$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa File: cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa (raw, json) Hash identifier: wPTVF9GzPttWzMpWsVcoB1BMspi5UfW+KQZ1rm2RRaY= Subject key identifier: B2:DE:79:5B:DC:B0:5E:FD:4E:AF:68:D3:F3:D9:F2:64:23:43:B6:00 Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584A5765D18F4607BF8DA2A7F680 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 399805 IP address blocks: 23.179.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d1:8f:46:07:bf:8d:a2:a7:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=62be9ab3-b057-406e-bf8a-479ef30be025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:ef:42:b0:12:b7:a3:a7:9d:09:ba:74:41: e7:69:70:ee:15:91:a1:05:80:ce:56:64:1e:00:99: 57:83:d4:31:d1:7e:6f:9b:28:ae:85:85:3f:18:f8: 28:a2:ed:dc:a9:f2:00:86:cd:d1:3f:36:2a:d1:6e: 43:d6:02:81:b6:fa:1c:e9:55:47:07:6a:e7:1b:9b: ec:ba:4a:41:33:64:90:a5:56:ed:79:a4:5a:3d:f0: d3:f2:31:66:da:58:39:20:1f:65:31:79:10:2f:6d: bf:c1:50:56:93:63:d5:f4:82:23:d1:26:32:89:68: ed:73:7b:52:65:c5:a9:5b:1a:49:e8:9d:83:e2:c5: bb:99:1e:29:e5:03:6a:18:f0:77:7b:7f:97:97:61: 1a:3e:18:87:70:9a:06:02:51:91:49:4e:c7:4d:a7: a9:65:e2:36:6d:8b:c8:d8:00:8e:cf:9d:9c:91:d1: 01:b2:6e:78:98:c5:22:3e:47:06:1d:4d:09:28:ab: 55:16:13:52:03:cf:9d:22:03:4a:76:e9:3a:3e:b6: 2e:eb:bb:b8:94:b9:73:7e:36:07:6e:bd:cf:06:c3: d6:88:c2:98:c1:f4:5a:10:76:b5:d1:99:a6:36:04: e7:4e:87:c6:52:b4:47:44:d1:58:7d:27:67:c6:39: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DE:79:5B:DC:B0:5E:FD:4E:AF:68:D3:F3:D9:F2:64:23:43:B6:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fa:05:8f:05:d6:a6:84:f8:6a:6a:49:7a:6e:47:0a:d5:84: 55:39:44:04:80:eb:aa:ff:26:84:c5:d9:cc:32:82:80:6b:60: a5:4b:f5:ce:16:f1:e7:f8:7c:60:61:59:40:d2:61:a9:72:92: 62:93:fa:ca:d6:54:bb:90:ca:71:74:b5:fb:cc:98:1a:b3:53: 00:30:8a:03:26:d6:54:db:da:9a:8a:b2:2c:25:2e:47:93:e0: eb:15:f2:39:53:33:55:55:aa:bf:d6:37:20:a0:f9:b2:b3:1e: 74:38:28:ba:a5:d4:14:5d:c2:8a:b6:21:d2:30:c1:ee:36:fb: a6:bc:01:86:e3:57:8f:df:5e:67:ad:50:53:8a:39:c4:09:d2: 2d:ac:1d:4a:d7:ab:d2:60:bc:b8:ee:1f:3e:3b:93:71:0c:a1: c2:ff:0b:1f:47:fd:a6:11:a9:e7:a2:69:24:63:1a:97:45:a8: 4f:a5:5e:68:85:5e:83:0c:87:0c:39:8c:49:51:97:58:bc:5c: ec:23:ea:7c:5d:f0:43:b7:c5:34:5c:8c:79:70:cb:9a:77:8e: f4:e6:98:60:1b:87:43:2f:24:95:09:e3:02:5f:17:b5:12:47: 56:3f:40:f2:6b:6a:93:82:2a:8b:e4:5b:fb:2b:99:73:f8:15: 2e:28:e3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdGPRge/jaKn9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NjJiZTlhYjMtYjA1Ny00MDZlLWJmOGEtNDc5ZWYzMGJlMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9HvQrASt6OnnQm6dEHnaXDuFZGhBYDOVmQe AJlXg9Qx0X5vmyiuhYU/GPgoou3cqfIAhs3RPzYq0W5D1gKBtvoc6VVHB2rnG5vs ukpBM2SQpVbteaRaPfDT8jFm2lg5IB9lMXkQL22/wVBWk2PV9IIj0SYyiWjtc3tS ZcWpWxpJ6J2D4sW7mR4p5QNqGPB3e3+Xl2EaPhiHcJoGAlGRSU7HTaepZeI2bYvI 2ACOz52ckdEBsm54mMUiPkcGHU0JKKtVFhNSA8+dIgNKduk6PrYu67u4lLlzfjYH br3PBsPWiMKYwfRaEHa10ZmmNgTnTofGUrRHRNFYfSdnxjkXQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLeeVvcsF79Tq9o0/PZ8mQjQ7YAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvY2RkYzBjNjgtNDQ2ZS0z MWZlLTk5YmMtODYxYjVkZmM3YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7ORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH6BY8F1qaE+GpqSXpuRwrVhFU5RASA66r/JoTF2cwygoBrYKVL9c4W 8ef4fGBhWUDSYalykmKT+srWVLuQynF0tfvMmBqzUwAwigMm1lTb2pqKsiwlLkeT 4OsV8jlTM1VVqr/WNyCg+bKzHnQ4KLql1BRdwoq2IdIwwe42+6a8AYbjV4/fXmet UFOKOcQJ0i2sHUrXq9JgvLjuHz47k3EMocL/Cx9H/aYRqeeiaSRjGpdFqE+lXmiF XoMMhww5jElRl1i8XOwj6nxd8EO3xTRcjHlwy5p3jvTmmGAbh0MvJJUJ4wJfF7US R1Y/QPJrapOCKovkW/srmXP4FS4o4xE= -----END CERTIFICATE-----Generated at Sun Jun 29 21:07:09 2025 by rpki-client