$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa File: aa00663e-3fea-35f2-a463-c2b67682be78.roa (raw, json) Hash identifier: YvjGkeef3BEl4hNv42sbNUVyVchOJPI7YbBwdKCaOU8= Subject key identifier: 8D:0E:FC:20:32:34:42:86:19:B2:CB:D7:41:0B:E0:33:05:67:39:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B73CB61D2D2E6A0FA8D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:73:cb:61:d2:d2:e6:a0:fa:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=56cb8264-9726-4eed-81ac-7ad8cc602892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:05:14:5e:92:5f:2a:8b:89:db:3a:5c:fe: b1:a1:71:38:34:f5:41:70:91:81:d8:fa:82:1a:46: 73:6c:15:6b:ed:72:d1:57:55:44:eb:a4:c5:29:3b: 0b:3f:88:4f:d0:5f:35:bb:ad:57:82:db:42:fa:b3: a7:41:fc:2a:8b:38:c4:8c:84:a5:47:08:3b:b5:60: d2:18:0c:3c:08:1b:e2:12:6a:f4:47:f3:02:cd:60: e2:c9:be:a1:94:ae:55:7f:bc:e2:81:f7:38:d3:c0: 23:67:79:a4:67:6e:50:87:06:e6:3b:04:c4:ad:35: e0:2c:7f:de:b9:30:9e:f3:6e:89:a0:1b:55:0a:dd: 05:b1:61:b9:e7:3e:33:67:78:93:6c:a7:2c:4d:4c: 94:fc:b5:60:64:fa:b3:e4:45:20:2b:57:6f:05:c3: 3a:aa:65:86:a2:88:98:85:cd:14:d1:71:94:83:6e: df:d0:aa:c0:8f:2f:be:02:84:4d:6c:e2:99:8d:66: e9:c9:a6:f5:c3:85:b7:cc:ee:90:75:8b:79:3d:52: 10:01:c4:46:d2:6f:64:7b:27:a6:6d:22:4d:60:ec: fb:46:d6:ce:d5:76:d1:fb:f7:ea:4d:79:41:16:30: 29:f5:4f:c5:1c:7f:51:2b:86:7c:d6:05:38:a3:f6: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:FC:20:32:34:42:86:19:B2:CB:D7:41:0B:E0:33:05:67:39:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2d:0b:c0:ac:22:87:b6:1e:5a:f6:27:98:37:64:9a:ad:58: a1:db:8d:48:8f:d8:69:3a:e9:ce:f7:cd:bb:28:83:00:60:34: 0e:8b:56:5f:0c:a5:85:aa:95:2e:92:07:a4:1b:af:dd:c1:cd: 0c:c4:9b:ea:85:a4:1b:53:41:22:ce:0a:4f:01:74:47:6d:63: df:6d:bd:bf:53:82:7b:9c:1f:29:78:ba:d1:bd:6f:ce:68:d8: f6:e4:8a:bf:f5:60:04:e3:f4:f8:a6:ea:d8:d1:72:99:66:0b: 8b:d8:a6:1f:23:25:68:e0:5a:15:62:4a:8f:09:43:b3:31:e3: ec:bc:bb:f3:05:39:ff:eb:f6:27:e3:0e:5d:36:f3:ec:6a:18: f5:e3:67:ab:8d:5e:d0:2d:18:cc:9e:fa:06:ed:67:b7:9d:3f: 40:61:a4:a0:ca:c5:4b:3d:15:fb:dc:51:04:01:04:46:67:b7: 79:dd:07:a4:d4:b6:1a:c9:58:83:cf:71:c3:40:00:d8:fc:fd: 52:9a:ba:95:2a:c4:c5:f5:ff:83:c5:51:08:f1:36:9d:7e:36: 86:7a:e5:62:c7:74:c4:c9:8d:95:8d:7d:91:be:b6:ed:d4:06: d3:f2:bf:68:33:3f:16:4c:99:a9:58:3f:3a:42:fa:69:b5:81: f9:37:cb:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G3PLYdLS5qD6jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk NTZjYjgyNjQtOTcyNi00ZWVkLTgxYWMtN2FkOGNjNjAyODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz4FFF6SXyqLids6XP6xoXE4NPVBcJGB2PqC GkZzbBVr7XLRV1VE66TFKTsLP4hP0F81u61XgttC+rOnQfwqizjEjISlRwg7tWDS GAw8CBviEmr0R/MCzWDiyb6hlK5Vf7zigfc408AjZ3mkZ25QhwbmOwTErTXgLH/e uTCe826JoBtVCt0FsWG55z4zZ3iTbKcsTUyU/LVgZPqz5EUgK1dvBcM6qmWGooiY hc0U0XGUg27f0KrAjy++AoRNbOKZjWbpyab1w4W3zO6QdYt5PVIQAcRG0m9keyem bSJNYOz7RtbO1XbR+/fqTXlBFjAp9U/FHH9RK4Z81gU4o/YgLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0O/CAyNEKGGbLL10EL4DMFZzkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWEwMDY2M2UtM2ZlYS0z NWYyLWE0NjMtYzJiNjc2ODJiZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIItC8CsIoe2Hlr2J5g3ZJqtWKHbjUiP2Gk66c73zbsogwBgNA6LVl8M pYWqlS6SB6Qbr93BzQzEm+qFpBtTQSLOCk8BdEdtY99tvb9TgnucHyl4utG9b85o 2Pbkir/1YATj9Pim6tjRcplmC4vYph8jJWjgWhViSo8JQ7Mx4+y8u/MFOf/r9ifj Dl028+xqGPXjZ6uNXtAtGMye+gbtZ7edP0BhpKDKxUs9FfvcUQQBBEZnt3ndB6TU thrJWIPPccNAANj8/VKaupUqxMX1/4PFUQjxNp1+NoZ65WLHdMTJjZWNfZG+tu3U BtPyv2gzPxZMmalYPzpC+mm1gfk3y+k= -----END CERTIFICATE-----Generated at Thu Jul 10 02:01:25 2025 by rpki-client