$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa File: 7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa (raw, json) Hash identifier: Av1hXs+IU5AbTKnGmvX88jaD66dFts8uT4mIb5hhKIc= Subject key identifier: 08:52:FA:3E:82:B6:B8:E5:2F:68:55:1E:78:6A:C2:04:0D:A3:12:4F Certificate issuer: /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Certificate serial: 010D0C9F4328584A3BE7E4722A8B7263F907F780 Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa Signing time: Wed 18 Jun 2025 16:40:41 +0000 ROA not before: Wed 18 Jun 2025 16:40:41 +0000 ROA not after: Tue 16 Sep 2025 16:40:41 +0000 asID: 397493 IP address blocks: 23.140.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:e7:e4:72:2a:8b:72:63:f9:07:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Validity Not Before: Jun 18 16:40:41 2025 GMT Not After : Sep 16 16:40:41 2025 GMT Subject: CN=ff5c730b-aaa4-47fc-8dff-3e75b6819920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:7f:2b:e1:24:84:e0:58:0e:4e:62:17:6b: 05:8f:96:4c:c9:c6:cc:73:19:57:d8:bb:cb:a4:57: 5b:1c:29:ff:d1:83:30:9d:8d:5f:73:47:c1:c5:31: 77:65:44:0e:23:e1:9e:8c:ad:dc:a2:59:05:0f:04: 4d:02:b6:7c:33:96:e6:d5:66:93:93:ad:4f:12:2e: ee:bc:4f:18:89:51:92:25:f2:7c:dd:e3:95:65:65: d1:93:2d:27:36:e1:70:00:b2:3d:0b:1d:e4:3d:68: c6:e3:5b:05:05:31:df:5c:ac:9d:1a:f1:08:f5:e7: bc:84:1c:9f:de:d9:55:66:74:60:1a:6e:15:e8:f1: b6:ef:80:10:88:6a:db:64:ca:9e:c7:47:ab:48:9d: aa:09:ab:40:43:41:ec:11:e8:b4:d5:b0:3d:2d:9d: 57:e7:a4:90:3b:25:02:00:85:41:26:df:9c:78:ef: c9:ed:c1:65:eb:b7:14:cc:d3:70:69:14:7e:f2:0a: ee:71:46:19:8b:34:44:81:63:91:20:69:18:b4:67: 44:d4:41:25:ac:98:a5:b4:78:51:72:b2:23:68:88: 9c:e3:97:09:f8:3b:fd:25:20:a0:a5:3e:3d:c9:0a: a6:b9:26:6e:a7:47:54:61:74:7b:3a:73:87:83:f7: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:52:FA:3E:82:B6:B8:E5:2F:68:55:1E:78:6A:C2:04:0D:A3:12:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl X509v3 Authority Key Identifier: keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer sbgp-ipAddrBlock: critical IPv4: 23.140.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7b:1a:f2:24:11:54:d5:36:7a:45:16:4b:f1:8d:60:4a:50: 6d:85:4b:de:e9:7a:85:44:3d:79:5a:df:f1:80:6e:ca:6a:e8: 3b:88:b5:83:43:13:09:d1:17:d1:1d:40:ca:09:ab:b6:4c:2f: 8f:9c:5a:4f:9b:03:f3:c0:b0:bc:5f:82:05:b5:fe:43:aa:22: ad:a6:7f:61:99:5c:b6:81:1e:34:f3:f9:44:9e:71:9d:8b:4b: 71:27:e6:d0:ac:1e:6e:99:21:c3:4e:b8:41:bd:1e:d9:89:63: ca:c9:e8:ea:a9:30:22:c2:cc:c6:9c:29:9b:72:a3:38:b4:29: 6f:3b:b6:d5:d7:7c:66:7d:94:18:cd:41:78:f9:53:ee:88:ef: e3:79:fb:34:1e:6c:a7:cf:01:e0:87:62:d3:cd:a7:46:4f:18: 6e:26:79:e0:e4:22:3f:8f:a5:58:6e:9e:59:a1:85:7b:2a:84: 3f:37:2b:23:19:49:78:a7:21:63:a8:69:3f:63:99:e7:28:80: 6d:64:64:6b:a0:68:11:9d:2f:40:6d:1e:03:1d:7a:22:3a:e6: be:89:52:16:89:85:e3:98:95:ff:93:35:3c:b8:2a:76:af:5c: 9b:30:ee:32:33:89:68:0a:04:1b:5f:be:f2:27:4b:51:73:3e: 6b:66:72:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo75+RyKotyY/kH94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyNjk1YjctZTgyMy00Zjc0LTkzYjgtOThkYmJmNzc1 YmNmMB4XDTI1MDYxODE2NDA0MVoXDTI1MDkxNjE2NDA0MVowLzEtMCsGA1UEAxMk ZmY1YzczMGItYWFhNC00N2ZjLThkZmYtM2U3NWI2ODE5OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuh/K+EkhOBYDk5iF2sFj5ZMycbMcxlX2LvL pFdbHCn/0YMwnY1fc0fBxTF3ZUQOI+GejK3colkFDwRNArZ8M5bm1WaTk61PEi7u vE8YiVGSJfJ83eOVZWXRky0nNuFwALI9Cx3kPWjG41sFBTHfXKydGvEI9ee8hByf 3tlVZnRgGm4V6PG274AQiGrbZMqex0erSJ2qCatAQ0HsEei01bA9LZ1X56SQOyUC AIVBJt+ceO/J7cFl67cUzNNwaRR+8grucUYZizREgWORIGkYtGdE1EElrJiltHhR crIjaIic45cJ+Dv9JSCgpT49yQqmuSZup0dUYXR7OnOHg/dQLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhS+j6CtrjlL2hVHnhqwgQNoxJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2 OTViNy1lODIzLTRmNzQtOTNiOC05OGRiYmY3NzViY2YvNzUzMDU3OWYtYjVmYS0z N2Y0LWI4YWEtMGUxZjRkYTA2ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGEyNjk1YjctZTgyMy00Zjc0LTkz YjgtOThkYmJmNzc1YmNmLzhhMjY5NWI3LWU4MjMtNGY3NC05M2I4LTk4ZGJiZjc3 NWJjZi5jcmwwHwYDVR0jBBgwFoAUQwpY7vmeeMU73CWitIOTgUZpxGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2OTViNy1lODIzLTRmNzQtOTNiOC05OGRi YmY3NzViY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4xUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd7GvIkEVTVNnpFFkvxjWBKUG2FS97peoVEPXla3/GAbspq6DuItYND EwnRF9EdQMoJq7ZML4+cWk+bA/PAsLxfggW1/kOqIq2mf2GZXLaBHjTz+USecZ2L S3En5tCsHm6ZIcNOuEG9HtmJY8rJ6OqpMCLCzMacKZtyozi0KW87ttXXfGZ9lBjN QXj5U+6I7+N5+zQebKfPAeCHYtPNp0ZPGG4meeDkIj+PpVhunlmhhXsqhD83KyMZ SXinIWOoaT9jmecogG1kZGugaBGdL0BtHgMdeiI65r6JUhaJheOYlf+TNTy4Knav XJsw7jIziWgKBBtfvvInS1FzPmtmcsE= -----END CERTIFICATE-----Generated at Mon Jun 30 08:25:24 2025 by rpki-client