$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa File: 38415cef-c01c-329c-8c56-19ea085fd8f1.roa (raw, json) Hash identifier: H9n55RZt1qlRxnPLNIR0Dql5HmO0XRmuaZ3akTpc1sI= Subject key identifier: A0:F5:2B:4A:FA:9D:81:59:DA:B6:3F:F3:DB:0A:14:25:5A:C9:C2:EB Certificate issuer: /CN=858c4eda-1c14-4575-affe-9e4368bf208d Certificate serial: 010D0C9F4328584A23C01A4DE94EF7B9A2DDB500 Authority key identifier: 3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 203618 IP address blocks: 23.226.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1a:4d:e9:4e:f7:b9:a2:dd:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858c4eda-1c14-4575-affe-9e4368bf208d Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=5b8f767d-bdbd-4ee1-856f-839f19cb5175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:fd:bd:94:32:6a:05:37:d9:1c:09:c4:64: 92:be:64:44:d2:ef:19:2e:28:6d:77:81:2d:91:49: 67:15:b3:74:97:13:95:f7:a0:1c:cd:ce:6a:6a:9e: 88:df:b3:54:23:65:fb:46:5b:76:91:c1:0f:ee:df: 4a:c1:38:83:4c:10:e7:5d:2f:af:9b:dc:dd:4b:c6: f7:71:2c:79:23:e5:67:21:18:79:b9:88:e5:25:4b: e8:f5:9b:eb:bd:68:bc:04:f1:17:7f:f7:3e:77:36: 60:19:a6:d4:fc:1c:93:e2:a5:d2:46:58:b9:55:ad: f1:0a:b5:23:b3:cc:61:d2:1d:27:83:e6:8d:c5:e8: eb:d9:38:64:cb:e0:f3:3d:54:c7:09:0d:f4:76:9c: b7:64:e6:94:ca:18:64:42:20:92:bc:45:ae:bb:e6: 4d:17:90:b1:e8:61:22:4d:b5:e7:0e:fa:ea:42:95: d9:7e:c0:d7:6c:ed:e5:f1:31:f8:23:f2:34:d9:3f: 5b:98:d1:6f:29:28:3a:4d:22:27:fc:7a:95:f8:11: 19:8f:a6:54:d6:27:6c:6d:63:fa:cc:c8:b0:fc:15: 67:f3:81:0d:b9:63:c8:83:55:50:59:7d:d4:be:0e: 5d:09:8c:3b:1e:2c:6e:cd:49:da:60:66:19:59:d1: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F5:2B:4A:FA:9D:81:59:DA:B6:3F:F3:DB:0A:14:25:5A:C9:C2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl X509v3 Authority Key Identifier: keyid:3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer sbgp-ipAddrBlock: critical IPv4: 23.226.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:cc:2c:2f:27:2c:2a:8a:4c:87:ed:4e:2d:aa:35:9d:92:02: a5:c1:ca:ea:b9:bf:9e:73:b4:4b:35:2f:b9:ad:c6:a5:22:d3: d8:a3:9b:67:3c:f4:e1:e7:b5:ce:3f:e7:89:69:4e:e2:22:f1: 6d:88:08:6a:c5:7c:25:25:40:fd:a9:9c:9b:42:93:ae:08:89: b0:b9:b7:2a:a0:57:ec:c6:04:d2:e0:ba:93:64:7b:81:83:9a: 2c:8d:58:57:b2:41:83:a1:bd:a6:25:d7:87:3e:b4:da:86:fb: 7e:7f:20:07:b2:dd:37:7f:3e:9a:f9:fd:0d:5c:3b:f6:e9:8d: ea:14:f5:29:23:b6:0c:de:9c:6c:96:41:9e:6c:ee:f4:81:d5: 67:a5:e3:85:5d:0b:c2:a4:93:8e:38:39:7b:8d:f8:27:4e:19: 31:78:98:ac:a7:93:35:1c:b3:dc:11:22:16:a4:73:93:09:6f: aa:5e:ae:e2:24:61:39:08:85:b5:7d:59:d2:62:e5:a9:23:7c: e1:99:c9:a4:3d:2e:42:ac:0f:bc:0c:44:48:d1:57:7a:3c:ee: a3:f2:63:47:07:02:4f:70:a6:65:1c:b0:45:c4:d9:16:74:be: d6:a2:02:5b:0e:e0:4c:02:50:45:5f:60:2c:fa:e5:6f:e0:98: 95:9a:66:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBpN6U73uaLdtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4YzRlZGEtMWMxNC00NTc1LWFmZmUtOWU0MzY4YmYy MDhkMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NWI4Zjc2N2QtYmRiZC00ZWUxLTg1NmYtODM5ZjE5Y2I1MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk639vZQyagU32RwJxGSSvmRE0u8ZLihtd4Et kUlnFbN0lxOV96Aczc5qap6I37NUI2X7Rlt2kcEP7t9KwTiDTBDnXS+vm9zdS8b3 cSx5I+VnIRh5uYjlJUvo9ZvrvWi8BPEXf/c+dzZgGabU/ByT4qXSRli5Va3xCrUj s8xh0h0ng+aNxejr2Thky+DzPVTHCQ30dpy3ZOaUyhhkQiCSvEWuu+ZNF5Cx6GEi TbXnDvrqQpXZfsDXbO3l8TH4I/I02T9bmNFvKSg6TSIn/HqV+BEZj6ZU1idsbWP6 zMiw/BVn84ENuWPIg1VQWX3Uvg5dCYw7HixuzUnaYGYZWdHCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD1K0r6nYFZ2rY/89sKFCVaycLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NThj NGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQzNjhiZjIwOGQvMzg0MTVjZWYtYzAxYy0z MjljLThjNTYtMTllYTA4NWZkOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU4YzRlZGEtMWMxNC00NTc1LWFm ZmUtOWU0MzY4YmYyMDhkLzg1OGM0ZWRhLTFjMTQtNDU3NS1hZmZlLTllNDM2OGJm MjA4ZC5jcmwwHwYDVR0jBBgwFoAUP3hrqMRxoltZYaBCa8SI7i27E4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NThjNGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQz NjhiZjIwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+JyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3MLC8nLCqKTIftTi2qNZ2SAqXByuq5v55ztEs1L7mtxqUi09ijm2c8 9OHntc4/54lpTuIi8W2ICGrFfCUlQP2pnJtCk64IibC5tyqgV+zGBNLgupNke4GD miyNWFeyQYOhvaYl14c+tNqG+35/IAey3Td/Ppr5/Q1cO/bpjeoU9SkjtgzenGyW QZ5s7vSB1Wel44VdC8Kkk444OXuN+CdOGTF4mKynkzUcs9wRIhakc5MJb6peruIk YTkIhbV9WdJi5akjfOGZyaQ9LkKsD7wMREjRV3o87qPyY0cHAk9wpmUcsEXE2RZ0 vtaiAlsO4EwCUEVfYCz65W/gmJWaZvw= -----END CERTIFICATE-----Generated at Tue Jul 1 02:34:05 2025 by rpki-client