6A8ol86ww8Kil6pJt/v0Op9tg/lU= Subject key identifier: FE:36:28:21:5C:6A:13:FE:22:24:CA:47:B9:87:54:80:37:C0:CC:51 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A2E2FFC15017F07B5E36B32B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa Signing time: Fri 13 Jun 2025 18:44:38 +0000 ROA not before: Fri 13 Jun 2025 18:44:38 +0000 ROA not after: Thu 11 Sep 2025 18:44:38 +0000 asID: 19905 IP address blocks: 173.18.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:2f:fc:15:01:7f:07:b5:e3:6b:32:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 13 18:44:38 2025 GMT Not After : Sep 11 18:44:38 2025 GMT Subject: CN=bbb7224f-4849-4511-b331-457cc3c1047a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:26:e9:e8:a5:f1:39:eb:e4:27:8b:7a:9b:c0: 37:85:4c:d2:74:70:bb:8e:bc:c2:96:10:53:ee:5d: ba:a0:8b:47:1e:a6:d2:0b:9b:30:01:c0:81:f8:23: 5a:51:2e:61:77:5f:d3:57:aa:f6:72:ef:60:8c:17: 2a:5f:a2:31:31:0d:65:4a:75:5e:eb:28:4c:69:ab: 11:d4:92:02:f7:52:52:87:a0:66:22:90:69:93:ff: 2f:a2:ba:40:7d:58:17:4a:04:46:da:b4:56:41:5d: 40:f5:e5:fc:cc:66:78:1e:c0:a9:40:81:f2:12:d0: 44:58:28:73:bc:6d:ca:86:38:1d:2b:a7:36:f8:1e: 50:45:16:75:1f:93:8a:42:89:42:71:cd:f8:26:87: 9a:fb:63:07:e9:a5:f0:28:ab:8e:25:a5:1b:bb:77: 9a:db:87:94:7f:04:9f:a7:e7:15:d9:b6:02:3c:d8: 18:08:94:3b:99:fa:88:b4:e0:e8:ab:50:e5:78:4c: 53:81:63:50:1d:66:2e:49:88:1b:67:15:a6:7c:c5: d4:33:57:76:7f:30:96:85:c8:bc:33:51:ee:52:dd: a7:1c:b1:ae:ff:be:9a:1f:af:1c:63:ed:9b:aa:11: 20:18:53:5b:f1:fb:d0:02:c8:6a:4f:1e:b7:35:ba: 70:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:36:28:21:5C:6A:13:FE:22:24:CA:47:B9:87:54:80:37:C0:CC:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8a:68:c4:4b:e8:95:2c:67:51:5d:19:02:f8:25:8c:ce:27: ed:af:95:6c:d1:1a:7c:02:58:3a:da:ad:30:0d:26:91:59:66: 5b:49:7d:04:d1:77:50:34:a9:85:0d:54:51:92:f2:de:ab:39: ac:f5:36:95:e8:01:b1:86:86:fe:4e:a7:c1:54:cf:68:31:b3: 33:1c:5b:1f:4b:4a:72:9a:ca:f7:7b:c0:52:71:d4:c8:4e:45: 87:f8:eb:e0:c7:ca:cd:c3:43:0e:9c:b3:06:48:fe:e7:b8:16: 9a:c8:5c:d2:31:94:81:02:59:ae:73:87:16:b0:bc:82:a5:f5: 8e:c4:6c:f0:dc:58:d3:4b:5f:4b:6b:45:35:ac:3f:8c:f5:a2: 52:8a:6e:d8:f8:b7:4e:f5:f7:e0:64:72:f0:37:04:dd:9b:a6: 85:71:06:73:94:4a:85:5f:74:7c:e0:56:31:31:67:b6:1f:e6: ab:30:04:1c:c4:a6:7f:9c:89:4d:88:45:03:fb:5c:07:41:ae: 31:96:3b:3a:ea:8b:44:d8:cc:6a:2e:2c:19:e5:a8:78:38:a4: 06:aa:9e:84:29:6c:49:c1:9e:42:be:cf:82:9a:3e:c0:e4:da: 89:2d:21:13:e8:9f:86:5f:55:27:35:a0:f0:72:be:b7:23:be: fb:6e:f8:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEouL/wVAX8HteNrMrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYxMzE4NDQzOFoXDTI1MDkxMTE4NDQzOFowLzEtMCsGA1UEAxMk YmJiNzIyNGYtNDg0OS00NTExLWIzMzEtNDU3Y2MzYzEwNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCbp6KXxOevkJ4t6m8A3hUzSdHC7jrzClhBT 7l26oItHHqbSC5swAcCB+CNaUS5hd1/TV6r2cu9gjBcqX6IxMQ1lSnVe6yhMaasR 1JIC91JSh6BmIpBpk/8vorpAfVgXSgRG2rRWQV1A9eX8zGZ4HsCpQIHyEtBEWChz vG3KhjgdK6c2+B5QRRZ1H5OKQolCcc34Joea+2MH6aXwKKuOJaUbu3ea24eUfwSf p+cV2bYCPNgYCJQ7mfqItODoq1DleExTgWNQHWYuSYgbZxWmfMXUM1d2fzCWhci8 M1HuUt2nHLGu/76aH68cY+2bqhEgGFNb8fvQAshqTx63NbpwGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP42KCFcahP+IiTKR7mHVIA3wMxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzFjZTVkMTItNDFkZi0z ZTkwLWE2YmEtYTc5YzA1MzBkNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2KaMRL6JUsZ1FdGQL4JYzOJ+2vlWzRGnwCWDrarTANJpFZZltJfQTR d1A0qYUNVFGS8t6rOaz1NpXoAbGGhv5Op8FUz2gxszMcWx9LSnKayvd7wFJx1MhO RYf46+DHys3DQw6cswZI/ue4FprIXNIxlIECWa5zhxawvIKl9Y7EbPDcWNNLX0tr RTWsP4z1olKKbtj4t0719+BkcvA3BN2bpoVxBnOUSoVfdHzgVjExZ7Yf5qswBBzE pn+ciU2IRQP7XAdBrjGWOzrqi0TYzGouLBnlqHg4pAaqnoQpbEnBnkK+z4KaPsDk 2oktIRPon4ZfVSc1oPByvrcjvvtu+CE= -----END CERTIFICATE-----Generated at Sun Jun 29 15:35:35 2025 by rpki-client