$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa File: dab50542-2835-3a6a-9072-fac087ccebce.roa (raw, json) Hash identifier: Et/Y9JChAsfuqpu+D7dq9qnAM4SzrAuRjlJBUI1xc4o= Subject key identifier: B0:0F:A1:03:85:37:D3:C2:BC:8C:0C:92:87:BD:DB:3B:8B:EF:11:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849EB667C0FA97A971A5B0ED180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa Signing time: Tue 20 May 2025 20:35:17 +0000 ROA not before: Tue 20 May 2025 20:35:17 +0000 ROA not after: Mon 18 Aug 2025 20:35:17 +0000 asID: 19905 IP address blocks: 173.31.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:66:7c:0f:a9:7a:97:1a:5b:0e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 20 20:35:17 2025 GMT Not After : Aug 18 20:35:17 2025 GMT Subject: CN=34e2035d-59d6-46ab-8ebf-c7f93ab6a9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:9e:84:41:da:07:bc:1f:3a:15:46:cc:94: e7:0d:32:23:3f:4d:32:4f:fa:f1:58:f7:42:56:af: 9f:30:90:4c:0f:8e:77:3a:05:7b:31:e9:ec:3b:5e: b0:fd:f5:ea:18:5c:a9:b6:37:66:17:29:f2:a5:2f: c9:98:b8:74:23:6b:a7:7b:3c:dc:ea:06:2e:58:05: db:7b:4f:56:f4:50:59:58:f6:5a:4e:4d:82:ad:11: 7c:46:7a:0e:08:68:83:c0:63:81:5e:c3:38:fa:0b: fd:67:f2:64:cb:4e:5b:ab:b3:e1:b7:8e:4d:fb:91: b7:75:48:47:5d:70:86:90:49:f2:0d:6f:be:3f:0d: c7:29:a9:bd:11:27:0a:13:a1:40:1a:37:15:88:4d: 7f:d2:ea:ec:5b:d1:56:d7:54:0e:98:94:92:a7:f2: e6:ff:d1:fe:d9:7b:36:f4:9d:2a:78:45:07:62:74: 02:69:cc:b7:f8:37:24:8d:fd:66:56:37:b3:31:34: 33:af:f3:11:f0:92:dd:55:a6:38:14:29:9f:2a:81: 14:78:4c:d4:c1:f5:bb:93:fe:9d:61:08:53:57:0b: d0:eb:3c:3a:7f:1f:3c:fe:65:bd:cd:ea:95:7a:82: ec:fe:d7:b2:d4:5f:c4:5f:87:31:4f:ab:48:2b:48: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0F:A1:03:85:37:D3:C2:BC:8C:0C:92:87:BD:DB:3B:8B:EF:11:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:13:9f:69:89:57:fe:13:19:93:60:da:d0:e8:20:f6:3d:c3: 60:d9:33:54:4a:64:03:da:eb:a9:70:86:91:29:e9:6a:a9:1a: ac:ab:20:d4:50:cb:06:52:13:49:c2:14:20:69:91:4d:1a:f9: 5f:bf:eb:b0:e9:5b:0b:bd:7d:32:4c:1f:7d:1c:9e:31:24:9b: 64:44:77:9a:92:56:a6:33:5a:44:c6:33:ef:ae:35:3f:92:53: 60:e5:f9:21:86:f7:de:22:7e:56:44:fa:59:f0:4b:34:04:15: 2f:be:6d:d2:49:00:34:af:05:1b:8c:f0:db:e8:dc:b6:19:99: dd:1a:be:c1:6b:5e:56:fc:8f:e1:a9:0f:ea:7d:ca:32:34:8f: e0:1c:58:60:10:ed:12:f3:4f:32:e5:43:98:15:6f:87:62:b6: 37:93:22:13:c0:8d:be:2a:04:5e:3d:19:ff:21:13:a1:57:5c: cd:43:2b:b9:be:e2:c3:eb:2d:8c:c6:12:64:d5:23:d1:b1:c4: 01:94:1b:7c:23:1b:18:71:3b:11:c4:d8:93:cb:72:aa:b0:ca: 75:90:2c:5d:a5:0f:49:76:ec:c1:a7:db:89:46:a1:bb:6f:5a: 2c:a3:f8:15:08:b1:1d:4d:c7:cf:6f:32:fe:8a:33:c3:b9:ad: fe:08:84:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnrZnwPqXqXGlsO0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyMDIwMzUxN1oXDTI1MDgxODIwMzUxN1owLzEtMCsGA1UEAxMk MzRlMjAzNWQtNTlkNi00NmFiLThlYmYtYzdmOTNhYjZhOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwWehEHaB7wfOhVGzJTnDTIjP00yT/rxWPdC Vq+fMJBMD453OgV7MensO16w/fXqGFyptjdmFynypS/JmLh0I2unezzc6gYuWAXb e09W9FBZWPZaTk2CrRF8RnoOCGiDwGOBXsM4+gv9Z/Jky05bq7Pht45N+5G3dUhH XXCGkEnyDW++Pw3HKam9EScKE6FAGjcViE1/0ursW9FW11QOmJSSp/Lm/9H+2Xs2 9J0qeEUHYnQCacy3+Dckjf1mVjezMTQzr/MR8JLdVaY4FCmfKoEUeEzUwfW7k/6d YQhTVwvQ6zw6fx88/mW9zeqVeoLs/tey1F/EX4cxT6tIK0jkkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAPoQOFN9PCvIwMkoe92zuL7xGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFiNTA1NDItMjgzNS0z YTZhLTkwNzItZmFjMDg3Y2NlYmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkTn2mJV/4TGZNg2tDoIPY9w2DZM1RKZAPa66lwhpEp6WqpGqyrINRQ ywZSE0nCFCBpkU0a+V+/67DpWwu9fTJMH30cnjEkm2REd5qSVqYzWkTGM++uNT+S U2Dl+SGG994iflZE+lnwSzQEFS++bdJJADSvBRuM8Nvo3LYZmd0avsFrXlb8j+Gp D+p9yjI0j+AcWGAQ7RLzTzLlQ5gVb4ditjeTIhPAjb4qBF49Gf8hE6FXXM1DK7m+ 4sPrLYzGEmTVI9GxxAGUG3wjGxhxOxHE2JPLcqqwynWQLF2lD0l27MGn24lGobtv Wiyj+BUIsR1Nx89vMv6KM8O5rf4IhJw= -----END CERTIFICATE-----Generated at Tue Jul 1 00:27:29 2025 by rpki-client