$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa File: 34c260ec-a79c-314d-b0b5-91a125d5fea8.roa (raw, json) Hash identifier: Mmg9ilebgx++n5YToJCzRs/nwtJ9DbA3LV3IL+yJU1c= Subject key identifier: 14:2E:07:FB:D9:00:68:8C:43:46:4D:B6:FA:F2:FF:D4:C2:97:F5:CC Certificate issuer: /CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3 Certificate serial: 010D0C9F4328584ACE0BAF5C969DEFBB2BA791A0 Authority key identifier: 73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 23096 IP address blocks: 23.235.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:af:5c:96:9d:ef:bb:2b:a7:91:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=8b31fa0d-4813-4c45-a903-fc24d9471dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:da:de:df:12:83:bc:27:68:bf:df:a1:af: 5b:c5:13:3c:55:44:16:44:40:62:b3:2a:e6:ec:c9: ac:4e:b6:51:c0:cd:d4:8b:6a:31:6c:4d:4b:d5:c1: 1a:b3:6a:19:86:01:5a:29:dd:ff:d6:a4:dd:17:9a: a7:1e:d7:9e:12:b0:3e:1b:9c:fb:82:f0:bb:e2:09: fc:e3:0b:c3:57:fb:d5:95:90:3b:63:3d:40:79:f3: a2:02:96:91:80:19:df:fc:cf:11:b4:b9:f4:5a:8a: 1f:71:54:d2:ee:d5:30:24:82:f5:b1:50:c8:c7:72: 9b:e5:58:5b:40:81:7f:d1:62:b2:a5:3e:ff:ff:be: e7:22:81:2b:96:96:37:e2:0f:d9:87:39:ff:20:7c: a7:8b:e6:45:e3:f7:7a:13:49:83:51:d9:e8:be:72: b7:ff:fc:d7:f8:cb:65:d1:8d:de:11:56:f1:1c:e0: 8c:05:d5:00:3d:29:0e:c8:7f:61:9a:bf:94:c5:7b: 97:ea:98:0d:5f:ff:73:6f:76:bd:24:fb:19:10:bb: 20:95:71:9a:8c:ee:b6:95:26:b0:ed:6c:a5:68:e6: 18:57:2d:8a:39:f0:6a:8e:f6:d6:7c:7a:a2:79:59: c1:5b:d0:5c:04:aa:91:65:e7:8a:a3:ec:fc:6f:c3: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2E:07:FB:D9:00:68:8C:43:46:4D:B6:FA:F2:FF:D4:C2:97:F5:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl X509v3 Authority Key Identifier: keyid:73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer sbgp-ipAddrBlock: critical IPv4: 23.235.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:db:46:90:2e:0f:48:71:e6:8d:5d:ad:fe:45:b3:0f:bc:e1: b9:af:2a:a6:33:ab:af:f6:e1:61:b2:2a:09:ed:bd:3b:91:8a: 15:da:3b:17:e6:12:18:a2:16:02:1b:fc:2d:c1:5f:ca:88:14: 1d:0f:9d:9a:b9:e8:86:b2:31:20:ea:20:cb:b3:7a:ee:09:47: 8d:f9:d6:cb:4b:1e:46:aa:29:9b:c9:7a:58:61:78:eb:69:f2: 50:7b:28:59:43:19:1c:e4:ce:c0:66:c7:b0:ce:96:93:58:5a: 86:3a:73:9d:fb:b3:a3:4a:e8:3e:92:7b:29:ea:8a:bc:a5:c9: 9b:4c:07:ab:7e:8c:9a:a6:5d:af:04:d3:90:80:20:56:24:f1: 99:9d:f9:8c:8c:5b:f0:a6:f5:0f:7c:0c:d2:68:ba:d6:43:3a: da:a8:c4:06:af:dc:83:dd:5f:66:ea:f4:f1:6e:74:5e:82:42: 4b:84:0c:fe:8f:ea:a6:6c:4c:ad:38:a8:08:1b:ef:68:88:ea: 1f:7b:87:0a:b7:b6:ec:9c:37:1e:3e:9a:41:3d:f3:11:89:a6: 60:87:b9:b8:f0:18:2d:f4:d3:ac:61:f4:6c:20:56:9c:a8:17: 64:43:45:15:f5:a5:12:89:bd:22:7e:0e:27:a9:cc:4e:84:bc: e4:09:8d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC69clp3vuyunkaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmMDUyYTktNzM5NS00MzMwLThkOGUtYjBlYmNkMjNm Y2QzMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk OGIzMWZhMGQtNDgxMy00YzQ1LWE5MDMtZmMyNGQ5NDcxZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn/a3t8Sg7wnaL/foa9bxRM8VUQWREBisyrm 7MmsTrZRwM3Ui2oxbE1L1cEas2oZhgFaKd3/1qTdF5qnHteeErA+G5z7gvC74gn8 4wvDV/vVlZA7Yz1AefOiApaRgBnf/M8RtLn0WoofcVTS7tUwJIL1sVDIx3Kb5Vhb QIF/0WKypT7//77nIoErlpY34g/Zhzn/IHyni+ZF4/d6E0mDUdnovnK3//zX+Mtl 0Y3eEVbxHOCMBdUAPSkOyH9hmr+UxXuX6pgNX/9zb3a9JPsZELsglXGajO62lSaw 7WylaOYYVy2KOfBqjvbWfHqieVnBW9BcBKqRZeeKo+z8b8M00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQuB/vZAGiMQ0ZNtvry/9TCl/XMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wY2Yw NTJhOS03Mzk1LTQzMzAtOGQ4ZS1iMGViY2QyM2ZjZDMvMzRjMjYwZWMtYTc5Yy0z MTRkLWIwYjUtOTFhMTI1ZDVmZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGNmMDUyYTktNzM5NS00MzMwLThk OGUtYjBlYmNkMjNmY2QzLzBjZjA1MmE5LTczOTUtNDMzMC04ZDhlLWIwZWJjZDIz ZmNkMy5jcmwwHwYDVR0jBBgwFoAUcxZ80PD2awca4NhC94UvLgJn4hkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wY2YwNTJhOS03Mzk1LTQzMzAtOGQ4ZS1iMGVi Y2QyM2ZjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+syMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzbRpAuD0hx5o1drf5Fsw+84bmvKqYzq6/24WGyKgntvTuRihXaOxfm EhiiFgIb/C3BX8qIFB0PnZq56IayMSDqIMuzeu4JR4351stLHkaqKZvJelhheOtp 8lB7KFlDGRzkzsBmx7DOlpNYWoY6c537s6NK6D6SeynqirylyZtMB6t+jJqmXa8E 05CAIFYk8Zmd+YyMW/Cm9Q98DNJoutZDOtqoxAav3IPdX2bq9PFudF6CQkuEDP6P 6qZsTK04qAgb72iI6h97hwq3tuycNx4+mkE98xGJpmCHubjwGC3006xh9GwgVpyo F2RDRRX1pRKJvSJ+DiepzE6EvOQJjUs= -----END CERTIFICATE-----Generated at Sun Aug 24 10:39:43 2025 by rpki-client