$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa File: d79abeda-0936-3a13-9b49-693cf7dce834.roa (raw, json) Hash identifier: fTQWUzXDvXVUHDWZvOe3oHwwLw+ZawCP24JsX61iDZU= Subject key identifier: 3E:2B:58:1B:2A:30:BE:0D:1D:74:BF:CD:E9:00:F2:37:0F:73:A0:28 Certificate issuer: /CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Certificate serial: 010D0C9F4328584A4275822A6F86AB4B3C024840 Authority key identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 22679 IP address blocks: 23.172.152.0/24 maxlen: 24 2602:f971::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:82:2a:6f:86:ab:4b:3c:02:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=59b5e2d9-877a-4168-a6b1-88e40b614841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:7d:60:57:bc:c6:ea:cd:6f:bf:b4:14:53: 30:67:0d:16:d3:bf:9e:bd:0a:1b:91:24:58:39:f2: 45:3d:77:48:62:41:8f:32:91:df:72:e5:e1:45:15: ee:b9:84:6c:f3:96:f3:a4:e6:9f:33:82:43:8f:01: 35:f8:99:4b:52:d4:38:01:d8:1b:de:dc:d0:01:fa: 25:23:e3:c3:d8:3f:ad:65:a7:31:49:b8:f3:08:76: ab:05:35:c6:7a:df:c1:4f:72:ef:3c:12:02:a1:1d: 6f:d2:74:99:d6:5d:a5:12:d1:67:06:b5:6e:46:e7: 69:ba:57:e9:0b:06:89:5c:e1:cb:39:7c:03:68:d6: 13:9a:b1:d2:77:25:67:7e:e1:9c:50:2c:06:7a:b3: a8:87:10:f9:77:c8:03:80:6e:8d:67:f3:25:35:df: 60:32:bf:3e:75:33:29:7a:1e:f4:be:67:58:fb:20: 85:28:99:04:af:73:ce:db:10:17:e0:ef:9e:10:e9: a9:3f:be:46:6f:f1:85:a1:51:f5:33:00:09:22:e3: d3:4c:a2:be:96:7f:35:c1:50:e9:c6:74:a8:0e:9c: 0d:c6:7f:d1:f4:c8:01:5e:02:e4:f8:4d:9f:db:e1: b0:f8:18:86:d0:1a:5d:4d:7d:75:1a:ef:b0:32:4a: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2B:58:1B:2A:30:BE:0D:1D:74:BF:CD:E9:00:F2:37:0F:73:A0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl X509v3 Authority Key Identifier: keyid:DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer sbgp-ipAddrBlock: critical IPv4: 23.172.152.0/24 IPv6: 2602:f971::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:52:8a:dc:e1:cf:51:08:a1:b2:cc:39:3a:b8:d4:e9:43:81: 7d:bb:71:87:61:7f:9f:9b:b8:9c:a9:82:b9:31:53:a2:07:8e: 13:32:3e:ff:29:18:6c:ce:c6:31:21:48:13:95:08:5b:8b:db: 7a:52:42:0a:fb:43:cd:06:5d:98:80:2b:e3:ba:cc:38:6d:7a: 32:29:5b:49:35:83:c2:eb:1f:cb:e7:af:e4:d4:f5:8d:82:42: f6:28:1d:b3:af:4a:2b:31:9b:bb:33:7a:d2:32:fc:f8:51:2b: e7:75:f2:fe:4d:49:0b:41:a9:8f:6f:60:b6:05:82:ef:9f:42: 02:ce:81:93:78:ad:3c:aa:78:83:87:c9:45:a3:37:3f:26:3a: 4a:ce:5e:07:7b:c1:98:ec:7d:30:53:1e:74:9b:0b:6e:36:b1: 33:76:99:dd:b7:72:9e:b2:cb:cf:9a:af:66:ec:96:5f:b3:69: a1:d9:b4:31:78:ea:66:62:f1:c1:88:c7:f3:6d:75:b8:e1:6a: 9d:e7:3a:7a:f9:b0:1b:2e:fa:ce:a5:51:e9:11:5c:9c:2b:1e: de:8e:74:4b:ee:bf:79:8f:d7:15:f0:43:51:c7:a4:13:56:83: 50:94:03:9f:7f:61:7e:dc:05:a2:e4:9f:6a:e5:01:18:76:db: 20:ce:5d:95 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpCdYIqb4arSzwCSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMxYjIyYTUtZjVlMi00MGQxLTg4MjctYTBjZjhiODU3 MmE1MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk NTliNWUyZDktODc3YS00MTY4LWE2YjEtODhlNDBiNjE0ODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfF9YFe8xurNb7+0FFMwZw0W07+evQobkSRY OfJFPXdIYkGPMpHfcuXhRRXuuYRs85bzpOafM4JDjwE1+JlLUtQ4Adgb3tzQAfol I+PD2D+tZacxSbjzCHarBTXGet/BT3LvPBICoR1v0nSZ1l2lEtFnBrVuRudpulfp CwaJXOHLOXwDaNYTmrHSdyVnfuGcUCwGerOohxD5d8gDgG6NZ/MlNd9gMr8+dTMp eh70vmdY+yCFKJkEr3PO2xAX4O+eEOmpP75Gb/GFoVH1MwAJIuPTTKK+ln81wVDp xnSoDpwNxn/R9MgBXgLk+E2f2+Gw+BiG0BpdTX11Gu+wMkraowIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFD4rWBsqML4NHXS/zekA8jcPc6AoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzFi MjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4NTcyYTUvZDc5YWJlZGEtMDkzNi0z YTEzLTliNDktNjkzY2Y3ZGNlODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmMxYjIyYTUtZjVlMi00MGQxLTg4 MjctYTBjZjhiODU3MmE1L2JjMWIyMmE1LWY1ZTItNDBkMS04ODI3LWEwY2Y4Yjg1 NzJhNS5jcmwwHwYDVR0jBBgwFoAU3evDgXW+j7IrQNewmG/mTwVGOFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNm OGI4NTcyYTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6yYMA4E AgACMAgDBgQmAvlxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1Uorc4c9RCKGyzDk6uNTpQ4F9u3GHYX+f m7icqYK5MVOiB44TMj7/KRhszsYxIUgTlQhbi9t6UkIK+0PNBl2YgCvjusw4bXoy KVtJNYPC6x/L56/k1PWNgkL2KB2zr0orMZu7M3rSMvz4USvndfL+TUkLQamPb2C2 BYLvn0ICzoGTeK08qniDh8lFozc/JjpKzl4He8GY7H0wUx50mwtuNrEzdpndt3Ke ssvPmq9m7JZfs2mh2bQxeOpmYvHBiMfzbXW44Wqd5zp6+bAbLvrOpVHpEVycKx7e jnRL7r95j9cV8ENRx6QTVoNQlAOff2F+3AWi5J9q5QEYdtsgzl2V -----END CERTIFICATE-----Generated at Mon Jun 30 07:32:50 2025 by rpki-client