$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/79131f5d-781c-3098-bc49-84c4e9a80675.roa File: 79131f5d-781c-3098-bc49-84c4e9a80675.roa (raw, json) Hash identifier: TJHBfV5sRg5ZLDVhmpSzZR9zJTAjNPOivNYeDdNY2PI= Subject key identifier: 92:C0:77:13:21:4A:9A:41:36:1D:4D:02:73:2D:4D:17:1A:01:EA:D6 Certificate issuer: /CN=3e9ca003-d1bd-4848-a9c8-2b65aeba6342 Certificate serial: 010D0C9F4328584A2ABAD84DBADB0D177033F600 Authority key identifier: 86:71:B7:E8:8F:DC:7C:88:5B:AD:20:88:49:E1:FF:04:19:E5:7B:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/79131f5d-781c-3098-bc49-84c4e9a80675.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 394715 IP address blocks: 23.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d8:4d:ba:db:0d:17:70:33:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9ca003-d1bd-4848-a9c8-2b65aeba6342 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=2e026e17-7b3e-43a4-ae0b-72e6414cd281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:f2:2f:3b:9a:6b:8f:2c:b6:c3:fe:e3:44: 14:8a:71:dc:4e:71:4d:bd:f4:29:cb:b7:06:7c:05: 4e:69:d0:0e:87:4b:11:a9:d6:b2:ef:70:da:7e:d0: 0a:23:53:f0:10:8b:8c:74:fa:e7:47:e7:94:a4:75: 4c:6b:36:7e:06:f4:72:db:52:35:50:20:12:dc:50: b9:4c:de:57:6d:60:30:45:49:1b:d8:4e:59:41:df: bb:64:96:5c:eb:28:cf:09:02:1a:95:be:87:b1:c7: 26:45:46:53:86:c8:4e:30:8b:fd:58:0f:2a:55:2b: a0:8c:da:7e:4d:1a:89:c6:39:f3:dc:35:fd:ad:55: 8a:3c:1b:c5:3e:c1:14:62:6b:2f:bc:c9:88:59:13: 01:74:cb:73:70:a5:cc:7b:ea:27:93:c9:4e:11:a1: 0d:b7:33:ec:ac:85:91:03:99:66:67:26:b1:1a:88: ce:47:95:42:d9:c7:99:c2:73:b9:9d:29:22:2a:31: 84:5a:f6:52:4d:25:83:9a:a9:5c:30:97:c7:b3:6c: 86:04:75:38:45:11:c4:12:95:4a:94:4a:7f:a7:22: 96:bc:dd:b0:0f:ad:54:44:84:e5:47:cd:ef:1c:11: 31:ee:f3:fb:c8:f7:43:82:d7:d8:e5:18:83:0b:ef: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C0:77:13:21:4A:9A:41:36:1D:4D:02:73:2D:4D:17:1A:01:EA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/79131f5d-781c-3098-bc49-84c4e9a80675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.crl X509v3 Authority Key Identifier: keyid:86:71:B7:E8:8F:DC:7C:88:5B:AD:20:88:49:E1:FF:04:19:E5:7B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer sbgp-ipAddrBlock: critical IPv4: 23.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e6:17:8b:9f:a0:0b:bd:88:ac:bd:92:79:51:d9:58:58:98: 45:ac:d4:32:a7:71:7a:03:26:89:82:4e:02:7f:41:7f:8f:7b: 67:59:72:fc:45:72:d8:eb:b3:9e:e8:06:f4:32:7e:ea:12:e4: 4f:cd:cc:c1:e7:8c:88:e3:da:1c:9b:cf:3b:0e:1d:d0:97:e1: ee:a5:91:e2:ea:34:c2:3a:4d:0e:2f:b9:cf:2c:16:cd:97:df: 5f:78:10:de:f3:e3:f7:70:85:2d:35:37:93:be:62:e4:d0:5f: 82:35:9e:16:d0:f9:a4:00:fa:49:f8:5f:f0:f3:df:a9:7b:a7: 20:90:ec:7e:2e:b2:10:09:57:f3:c6:b6:a3:4b:d0:1b:2a:30: c4:68:5a:01:46:c3:8c:29:bd:d0:7a:1e:64:ff:6d:c4:dc:32: b0:93:90:12:68:83:65:f1:6c:a2:01:85:70:92:bb:ce:72:88: a5:d9:45:dd:82:35:ea:74:4c:b2:e5:0a:88:02:53:f3:af:3e: 31:7a:e3:2e:97:41:78:38:98:ae:3c:21:3f:80:a8:18:55:8a: 9e:5c:70:29:d9:ef:e0:d9:ab:ba:44:ac:70:81:6e:12:44:ba: d2:bd:23:f0:65:50:ba:b0:e6:fd:79:b4:65:d5:47:4a:8d:37: 07:e5:0f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquthNutsNF3Az9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5Y2EwMDMtZDFiZC00ODQ4LWE5YzgtMmI2NWFlYmE2 MzQyMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MmUwMjZlMTctN2IzZS00M2E0LWFlMGItNzJlNjQxNGNkMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCnyLzuaa48stsP+40QUinHcTnFNvfQpy7cG fAVOadAOh0sRqday73DaftAKI1PwEIuMdPrnR+eUpHVMazZ+BvRy21I1UCAS3FC5 TN5XbWAwRUkb2E5ZQd+7ZJZc6yjPCQIalb6HsccmRUZThshOMIv9WA8qVSugjNp+ TRqJxjnz3DX9rVWKPBvFPsEUYmsvvMmIWRMBdMtzcKXMe+onk8lOEaENtzPsrIWR A5lmZyaxGojOR5VC2ceZwnO5nSkiKjGEWvZSTSWDmqlcMJfHs2yGBHU4RRHEEpVK lEp/pyKWvN2wD61URITlR83vHBEx7vP7yPdDgtfY5RiDC+/NJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLAdxMhSppBNh1NAnMtTRcaAerWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zZTlj YTAwMy1kMWJkLTQ4NDgtYTljOC0yYjY1YWViYTYzNDIvNzkxMzFmNWQtNzgxYy0z MDk4LWJjNDktODRjNGU5YTgwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2U5Y2EwMDMtZDFiZC00ODQ4LWE5 YzgtMmI2NWFlYmE2MzQyLzNlOWNhMDAzLWQxYmQtNDg0OC1hOWM4LTJiNjVhZWJh NjM0Mi5jcmwwHwYDVR0jBBgwFoAUhnG36I/cfIhbrSCISeH/BBnle8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zZTljYTAwMy1kMWJkLTQ4NDgtYTljOC0yYjY1 YWViYTYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4nYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrmF4ufoAu9iKy9knlR2VhYmEWs1DKncXoDJomCTgJ/QX+Pe2dZcvxF ctjrs57oBvQyfuoS5E/NzMHnjIjj2hybzzsOHdCX4e6lkeLqNMI6TQ4vuc8sFs2X 3194EN7z4/dwhS01N5O+YuTQX4I1nhbQ+aQA+kn4X/Dz36l7pyCQ7H4ushAJV/PG tqNL0BsqMMRoWgFGw4wpvdB6HmT/bcTcMrCTkBJog2XxbKIBhXCSu85yiKXZRd2C Nep0TLLlCogCU/OvPjF64y6XQXg4mK48IT+AqBhVip5ccCnZ7+DZq7pErHCBbhJE utK9I/BlULqw5v15tGXVR0qNNwflD5I= -----END CERTIFICATE-----Generated at Tue Jul 1 20:59:46 2025 by rpki-client