$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa File: ae69f72c-1a33-3636-8017-ad9957fe4afa.roa (raw, json) Hash identifier: 8UxLQeFsFItBhHDywdvsY6n57hAOaYUYFcA856bvDRY= Subject key identifier: 5F:FF:8B:53:E1:97:24:65:48:EA:68:A7:45:4F:9C:91:6A:CE:17:70 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FED6F66AE68B17079300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fe:d6:f6:6a:e6:8b:17:07:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d8cff509-0e7d-4013-88f7-05b41df969c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:1e:30:27:42:aa:b3:75:a8:46:6e:8b:a3: d0:e2:ce:16:06:71:b8:a2:91:1c:88:37:74:cf:16: 7e:44:d7:36:51:df:64:9a:b0:ed:7a:ca:e2:c6:07: 0d:db:c8:a7:9c:32:16:5f:12:de:83:02:12:cb:95: 20:23:8e:cc:92:ec:f5:11:14:a8:7d:b1:7a:42:7a: a3:68:ab:a3:53:d8:a4:3b:7c:72:81:c6:0d:51:30: 3b:c9:92:b6:ea:85:4f:65:ae:9a:9f:2f:1a:b1:79: a4:2b:b0:20:67:e1:bf:99:fc:a0:21:42:e1:f4:53: bb:cb:92:d9:8e:f7:0d:ef:03:f4:f9:04:c0:fe:a0: cc:9f:1b:1c:bd:f9:9c:6a:ee:e9:61:97:39:0e:80: e7:a5:a4:4e:40:02:18:d1:bb:5c:bd:bb:28:24:53: 9f:d0:e7:e0:1b:89:f1:71:44:31:84:63:d2:af:c6: c1:ce:fc:33:34:ba:04:16:ab:f0:fc:f1:26:6f:73: 11:f6:b3:f0:9e:cd:3b:30:f2:e8:b3:3a:40:5b:71: 2f:65:90:02:83:75:d8:da:8a:d0:6c:37:8b:70:ab: dc:d8:21:54:7f:90:23:a9:9f:24:07:f1:1f:31:8e: 30:4c:81:8f:c1:f6:3b:37:2b:bf:da:6e:2d:d3:be: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FF:8B:53:E1:97:24:65:48:EA:68:A7:45:4F:9C:91:6A:CE:17:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6d:e1:8e:61:c3:88:f9:8a:74:e7:77:41:01:ae:99:ca:17: 3d:00:62:ec:c5:6d:b2:40:c8:19:cb:ea:d6:f2:63:a2:61:af: e6:de:70:b4:a8:18:4f:de:8b:2f:76:8c:2b:89:86:8c:b6:cf: 67:0b:38:c9:b3:68:bc:15:64:e1:91:7d:75:55:9d:57:b8:fe: 6c:52:2b:79:9d:f0:66:74:7d:94:c0:db:76:17:24:30:d3:14: 3e:a2:a5:46:94:c8:b8:c9:6a:c4:e1:0b:7d:b0:d1:3f:91:44: 58:67:ee:60:08:fc:ad:4f:8f:83:19:2a:67:8d:81:ae:1e:83: 45:5f:a2:03:68:7b:58:da:e7:ac:c2:af:b9:0a:fd:7b:0b:c6: e7:e4:9b:88:3e:6f:68:12:b7:31:ba:b2:8f:ea:2b:2e:97:a7: 45:a8:c6:f7:99:8d:41:8b:b8:ea:df:41:88:74:27:bc:9f:5f: a9:07:b2:51:47:12:61:2d:c9:7c:2f:c7:db:bd:5d:9e:b6:14: 43:54:ac:b0:a1:da:16:4f:8d:6c:70:5d:28:2e:ed:4d:bb:0f: 58:44:aa:c7:6b:6e:7a:e7:b2:b0:ab:ca:25:8b:e1:7f:fc:a5: ba:1f:38:4d:e5:25:9c:11:cb:55:f9:61:08:d4:9f:1e:f7:fa: 73:6a:14:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf7W9mrmixcHkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDhjZmY1MDktMGU3ZC00MDEzLTg4ZjctMDViNDFkZjk2OWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiIeMCdCqrN1qEZui6PQ4s4WBnG4opEciDd0 zxZ+RNc2Ud9kmrDtesrixgcN28innDIWXxLegwISy5UgI47Mkuz1ERSofbF6Qnqj aKujU9ikO3xygcYNUTA7yZK26oVPZa6any8asXmkK7AgZ+G/mfygIULh9FO7y5LZ jvcN7wP0+QTA/qDMnxscvfmcau7pYZc5DoDnpaROQAIY0btcvbsoJFOf0OfgG4nx cUQxhGPSr8bBzvwzNLoEFqvw/PEmb3MR9rPwns07MPLoszpAW3EvZZACg3XY2orQ bDeLcKvc2CFUf5AjqZ8kB/EfMY4wTIGPwfY7Nyu/2m4t074PVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF//i1PhlyRlSOpop0VPnJFqzhdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWU2OWY3MmMtMWEzMy0z NjM2LTgwMTctYWQ5OTU3ZmU0YWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtt4Y5hw4j5inTnd0EBrpnKFz0AYuzFbbJAyBnL6tbyY6Jhr+becLSo GE/eiy92jCuJhoy2z2cLOMmzaLwVZOGRfXVVnVe4/mxSK3md8GZ0fZTA23YXJDDT FD6ipUaUyLjJasThC32w0T+RRFhn7mAI/K1Pj4MZKmeNga4eg0VfogNoe1ja56zC r7kK/XsLxufkm4g+b2gStzG6so/qKy6Xp0WoxveZjUGLuOrfQYh0J7yfX6kHslFH EmEtyXwvx9u9XZ62FENUrLCh2hZPjWxwXSgu7U27D1hEqsdrbnrnsrCryiWL4X/8 pbofOE3lJZwRy1X5YQjUnx73+nNqFJ4= -----END CERTIFICATE-----Generated at Sun Apr 27 02:57:43 2025 by rpki-client