$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/57c2c61e-1185-3f2e-8b96-760a6eb7e0fe.roa File: 57c2c61e-1185-3f2e-8b96-760a6eb7e0fe.roa (raw, json) Hash identifier: 2e90thCY8OLM97w+CydjBaFWLiSle6rJY2SmaqbqRMw= Subject key identifier: A5:41:6A:A0:71:84:74:AB:FE:B8:2C:FB:8C:1E:BF:FD:77:37:1A:83 Certificate issuer: /CN=933821cc-14e5-4036-8f32-e54b6facbdbe Certificate serial: 010D0C9F4328584A5600503B648A174983EEC500 Authority key identifier: 75:C8:2B:E8:F5:04:21:77:1B:99:A8:A4:D7:3F:86:53:8C:FB:E1:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/57c2c61e-1185-3f2e-8b96-760a6eb7e0fe.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 27439 IP address blocks: 23.128.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:50:3b:64:8a:17:49:83:ee:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=933821cc-14e5-4036-8f32-e54b6facbdbe Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=832eb99d-9484-4a44-8574-d03328f2371c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:f8:94:ce:16:54:f4:12:fc:da:34:e6:60: 08:ba:53:ca:1c:61:89:a7:14:b9:65:7d:65:47:72: 63:2c:a7:f7:ce:06:e6:57:6e:2e:c7:99:36:dc:74: 7c:17:16:1a:fb:f2:fc:f4:ef:5c:14:19:cb:34:18: 22:7c:0f:80:ed:41:4f:18:1e:34:a7:54:57:f4:f8: 12:d0:1d:21:aa:b0:42:27:77:bf:34:b8:6f:2a:89: f6:72:65:ce:fa:2d:3a:f9:ee:b4:3b:c5:53:b1:5d: 6d:3b:81:57:a4:85:32:65:8e:cc:a2:30:e8:75:41: 1d:99:12:d2:35:99:b4:94:eb:df:9d:05:2f:77:fe: 07:89:b7:4a:01:3c:10:05:b5:04:42:b9:32:9c:5e: c3:61:09:61:e3:cb:c2:27:72:a5:18:6e:97:7c:3a: b2:b4:81:ff:f8:25:d0:56:0f:a1:38:3a:7e:e8:b8: 08:f9:5f:64:12:ce:c9:c2:71:73:56:f0:a2:6e:28: ad:ee:ec:9f:f9:df:8a:3e:f6:f8:aa:ce:40:4f:fa: 0e:1d:68:f0:47:d2:9c:ff:75:a9:a0:42:96:f0:1c: 81:a5:e5:86:37:6d:3a:88:e0:a2:57:38:25:4b:b3: 0a:28:0e:ed:3e:98:5f:40:38:9c:be:2a:b9:10:59: dc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:6A:A0:71:84:74:AB:FE:B8:2C:FB:8C:1E:BF:FD:77:37:1A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/57c2c61e-1185-3f2e-8b96-760a6eb7e0fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.crl X509v3 Authority Key Identifier: keyid:75:C8:2B:E8:F5:04:21:77:1B:99:A8:A4:D7:3F:86:53:8C:FB:E1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer sbgp-ipAddrBlock: critical IPv4: 23.128.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:95:d6:4f:b8:89:63:3c:d1:7c:3f:4c:ef:23:b3:93:fd:15: cb:98:6f:1e:fe:aa:b3:92:e3:36:88:70:64:ea:39:9c:68:7c: 12:8d:ec:d9:45:56:53:0e:ca:1e:e4:3d:a7:15:ae:87:24:26: 2f:3b:8c:b4:01:89:52:8a:ed:a3:d7:c5:c3:26:09:44:b6:db: 89:f4:4b:64:1e:3f:5b:13:b0:73:f5:9e:6a:3e:67:23:4d:57: d8:1e:fd:20:89:f6:f1:69:e5:0c:10:c1:f5:d1:d5:05:ca:86: 23:7d:62:39:e3:05:48:f6:f1:6c:47:73:ba:6e:24:0e:9a:2c: 07:b2:c2:49:1c:98:3c:df:44:07:a6:3c:27:97:24:a4:34:58: 8f:63:08:97:c3:4e:97:70:35:54:f8:83:34:db:66:d7:98:8d: 5a:80:2b:f6:9b:73:3a:5e:2e:01:42:0a:2d:99:d4:71:bf:06: e0:79:c8:86:6a:01:24:07:ad:9a:c4:a9:6d:89:ac:1e:2b:0c: b5:28:57:45:16:25:ba:d8:d8:99:df:91:9c:23:ff:bd:57:5b: 3f:32:38:49:d7:d1:fa:01:b6:37:1f:9a:7d:a5:4a:c0:b3:58: ee:b8:55:fe:a5:2b:62:23:cd:ac:6d:1b:5f:a1:16:46:3e:51: 05:11:31:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFA7ZIoXSYPuxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTMzODIxY2MtMTRlNS00MDM2LThmMzItZTU0YjZmYWNi ZGJlMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk ODMyZWI5OWQtOTQ4NC00YTQ0LTg1NzQtZDAzMzI4ZjIzNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSj4lM4WVPQS/No05mAIulPKHGGJpxS5ZX1l R3JjLKf3zgbmV24ux5k23HR8FxYa+/L89O9cFBnLNBgifA+A7UFPGB40p1RX9PgS 0B0hqrBCJ3e/NLhvKon2cmXO+i06+e60O8VTsV1tO4FXpIUyZY7MojDodUEdmRLS NZm0lOvfnQUvd/4HibdKATwQBbUEQrkynF7DYQlh48vCJ3KlGG6XfDqytIH/+CXQ Vg+hODp+6LgI+V9kEs7JwnFzVvCibiit7uyf+d+KPvb4qs5AT/oOHWjwR9Kc/3Wp oEKW8ByBpeWGN206iOCiVzglS7MKKA7tPphfQDicviq5EFncLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVBaqBxhHSr/rgs+4wev/13NxqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MzM4 MjFjYy0xNGU1LTQwMzYtOGYzMi1lNTRiNmZhY2JkYmUvNTdjMmM2MWUtMTE4NS0z ZjJlLThiOTYtNzYwYTZlYjdlMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTMzODIxY2MtMTRlNS00MDM2LThm MzItZTU0YjZmYWNiZGJlLzkzMzgyMWNjLTE0ZTUtNDAzNi04ZjMyLWU1NGI2ZmFj YmRiZS5jcmwwHwYDVR0jBBgwFoAUdcgr6PUEIXcbmaik1z+GU4z74fMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85MzM4MjFjYy0xNGU1LTQwMzYtOGYzMi1lNTRi NmZhY2JkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqV1k+4iWM80Xw/TO8js5P9FcuYbx7+qrOS4zaIcGTqOZxofBKN7NlF VlMOyh7kPacVrockJi87jLQBiVKK7aPXxcMmCUS224n0S2QeP1sTsHP1nmo+ZyNN V9ge/SCJ9vFp5QwQwfXR1QXKhiN9YjnjBUj28WxHc7puJA6aLAeywkkcmDzfRAem PCeXJKQ0WI9jCJfDTpdwNVT4gzTbZteYjVqAK/abczpeLgFCCi2Z1HG/BuB5yIZq ASQHrZrEqW2JrB4rDLUoV0UWJbrY2JnfkZwj/71XWz8yOEnX0foBtjcfmn2lSsCz WO64Vf6lK2IjzaxtG1+hFkY+UQURMSk= -----END CERTIFICATE-----Generated at Wed Jul 2 04:23:29 2025 by rpki-client