$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa File: 9c3e3edc-3909-344f-8448-01bc508f03d9.roa (raw, json) Hash identifier: ZvXzX5wygsM/grAOVc7GrdWkf7uCD8QTdFlvnSXrqeA= Subject key identifier: A2:BA:6A:15:1E:0D:39:26:87:53:BA:F2:A1:B8:04:E6:07:18:50:80 Certificate issuer: /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Certificate serial: 010D0C9F4328584A374AE0B838E12AFAE34A43A0 Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 400414 IP address blocks: 23.140.152.0/24 maxlen: 24 130.51.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:e0:b8:38:e1:2a:fa:e3:4a:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=70cfd73e-5cb2-42e2-85d0-87bcbd81f820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:0e:16:1a:f3:39:71:4f:ee:87:c5:7b:c9: 4a:d3:36:91:c4:73:56:c8:76:0d:55:3b:48:be:a9: 03:e0:a5:65:e3:2a:0e:3e:01:93:cc:83:02:fc:67: 2e:25:f8:50:1b:b2:55:a3:79:53:d9:30:86:6b:58: fc:c3:dd:c0:1f:11:c5:3d:90:4a:f9:2a:d7:3b:0c: a1:c9:f9:d3:a2:ff:08:e2:a8:84:e7:ea:34:0a:5c: c5:a7:8c:53:59:95:df:ea:89:75:59:8e:5d:b0:54: 2d:38:77:00:ed:86:32:76:af:be:35:93:57:fa:d5: f6:1f:e1:9c:73:51:7d:02:a6:d2:94:be:4a:be:52: f6:6c:9f:05:af:88:5c:99:a6:18:d8:3b:70:0b:9c: 01:19:21:4f:71:84:be:a3:cc:3a:3b:54:9c:02:f7: 29:0d:b6:af:e6:6d:dd:33:ac:7f:cd:a2:4f:41:b4: f9:d7:c9:f8:cd:4c:d0:43:e9:26:3f:ba:1c:d2:92: bf:99:40:81:61:da:50:3c:50:dd:be:96:13:0d:16: e9:5c:43:c1:53:1c:1e:64:70:ca:cb:99:30:05:6e: 62:d2:1a:43:8d:86:f6:bf:f3:8c:36:50:ec:63:b4: 93:17:1c:a4:23:4a:97:6b:14:93:c8:f8:de:ac:3b: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BA:6A:15:1E:0D:39:26:87:53:BA:F2:A1:B8:04:E6:07:18:50:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl X509v3 Authority Key Identifier: keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer sbgp-ipAddrBlock: critical IPv4: 23.140.152.0/24 130.51.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:04:fc:b4:fc:6f:f2:a0:28:f9:22:25:b4:75:6e:97:f2:33: 69:d0:03:e3:18:fc:cf:18:ce:95:b5:e9:05:2c:06:15:2d:69: 64:5a:9b:15:f9:de:34:f8:24:36:be:f5:05:b1:21:52:d7:3b: b2:9d:11:f9:4f:0b:c3:9e:4d:ab:58:45:73:c1:e9:60:63:3b: 39:4b:7a:3f:a9:94:6d:01:8d:eb:60:a9:f9:4c:93:20:fe:8b: 32:62:71:9f:eb:74:7b:95:9b:4c:0d:ce:36:24:db:2c:b1:3a: a5:49:64:03:db:56:3f:18:13:a7:f1:7a:63:49:cf:3b:db:35: b7:a9:29:c2:7b:5d:1a:7d:fe:3d:d7:ce:5d:59:0a:57:6d:36: 54:a8:96:23:5d:07:6d:b9:57:32:33:47:25:ec:09:c9:37:61: a7:a0:e3:0e:62:0c:99:2f:97:25:76:63:0e:b2:d6:4f:1e:f7: ac:04:2f:3f:9c:7b:0b:fc:94:58:2f:9b:d6:ee:39:4e:f4:d7: a8:ba:d7:57:e3:fb:60:a6:cf:a0:d5:3a:8d:45:fe:b4:1d:0e: 54:32:5f:0b:5b:7c:20:64:26:e0:2b:b4:20:b4:e0:f0:04:5b: 2e:1e:40:f9:0d:f1:58:62:e7:24:7b:f1:ed:7e:f6:64:e1:f7: 24:68:a5:e2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEo3SuC4OOEq+uNKQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll Yzk3MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NzBjZmQ3M2UtNWNiMi00MmUyLTg1ZDAtODdiY2JkODFmODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQQOFhrzOXFP7ofFe8lK0zaRxHNWyHYNVTtI vqkD4KVl4yoOPgGTzIMC/GcuJfhQG7JVo3lT2TCGa1j8w93AHxHFPZBK+SrXOwyh yfnTov8I4qiE5+o0ClzFp4xTWZXf6ol1WY5dsFQtOHcA7YYydq++NZNX+tX2H+Gc c1F9AqbSlL5KvlL2bJ8Fr4hcmaYY2DtwC5wBGSFPcYS+o8w6O1ScAvcpDbav5m3d M6x/zaJPQbT518n4zUzQQ+kmP7oc0pK/mUCBYdpQPFDdvpYTDRbpXEPBUxweZHDK y5kwBW5i0hpDjYb2v/OMNlDsY7STFxykI0qXaxSTyPjerDv/3wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKK6ahUeDTkmh1O68qG4BOYHGFCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvOWMzZTNlZGMtMzkwOS0z NDRmLTg0NDgtMDFiYzUwOGYwM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3 NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5 ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi NTFkOWVjOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4yYAwQB gjN8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABAE/LT8b/KgKPkiJbR1bpfyM2nQA+MY/M8YzpW16QUsBhUt aWRamxX53jT4JDa+9QWxIVLXO7KdEflPC8OeTatYRXPB6WBjOzlLej+plG0Bjetg qflMkyD+izJicZ/rdHuVm0wNzjYk2yyxOqVJZAPbVj8YE6fxemNJzzvbNbepKcJ7 XRp9/j3Xzl1ZCldtNlSoliNdB225VzIzRyXsCck3Yaeg4w5iDJkvlyV2Yw6y1k8e 96wELz+cewv8lFgvm9buOU7016i611fj+2Cmz6DVOo1F/rQdDlQyXwtbfCBkJuAr tCC04PAEWy4eQPkN8Vhi5yR78e1+9mTh9yRopeI= -----END CERTIFICATE-----Generated at Mon Jun 30 21:56:06 2025 by rpki-client