$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa File: aa00663e-3fea-35f2-a463-c2b67682be78.roa (raw, json) Hash identifier: OoAtIrCkDbmPsfh6bfg0/iPBflOkvQOGfOrctNWWVUY= Subject key identifier: E4:6C:3C:2F:77:54:02:72:0F:71:B1:84:7A:CD:DE:62:62:5A:CB:A9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C48E214244703AF2BFED40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:8e:21:42:44:70:3a:f2:bf:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=1d863a45-ab22-4d1c-8beb-27d71cc26385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:12:16:14:65:00:a4:4d:f0:99:59:9e:3e: 7c:c7:dd:b7:ea:0b:9f:1f:a5:ee:ef:9f:b9:66:f7: 1f:07:b6:22:59:81:41:1d:e3:41:64:74:72:3f:34: 3d:1d:f8:09:6f:93:49:ea:77:a0:25:49:40:e8:2a: ac:ab:ad:81:14:27:53:ec:d1:a5:20:45:a9:f8:b8: bb:0f:f8:e6:08:f9:df:70:fb:1e:c6:05:ff:86:e5: ac:a6:3f:21:d4:f7:39:6d:fe:d6:dd:e0:35:e9:a5: 79:63:e9:ed:51:f3:27:cb:c8:61:dd:fe:41:08:7c: 1b:8b:92:65:fd:52:9d:3e:2f:a4:e1:08:40:81:ce: c6:99:50:ba:3c:2f:c2:93:46:a6:b3:47:b7:15:9c: 68:74:1b:f3:e2:4d:73:e2:41:e6:3a:b9:31:5f:4d: d4:9a:69:27:80:1e:b0:c7:0b:4b:ca:f0:a6:90:a6: cd:ce:0e:1c:6f:38:8c:e3:75:ef:d8:17:d0:6e:92: 04:61:e6:78:13:dc:1e:e0:87:49:42:62:e4:7c:a9: b6:ec:bf:4d:ef:b5:bc:2c:4a:7e:d4:cd:9b:fc:30: ca:c3:d9:12:10:6d:72:b5:00:24:e9:0b:d3:70:14: 10:d6:b9:1d:48:ce:1e:cb:ff:1f:fe:50:ad:79:dc: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6C:3C:2F:77:54:02:72:0F:71:B1:84:7A:CD:DE:62:62:5A:CB:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:64:d4:17:2d:5e:c6:7e:8e:4a:ca:ae:4a:71:b0:ad:9c:e2: 85:36:f6:d8:87:7d:b1:46:e9:68:21:a4:1d:a5:56:f6:bd:57: de:9d:69:9e:12:bb:f5:e4:e2:f4:67:93:7c:79:49:be:ca:4d: 1f:a3:11:1d:30:c3:70:04:93:96:e4:bc:f2:b4:cc:99:8d:a4: 30:30:56:52:51:da:29:9e:56:81:e8:64:1a:00:3b:7a:e9:57: e3:64:33:25:cb:e8:b6:13:00:9f:bf:24:28:08:e6:41:31:64: 06:9a:58:0f:75:f4:a5:c7:f7:7f:12:86:90:69:31:ac:fa:29: ee:1b:64:6a:38:dc:c3:34:f0:af:43:5b:66:67:12:cf:67:f5: ae:0a:e9:ff:5c:0f:5e:a4:af:12:4c:10:9a:26:90:4a:a4:ab: 2a:d7:92:86:82:f9:aa:92:33:cf:cb:5a:3d:d6:69:02:c0:a2: c4:e7:5e:ea:8f:b5:0f:8d:b4:69:aa:46:45:cf:85:24:46:9a: b5:5e:b0:4d:37:ee:e3:86:6c:7c:55:b7:e3:98:0f:df:0c:29: 39:ae:ef:e1:7b:03:78:d9:6f:f1:c0:69:3d:8d:e4:d8:4e:15: fb:8a:49:f2:4e:12:5f:70:b4:2a:a9:2c:e3:72:a1:c8:28:8c: 0a:21:ec:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxI4hQkRwOvK/7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MWQ4NjNhNDUtYWIyMi00ZDFjLThiZWItMjdkNzFjYzI2Mzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwsSFhRlAKRN8JlZnj58x9236gufH6Xu75+5 ZvcfB7YiWYFBHeNBZHRyPzQ9HfgJb5NJ6negJUlA6Cqsq62BFCdT7NGlIEWp+Li7 D/jmCPnfcPsexgX/huWspj8h1Pc5bf7W3eA16aV5Y+ntUfMny8hh3f5BCHwbi5Jl /VKdPi+k4QhAgc7GmVC6PC/Ck0ams0e3FZxodBvz4k1z4kHmOrkxX03UmmkngB6w xwtLyvCmkKbNzg4cbziM43Xv2BfQbpIEYeZ4E9we4IdJQmLkfKm27L9N77W8LEp+ 1M2b/DDKw9kSEG1ytQAk6QvTcBQQ1rkdSM4ey/8f/lCtedx+1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORsPC93VAJyD3GxhHrN3mJiWsupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWEwMDY2M2UtM2ZlYS0z NWYyLWE0NjMtYzJiNjc2ODJiZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5k1BctXsZ+jkrKrkpxsK2c4oU29tiHfbFG6WghpB2lVva9V96daZ4S u/Xk4vRnk3x5Sb7KTR+jER0ww3AEk5bkvPK0zJmNpDAwVlJR2imeVoHoZBoAO3rp V+NkMyXL6LYTAJ+/JCgI5kExZAaaWA919KXH938ShpBpMaz6Ke4bZGo43MM08K9D W2ZnEs9n9a4K6f9cD16krxJMEJomkEqkqyrXkoaC+aqSM8/LWj3WaQLAosTnXuqP tQ+NtGmqRkXPhSRGmrVesE037uOGbHxVt+OYD98MKTmu7+F7A3jZb/HAaT2N5NhO FfuKSfJOEl9wtCqpLONyocgojAoh7GE= -----END CERTIFICATE-----Generated at Fri May 9 14:33:52 2025 by rpki-client