$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa File: eafd673f-1b99-3314-a8b5-d658f6891223.roa (raw, json) Hash identifier: m1ZfILQY+TlLDDuN6kUe5OY4pOJ3l0k3xTAg2CenLzE= Subject key identifier: 16:A0:03:A0:E0:18:7C:EC:18:DA:CC:C2:F2:4B:6D:9B:1F:12:B2:F5 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584A4970572EE418E0D7461F9980 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 32913 IP address blocks: 23.157.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:57:2e:e4:18:e0:d7:46:1f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=3f7a5ad2-8ead-479a-802b-b54f8edecf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e4:f7:eb:bc:f3:9c:76:94:30:c0:26:c1:58: 62:8d:38:50:c2:3b:a5:2a:38:9f:c3:e8:25:c2:a5: 72:fa:59:67:05:74:c6:0a:90:51:c3:57:d4:64:e9: cc:6c:87:20:98:3e:ce:58:55:c9:4b:e0:33:5e:e5: ec:b8:02:1a:cf:2b:2b:3b:0e:c5:f8:d3:af:c8:14: 4e:e0:5f:3c:a6:64:c5:35:54:ec:4c:ef:9f:19:a5: 24:b6:cb:f9:89:1b:98:17:38:c0:88:ee:f4:67:94: 4c:be:4d:2a:f3:a2:26:7d:ad:8e:7c:19:4b:d5:e9: 86:3c:f5:87:c9:b9:e1:3f:f8:b2:c3:17:06:a4:48: d0:7c:b7:4b:bb:d9:bb:01:0e:c0:d3:b0:df:d1:4a: a0:0f:1f:c5:ec:a7:18:b9:85:77:63:fb:53:bb:ae: 5e:0e:7f:4e:93:46:82:05:a6:e6:e8:ae:9e:9d:12: c2:80:8b:f1:d1:66:8c:d5:66:fb:fa:7d:2f:81:9e: 19:9d:7f:d1:db:43:dc:18:e6:7c:7c:cc:43:f5:66: 27:cc:26:8a:29:03:a0:7c:e7:28:fa:34:3d:36:4f: 84:31:85:29:98:85:0a:04:f2:9d:bf:8a:a2:c7:69: 5c:bd:e8:88:f8:1c:39:15:4a:fa:6e:71:b8:39:3d: a0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:03:A0:E0:18:7C:EC:18:DA:CC:C2:F2:4B:6D:9B:1F:12:B2:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 23.157.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:87:33:ca:42:77:f9:0b:8b:9b:59:6c:2f:bc:3a:c5:a0:e1: 6b:8d:73:87:e9:3f:f8:1c:27:13:25:f4:0e:d5:c3:4d:ca:b7: c7:2c:74:95:eb:dc:e3:eb:02:98:59:a8:d5:82:37:40:91:2e: d8:b5:76:18:6e:b0:d1:93:0b:a9:94:78:d0:bc:4a:09:9f:55: 43:d1:bc:91:6c:a7:d1:13:73:e3:f6:fa:5a:c9:2f:90:ab:97: 15:d7:c3:68:27:cf:4e:d8:6f:a5:be:3a:68:46:58:2c:53:81: 0b:9f:5b:3a:06:05:f8:31:b8:13:dd:f5:c8:b1:46:2f:78:cf: 8b:27:39:b7:88:d4:a2:61:c4:48:8d:5f:c3:54:69:76:0e:7e: fd:ca:57:0e:04:05:4a:83:bc:09:5e:59:42:ec:8c:0f:92:40: ec:95:81:d0:aa:b4:00:e1:98:e8:ae:45:1b:bf:f3:d9:f4:e8: 3b:dc:1f:2a:d1:42:a2:c1:05:93:cf:34:92:2e:14:27:a3:cd: a0:89:16:2e:18:0d:97:3e:ae:aa:33:fd:16:95:58:a2:86:df: 1d:a5:8a:f8:10:84:bf:5d:72:d4:9f:8c:f4:a8:6c:c8:aa:11: 59:17:a7:1d:d7:04:9c:0b:9a:94:2e:91:79:4c:34:fb:fc:b3: 40:11:b1:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFcu5Bjg10YfmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk M2Y3YTVhZDItOGVhZC00NzlhLTgwMmItYjU0ZjhlZGVjZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuT367zznHaUMMAmwVhijThQwjulKjifw+gl wqVy+llnBXTGCpBRw1fUZOnMbIcgmD7OWFXJS+AzXuXsuAIazysrOw7F+NOvyBRO 4F88pmTFNVTsTO+fGaUktsv5iRuYFzjAiO70Z5RMvk0q86Imfa2OfBlL1emGPPWH ybnhP/iywxcGpEjQfLdLu9m7AQ7A07Df0UqgDx/F7KcYuYV3Y/tTu65eDn9Ok0aC Babm6K6enRLCgIvx0WaM1Wb7+n0vgZ4ZnX/R20PcGOZ8fMxD9WYnzCaKKQOgfOco +jQ9Nk+EMYUpmIUKBPKdv4qix2lcveiI+Bw5FUr6bnG4OT2gowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBagA6DgGHzsGNrMwvJLbZsfErL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvZWFmZDY3M2YtMWI5OS0z MzE0LWE4YjUtZDY1OGY2ODkxMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqHM8pCd/kLi5tZbC+8OsWg4WuNc4fpP/gcJxMl9A7Vw03Kt8csdJXr 3OPrAphZqNWCN0CRLti1dhhusNGTC6mUeNC8SgmfVUPRvJFsp9ETc+P2+lrJL5Cr lxXXw2gnz07Yb6W+OmhGWCxTgQufWzoGBfgxuBPd9cixRi94z4snObeI1KJhxEiN X8NUaXYOfv3KVw4EBUqDvAleWULsjA+SQOyVgdCqtADhmOiuRRu/89n06DvcHyrR QqLBBZPPNJIuFCejzaCJFi4YDZc+rqoz/RaVWKKG3x2livgQhL9dctSfjPSobMiq EVkXpx3XBJwLmpQukXlMNPv8s0ARsdk= -----END CERTIFICATE-----Generated at Wed Jul 2 04:17:27 2025 by rpki-client