$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa File: c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa (raw, json) Hash identifier: E7M4cMmdazpgJesqcMLITz98by1ApwJ18aG0n0aVAjA= Subject key identifier: 74:60:E9:4C:20:54:A2:7E:A5:D8:87:42:C6:48:3D:A7:AE:D4:AE:2F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A18A75782E84CE3E1520 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.31.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a1:8a:75:78:2e:84:ce:3e:15:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=03e78d18-4312-44cc-ba25-fa9ed7ac663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:09:ee:36:6d:b0:42:c2:94:bc:07:cb:db: c4:31:f3:c6:3b:d7:37:ce:7b:57:78:8f:86:51:9b: b5:d7:33:e7:ba:2c:64:7d:00:e8:dd:33:65:a0:98: ec:44:ba:67:81:fc:56:c9:44:b4:78:65:42:90:7f: 5d:32:10:b5:f9:10:49:0c:cc:e5:50:99:51:e8:0e: 66:3b:7c:f9:6f:02:b4:34:03:af:a3:31:ee:88:af: 46:cb:cc:ea:2a:be:91:5b:ff:5c:87:1e:41:9b:ba: bd:1e:f8:43:49:39:7c:8d:24:d7:ac:0a:ef:99:24: 97:ec:c4:72:ac:9a:fe:e9:66:7a:d9:b2:0f:b5:5a: 00:05:02:3a:6a:3c:98:c1:f8:24:c9:78:58:d5:06: 5f:ba:81:83:a2:99:8b:b7:70:9f:24:a5:1b:3d:19: 55:a4:e3:fc:44:b6:ad:82:a2:6b:1f:34:3d:a6:14: d1:5a:90:b4:3b:0d:3e:c5:55:4b:01:83:81:25:ca: 16:5b:16:7f:d0:36:e1:d7:d5:93:60:de:eb:b8:b4: bb:a6:de:bf:9e:11:92:70:97:07:b5:17:06:54:21: 25:05:5d:8b:e8:e4:bb:15:5d:1a:f9:8f:64:3e:55: d2:0f:a1:7a:9e:5f:a5:46:3e:87:33:09:99:a8:f6: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:60:E9:4C:20:54:A2:7E:A5:D8:87:42:C6:48:3D:A7:AE:D4:AE:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:aa:9b:7e:7f:48:be:f7:ce:dd:1f:ad:85:48:93:3d:bc:b2: 6d:e4:d3:ba:71:c6:07:8a:9e:38:7d:fc:2c:c2:81:5e:0f:d7: ef:78:d1:a2:00:4a:ad:3b:b8:96:51:4d:d1:48:fd:bf:0a:e7: fe:65:4f:a5:1b:a4:92:76:89:77:d1:f6:29:f9:43:82:9f:9e: 37:fb:c7:5e:3e:8d:ed:4c:09:e2:c6:50:19:f3:17:da:79:0f: a3:80:bc:12:b6:2e:4b:78:27:ea:ad:87:65:a0:be:88:1f:19: 34:a3:f2:c3:e8:8e:3f:ff:64:67:48:a7:a1:34:45:42:04:d1: 38:db:03:8e:e1:a5:7f:e6:04:84:39:f6:9e:ff:c8:4d:9d:59: 9e:89:c9:09:c4:14:dd:85:86:ef:02:43:ac:7f:5c:b8:c5:b1: 3d:da:f2:58:4d:a9:82:db:ec:dc:09:8f:68:4e:26:f2:d6:42: 63:81:43:85:60:1c:12:76:a3:78:6c:fe:d0:15:b9:4f:72:27: 89:52:63:8d:25:89:75:93:4a:4d:ed:3f:6f:5e:16:53:81:ea: a0:f4:d3:9a:af:0c:fe:ad:99:cf:f0:11:21:48:91:80:8e:fa: 3a:17:4c:ca:f0:b4:5f:a1:8b:c4:c7:66:53:3f:f5:c4:6c:e6: 1d:cd:1c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKGKdXguhM4+FSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDNlNzhkMTgtNDMxMi00NGNjLWJhMjUtZmE5ZWQ3YWM2NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDYJ7jZtsELClLwHy9vEMfPGO9c3zntXeI+G UZu11zPnuixkfQDo3TNloJjsRLpngfxWyUS0eGVCkH9dMhC1+RBJDMzlUJlR6A5m O3z5bwK0NAOvozHuiK9Gy8zqKr6RW/9chx5Bm7q9HvhDSTl8jSTXrArvmSSX7MRy rJr+6WZ62bIPtVoABQI6ajyYwfgkyXhY1QZfuoGDopmLt3CfJKUbPRlVpOP8RLat gqJrHzQ9phTRWpC0Ow0+xVVLAYOBJcoWWxZ/0Dbh19WTYN7ruLS7pt6/nhGScJcH tRcGVCElBV2L6OS7FV0a+Y9kPlXSD6F6nl+lRj6HMwmZqPaoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRg6UwgVKJ+pdiHQsZIPaeu1K4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzVhOWQzZjItODYwZi0z MGRiLWFlYzUtYzlkNWRkYjU5MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSqm35/SL73zt0frYVIkz28sm3k07pxxgeKnjh9/CzCgV4P1+940aIA Sq07uJZRTdFI/b8K5/5lT6UbpJJ2iXfR9in5Q4Kfnjf7x14+je1MCeLGUBnzF9p5 D6OAvBK2Lkt4J+qth2WgvogfGTSj8sPojj//ZGdIp6E0RUIE0TjbA47hpX/mBIQ5 9p7/yE2dWZ6JyQnEFN2Fhu8CQ6x/XLjFsT3a8lhNqYLb7NwJj2hOJvLWQmOBQ4Vg HBJ2o3hs/tAVuU9yJ4lSY40liXWTSk3tP29eFlOB6qD005qvDP6tmc/wESFIkYCO +joXTMrwtF+hi8THZlM/9cRs5h3NHIE= -----END CERTIFICATE-----Generated at Fri May 9 03:24:22 2025 by rpki-client