$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa File: aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa (raw, json) Hash identifier: BoFM8KaSpoAE+shnIyFBwFwwjTFmFvCxYeYfkO8KEYg= Subject key identifier: BD:E5:20:0E:39:56:45:CD:15:7D:ED:43:AB:87:97:FC:54:35:4A:88 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499C0EEB884EAFDB11B2E28E00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa Signing time: Tue 22 Apr 2025 10:29:59 +0000 ROA not before: Tue 22 Apr 2025 10:29:59 +0000 ROA not after: Mon 21 Jul 2025 10:29:59 +0000 asID: 32043 IP address blocks: 173.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:0e:eb:88:4e:af:db:11:b2:e2:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 10:29:59 2025 GMT Not After : Jul 21 10:29:59 2025 GMT Subject: CN=d35eb78a-6c66-4fb8-b4f2-430974b1ab5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:5d:a3:23:79:fc:11:f8:59:40:e2:9e:48: 3d:92:21:e5:45:25:60:bd:88:a6:0a:e8:3b:9a:3e: 32:4a:f0:fe:b9:a5:96:59:d8:8b:9e:b1:f8:38:6c: 9e:9d:6f:83:67:3e:29:ce:2f:17:7e:db:bd:88:af: 00:31:7a:dd:ec:77:9b:65:a5:15:93:e0:26:7e:97: c0:99:92:19:1f:ae:99:a4:a8:50:17:10:96:aa:90: 40:5a:55:33:cc:e7:de:c1:c0:6e:19:da:97:73:e4: 2f:8c:01:4d:d8:64:3e:c1:70:22:0a:12:46:9f:8a: 23:aa:64:5c:04:5b:8f:ee:7a:a7:ac:75:34:99:2e: 9a:e1:19:81:f6:66:0a:a8:f2:f6:05:37:00:35:39: 98:a6:64:cf:b8:35:3d:f3:14:be:04:44:84:52:e9: 78:c3:fb:ae:99:64:c2:0a:72:c1:ee:06:0c:67:03: 39:86:65:c6:53:6f:8c:df:d5:3b:2f:53:47:25:6b: 33:90:21:c8:6d:9a:7c:1f:4d:3c:0b:07:7a:98:0a: 80:13:bd:b6:db:ec:a5:75:52:32:e6:c5:1b:54:56: 7e:c3:c9:b7:c7:1f:2a:93:86:d0:ea:78:ed:ac:64: 77:f1:bb:b5:7f:96:73:5c:61:76:90:dc:77:d9:70: e1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E5:20:0E:39:56:45:CD:15:7D:ED:43:AB:87:97:FC:54:35:4A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:03:8c:f4:66:69:0d:a4:09:59:a2:43:24:cc:0a:b5:f7:f8: 84:02:9c:05:af:fa:62:69:fa:8c:bf:9b:06:2c:2f:48:86:0f: a7:13:f1:40:ba:6c:e1:c3:3f:f9:e8:81:7b:22:30:12:59:7a: f7:db:60:0c:d6:bf:df:0c:1d:6a:ad:df:f6:b4:8a:d3:45:c6: fa:b2:68:ae:4a:0a:f9:8d:c4:9e:3b:24:46:ac:1f:7d:24:24: fb:b6:59:5f:9a:17:e1:57:ee:ad:eb:cd:83:37:16:ea:c9:86: d6:de:2a:d5:69:96:77:a5:b3:0e:3d:a3:8a:ee:91:72:51:53: f2:8f:30:ed:96:34:cf:cf:df:5d:d8:37:f8:69:32:fb:e4:ba: ad:81:12:5a:4b:4b:dd:7a:a9:15:1e:c6:cc:fc:7f:39:02:fd: ab:2c:8e:29:12:a9:3f:44:b4:52:9c:11:1c:e7:89:58:7f:d9: 37:a4:4f:4b:8d:44:3b:67:18:e1:b2:f1:33:17:88:da:2b:98: 3a:d1:38:72:c1:20:df:57:2a:54:67:06:31:08:4c:ca:13:96: 1c:3d:22:e9:22:12:08:80:9e:98:86:be:ad:35:29:99:71:9e: 4e:8d:8e:18:74:5e:67:db:49:e1:3d:84:17:41:d8:2f:ab:04: 1d:b0:26:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcDuuITq/bEbLijgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjEwMjk1OVoXDTI1MDcyMTEwMjk1OVowLzEtMCsGA1UEAxMk ZDM1ZWI3OGEtNmM2Ni00ZmI4LWI0ZjItNDMwOTc0YjFhYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMldoyN5/BH4WUDinkg9kiHlRSVgvYimCug7 mj4ySvD+uaWWWdiLnrH4OGyenW+DZz4pzi8Xftu9iK8AMXrd7HebZaUVk+AmfpfA mZIZH66ZpKhQFxCWqpBAWlUzzOfewcBuGdqXc+QvjAFN2GQ+wXAiChJGn4ojqmRc BFuP7nqnrHU0mS6a4RmB9mYKqPL2BTcANTmYpmTPuDU98xS+BESEUul4w/uumWTC CnLB7gYMZwM5hmXGU2+M39U7L1NHJWszkCHIbZp8H008Cwd6mAqAE7222+yldVIy 5sUbVFZ+w8m3xx8qk4bQ6njtrGR38bu1f5ZzXGF2kNx32XDhOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3lIA45VkXNFX3tQ6uHl/xUNUqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWFmOWE1ZjEtYmZkOC0z MzIzLWFkYWYtN2Q5OTFkYmFjY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALADjPRmaQ2kCVmiQyTMCrX3+IQCnAWv+mJp+oy/mwYsL0iGD6cT8UC6 bOHDP/nogXsiMBJZevfbYAzWv98MHWqt3/a0itNFxvqyaK5KCvmNxJ47JEasH30k JPu2WV+aF+FX7q3rzYM3FurJhtbeKtVplnelsw49o4rukXJRU/KPMO2WNM/P313Y N/hpMvvkuq2BElpLS916qRUexsz8fzkC/assjikSqT9EtFKcERzniVh/2TekT0uN RDtnGOGy8TMXiNormDrROHLBIN9XKlRnBjEITMoTlhw9IukiEgiAnpiGvq01KZlx nk6Njhh0XmfbSeE9hBdB2C+rBB2wJhk= -----END CERTIFICATE-----Generated at Mon Apr 28 03:14:03 2025 by rpki-client