$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa File: 35aa566c-1d54-3f84-a686-08058cbecf0f.roa (raw, json) Hash identifier: d4Pdo504aN+HyNPj2Y8rzAwSQVfOJcwZL8PyA5fNPfI= Subject key identifier: 88:A0:15:E8:12:23:9E:19:70:42:DD:65:EA:99:EE:07:52:BE:E4:B6 Certificate issuer: /CN=d49d6e31-9274-4997-a718-4ba13c83041c Certificate serial: 010D0C9F4328584A549B1C92296975C3CD147E40 Authority key identifier: 48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 63023 IP address blocks: 23.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1c:92:29:69:75:c3:cd:14:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49d6e31-9274-4997-a718-4ba13c83041c Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=ae10d8f1-7907-47fd-be35-318a6e0be75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:db:8d:82:42:41:a7:eb:72:1f:19:60:cd: 54:59:20:f4:09:33:47:f3:26:3d:9b:76:97:0c:ed: 8c:f1:d4:0e:f5:ba:8d:92:f8:53:7c:cd:c2:7e:09: 27:a8:41:88:64:93:9d:3d:e1:a0:55:24:58:73:c6: f3:ee:ed:40:45:c6:70:bf:99:52:ab:da:53:09:45: 26:ad:92:a3:09:de:f0:8b:cb:a1:ec:37:8e:89:d9: 03:51:da:b9:3a:94:c3:db:ae:e9:d9:f5:62:a4:1e: da:bc:11:81:c1:24:84:9d:d0:c3:a1:39:39:e9:6c: 49:87:fc:6c:53:51:47:e8:64:25:b5:4c:5d:91:c3: 6f:c5:dd:7e:74:c5:9f:2f:7b:b2:70:3a:90:48:ef: 92:43:52:6b:c6:9c:00:e2:82:40:a9:39:2a:8b:cb: 18:a4:6e:d8:09:09:bf:29:13:2a:51:92:d1:b5:8a: d0:00:3b:b0:a4:c9:64:2d:73:22:c0:43:c8:48:52: 23:e9:c7:36:a1:3a:95:b7:17:ea:34:80:d0:a3:ed: 11:5e:fb:9b:ec:1b:cf:73:65:b9:4c:b8:24:a1:84: e7:85:92:bd:d8:1d:e6:ea:b7:7d:3c:07:52:f6:6a: 24:66:fe:37:dc:b9:eb:88:45:3a:3b:1e:2c:5c:18: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:15:E8:12:23:9E:19:70:42:DD:65:EA:99:EE:07:52:BE:E4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl X509v3 Authority Key Identifier: keyid:48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer sbgp-ipAddrBlock: critical IPv4: 23.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:26:34:f0:a5:84:6e:2b:8c:05:30:59:b9:48:98:77:67:c4: 63:fd:32:9f:af:42:c2:c1:50:57:b2:15:6e:43:59:f0:ef:30: 29:2a:75:85:5d:94:ca:85:c9:30:17:85:5b:0b:08:44:e5:dd: 88:ab:3b:bc:29:56:b0:99:e9:e9:28:7b:d4:94:64:54:f2:12: 03:dd:20:20:c7:80:a8:ae:37:df:79:72:b9:56:f4:25:20:92: 6b:9b:a3:5e:9c:fa:d6:b7:8b:e2:bd:54:85:8a:8e:aa:15:8b: b1:bd:39:04:5c:1d:b4:97:9c:aa:dd:d5:25:15:5e:58:ee:33: dd:78:35:7f:e5:84:e9:5b:f4:4d:98:e0:16:04:48:14:0f:4c: 07:c2:d8:6e:cf:a3:c1:15:7b:15:cf:01:c7:0f:d8:b7:a4:81: c2:8e:79:0d:ae:eb:33:ad:48:82:e6:7c:49:6b:14:38:ba:b1: e0:4c:27:e0:33:de:65:00:ea:2f:8b:35:4e:6f:46:ff:cc:a9: d9:0b:21:3e:5f:5a:0e:11:d4:43:5b:90:32:2f:66:a7:0e:5a: 0f:17:a4:d9:60:c3:7e:64:8d:f8:0c:ef:32:b4:57:c6:b4:4b: fe:48:25:c3:16:9f:2e:eb:ef:83:c8:9a:a9:30:c0:f9:9e:35: e6:09:bb:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxySKWl1w80UfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ZDZlMzEtOTI3NC00OTk3LWE3MTgtNGJhMTNjODMw NDFjMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk YWUxMGQ4ZjEtNzkwNy00N2ZkLWJlMzUtMzE4YTZlMGJlNzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd7bjYJCQafrch8ZYM1UWSD0CTNH8yY9m3aX DO2M8dQO9bqNkvhTfM3CfgknqEGIZJOdPeGgVSRYc8bz7u1ARcZwv5lSq9pTCUUm rZKjCd7wi8uh7DeOidkDUdq5OpTD267p2fVipB7avBGBwSSEndDDoTk56WxJh/xs U1FH6GQltUxdkcNvxd1+dMWfL3uycDqQSO+SQ1JrxpwA4oJAqTkqi8sYpG7YCQm/ KRMqUZLRtYrQADuwpMlkLXMiwEPISFIj6cc2oTqVtxfqNIDQo+0RXvub7BvPc2W5 TLgkoYTnhZK92B3m6rd9PAdS9mokZv433LnriEU6Ox4sXBh7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIigFegSI54ZcELdZeqZ7gdSvuS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNDlk NmUzMS05Mjc0LTQ5OTctYTcxOC00YmExM2M4MzA0MWMvMzVhYTU2NmMtMWQ1NC0z Zjg0LWE2ODYtMDgwNThjYmVjZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDQ5ZDZlMzEtOTI3NC00OTk3LWE3 MTgtNGJhMTNjODMwNDFjL2Q0OWQ2ZTMxLTkyNzQtNDk5Ny1hNzE4LTRiYTEzYzgz MDQxYy5jcmwwHwYDVR0jBBgwFoAUSAABiSsbPwrMcBnY5jIusven2eUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNDlkNmUzMS05Mjc0LTQ5OTctYTcxOC00YmEx M2M4MzA0MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF50oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgmNPClhG4rjAUwWblImHdnxGP9Mp+vQsLBUFeyFW5DWfDvMCkqdYVd lMqFyTAXhVsLCETl3YirO7wpVrCZ6ekoe9SUZFTyEgPdICDHgKiuN995crlW9CUg kmubo16c+ta3i+K9VIWKjqoVi7G9OQRcHbSXnKrd1SUVXljuM914NX/lhOlb9E2Y 4BYESBQPTAfC2G7Po8EVexXPAccP2LekgcKOeQ2u6zOtSILmfElrFDi6seBMJ+Az 3mUA6i+LNU5vRv/MqdkLIT5fWg4R1ENbkDIvZqcOWg8XpNlgw35kjfgM7zK0V8a0 S/5IJcMWny7r74PImqkwwPmeNeYJu7Q= -----END CERTIFICATE-----Generated at Sun Jun 29 07:31:10 2025 by rpki-client