$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/d6eb6926-4dbb-3dff-b9c3-ec105ea075c8.roa File: d6eb6926-4dbb-3dff-b9c3-ec105ea075c8.roa (raw, json) Hash identifier: vf966Mdmo3lGgEzGq2rNgOUotG2C5mWnXV6DaKYHEAI= Subject key identifier: 1B:F6:20:27:1A:3B:62:3A:11:2F:6A:20:2E:54:EB:B5:EB:AA:5A:D2 Certificate issuer: /CN=324596f5-1cf7-4d92-9c68-ecfb27205d68 Certificate serial: 010D0C9F4328584AA160DD8B1D3C838213778668 Authority key identifier: A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/d6eb6926-4dbb-3dff-b9c3-ec105ea075c8.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 400115 IP address blocks: 23.130.152.0/24 maxlen: 24 2606:9b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:dd:8b:1d:3c:83:82:13:77:86:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324596f5-1cf7-4d92-9c68-ecfb27205d68 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=1dbd2239-66de-4696-98a3-1ba165a5e1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:6c:a1:b5:f6:4c:f4:09:82:89:6e:4a:74: 4c:83:70:26:7c:7b:98:7d:39:ea:db:ac:0e:ad:26: ad:71:25:98:c9:ab:59:f5:3f:12:f9:6e:59:32:28: 90:47:e9:c1:c9:ee:7e:be:fc:85:fc:00:cf:d8:18: e7:25:0a:bf:fc:f1:1d:0e:dc:2e:ee:21:8a:cb:99: d7:0c:74:cb:df:e2:7f:18:ee:f8:92:33:79:4f:6f: 2d:91:0b:05:bc:c8:1d:7a:76:01:2b:ea:05:06:e2: f3:ae:06:35:d8:c8:5c:68:ef:e1:36:a3:aa:ba:da: c0:cb:bb:76:91:2a:e5:12:20:30:27:b2:6b:bb:45: b9:9a:13:04:18:5b:fd:92:44:f4:36:25:58:b1:a1: 54:74:3a:27:91:2a:09:6f:2f:04:fc:9d:17:73:e6: 4f:35:4a:73:91:e4:21:a7:04:d0:99:16:e5:48:07: 63:9f:51:f8:78:53:a8:51:28:6b:7d:dc:f6:e9:1a: 9f:f2:d6:56:f7:e9:ee:b0:f2:cf:69:7c:57:24:24: 77:59:63:94:f0:56:73:f1:74:cc:5c:f9:a8:96:16: 5d:65:3f:0a:b9:e2:d1:39:7f:03:9f:60:4a:d2:d6: 2d:01:23:a2:52:5e:9f:d0:bc:94:7d:eb:a8:55:d9: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F6:20:27:1A:3B:62:3A:11:2F:6A:20:2E:54:EB:B5:EB:AA:5A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/d6eb6926-4dbb-3dff-b9c3-ec105ea075c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl X509v3 Authority Key Identifier: keyid:A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer sbgp-ipAddrBlock: critical IPv4: 23.130.152.0/24 IPv6: 2606:9b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c6:38:fb:8f:d2:df:5a:d8:d5:c0:1f:fa:1e:b8:64:72:44: 1a:52:8a:64:df:00:63:bc:b3:27:ef:2f:42:38:a9:28:e4:8e: 57:29:6d:82:a4:69:7c:d3:24:a0:80:67:7f:98:8c:a0:d5:65: 37:7a:26:27:90:dd:33:f4:5a:01:71:d4:d2:b3:23:57:39:2a: 02:9d:05:0a:41:19:a0:34:04:fd:fd:41:4b:06:de:75:ec:ff: 78:17:d0:54:27:91:7a:a3:84:e4:36:82:91:be:f1:03:fe:6e: ab:c9:d8:1d:d5:3e:73:ed:74:cf:29:26:1b:09:c8:1d:38:44: eb:4a:7c:7a:cb:f9:7a:1e:b2:ad:3e:00:4a:94:68:ba:26:1b: 36:75:bc:4f:65:ee:73:a9:9f:08:3a:36:a1:cb:65:5e:75:5b: 6f:72:20:fd:43:ed:c0:9c:b8:05:28:61:7f:e3:8c:b1:5f:82: 38:9d:4a:ff:75:91:c7:a9:d8:c0:0a:bc:8d:74:95:fc:18:84: 3b:40:d8:21:b7:14:50:76:3e:ab:98:ed:8d:d4:7d:41:f2:66: d9:26:d2:f8:7b:53:f6:6e:1c:5d:4c:76:f5:de:02:87:22:3d: 49:66:1e:73:2e:c1:dc:b3:87:18:a9:bc:44:4c:80:e1:ce:77: 89:0f:ba:af -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqhYN2LHTyDghN3hmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0NTk2ZjUtMWNmNy00ZDkyLTljNjgtZWNmYjI3MjA1 ZDY4MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MWRiZDIyMzktNjZkZS00Njk2LTk4YTMtMWJhMTY1YTVlMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS9sobX2TPQJgoluSnRMg3AmfHuYfTnq26wO rSatcSWYyatZ9T8S+W5ZMiiQR+nBye5+vvyF/ADP2BjnJQq//PEdDtwu7iGKy5nX DHTL3+J/GO74kjN5T28tkQsFvMgdenYBK+oFBuLzrgY12MhcaO/hNqOqutrAy7t2 kSrlEiAwJ7Jru0W5mhMEGFv9kkT0NiVYsaFUdDonkSoJby8E/J0Xc+ZPNUpzkeQh pwTQmRblSAdjn1H4eFOoUShrfdz26Rqf8tZW9+nusPLPaXxXJCR3WWOU8FZz8XTM XPmolhZdZT8KueLROX8Dn2BK0tYtASOiUl6f0LyUfeuoVdnQrQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBv2ICcaO2I6ES9qIC5U67XrqlrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMjQ1 OTZmNS0xY2Y3LTRkOTItOWM2OC1lY2ZiMjcyMDVkNjgvZDZlYjY5MjYtNGRiYi0z ZGZmLWI5YzMtZWMxMDVlYTA3NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzI0NTk2ZjUtMWNmNy00ZDkyLTlj NjgtZWNmYjI3MjA1ZDY4LzMyNDU5NmY1LTFjZjctNGQ5Mi05YzY4LWVjZmIyNzIw NWQ2OC5jcmwwHwYDVR0jBBgwFoAUp/JaOlC4h4UXkcCaMyIpOOzlI5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zMjQ1OTZmNS0xY2Y3LTRkOTItOWM2OC1lY2Zi MjcyMDVkNjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4KYMA0E AgACMAcDBQAmBptAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHbGOPuP0t9a2NXAH/oeuGRyRBpSimTfAGO8 syfvL0I4qSjkjlcpbYKkaXzTJKCAZ3+YjKDVZTd6JieQ3TP0WgFx1NKzI1c5KgKd BQpBGaA0BP39QUsG3nXs/3gX0FQnkXqjhOQ2gpG+8QP+bqvJ2B3VPnPtdM8pJhsJ yB04ROtKfHrL+Xoesq0+AEqUaLomGzZ1vE9l7nOpnwg6NqHLZV51W29yIP1D7cCc uAUoYX/jjLFfgjidSv91kcep2MAKvI10lfwYhDtA2CG3FFB2PquY7Y3UfUHyZtkm 0vh7U/ZuHF1MdvXeAociPUlmHnMuwdyzhxipvERMgOHOd4kPuq8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:20:40 2025 by rpki-client