$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9faefeb4-6289-3083-acb8-9207f6923c1a.roa File: 9faefeb4-6289-3083-acb8-9207f6923c1a.roa (raw, json) Hash identifier: 03okh1sXQ2tpbdxRX80GnVND9+moQZ6KxBm7aCCPx4g= Subject key identifier: C7:8F:10:A5:A2:22:1D:9B:6A:DC:DE:67:A9:9D:79:FF:15:65:BC:E5 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A5CFB21838E034E43693F6150 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9faefeb4-6289-3083-acb8-9207f6923c1a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 18779 IP address blocks: 23.230.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:21:83:8e:03:4e:43:69:3f:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=65f153bf-aec6-4185-a439-d277f3b47fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:08:5f:dc:a2:c6:01:ba:2c:0c:3c:52:fd:30: 89:db:33:8c:21:e1:11:21:5e:fa:96:b7:ef:1f:ef: 53:04:b7:d2:9f:c5:89:a8:1b:9c:fb:c5:20:51:d0: 6a:45:71:cf:2c:0f:c3:61:74:f5:03:2b:dc:a9:73: 85:90:f8:8d:06:fe:1b:0a:c5:93:95:72:8f:60:bb: 78:62:9b:c0:c7:16:21:81:43:33:36:85:74:0a:b7: 2b:fe:ab:5b:3e:29:53:1a:96:d2:b2:ca:fb:d4:65: 59:6a:4b:59:1b:a0:24:6c:1a:0e:31:16:91:08:d9: 1f:9d:0a:56:45:f1:57:53:12:6f:6b:97:62:2a:4b: d9:60:4e:45:a5:fb:c8:f6:d4:c5:1b:3f:09:24:38: 5f:e3:9e:5f:98:93:c6:3a:cb:c1:33:c8:61:69:07: 6c:1f:c1:a6:32:50:79:9a:a6:0b:7c:d7:b3:8a:60: b8:19:0e:f2:8a:34:ef:3f:af:c5:96:7e:ba:3f:58: 5e:97:7f:c2:c0:bb:d3:80:3e:49:1a:b8:0c:85:0d: c3:75:06:08:e0:64:be:eb:3b:da:28:b6:f2:2c:c5: be:e2:4a:b9:2d:8a:7f:09:14:5a:5d:ed:e2:a1:7c: c8:50:b0:8d:1a:e9:53:42:ad:25:32:28:78:df:fb: aa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8F:10:A5:A2:22:1D:9B:6A:DC:DE:67:A9:9D:79:FF:15:65:BC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9faefeb4-6289-3083-acb8-9207f6923c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6f:a0:7a:90:e8:fa:49:84:6a:41:81:b3:5a:75:92:6f:ff: 85:0a:0e:95:b2:82:c0:ab:5c:d0:04:aa:42:cd:e6:eb:c2:2f: d0:6c:f8:84:01:d9:03:8b:97:ba:e9:2c:78:d7:85:5d:70:e4: 10:2f:ae:7f:84:b0:55:22:96:5d:a3:03:91:6f:ce:c0:2a:38: 12:40:c8:f7:9f:ff:32:8f:b1:51:72:13:a9:a8:c6:61:3d:e4: 8a:c4:91:4c:c0:fc:51:c8:50:a9:36:94:e7:26:29:48:7b:b1: 69:26:cf:ae:f7:24:f4:0d:0c:9d:9d:f9:49:f0:22:65:e5:13: 3e:07:09:c0:50:8e:c3:95:e6:44:9a:51:df:43:08:cb:14:63: 5a:66:ce:73:0b:fb:0c:e2:0c:de:44:7a:1c:55:4e:2a:8c:b1: a7:e7:fb:b7:bf:84:3c:57:3c:16:b4:4d:19:45:2a:e7:99:e5: f3:69:21:a4:9a:77:83:89:6c:15:9d:31:91:c8:8e:2d:bc:9a: 3c:62:55:03:3c:f9:9c:e4:76:08:22:4c:68:58:97:69:77:df: 84:52:9a:fa:63:5e:52:be:10:a1:7f:d3:7c:25:0e:74:78:e7: e8:bf:f9:24:65:07:bb:f9:fb:0c:c9:c5:31:37:19:1d:a3:38: 28:96:d4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+yGDjgNOQ2k/YVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NjVmMTUzYmYtYWVjNi00MTg1LWE0MzktZDI3N2YzYjQ3ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwhf3KLGAbosDDxS/TCJ2zOMIeERIV76lrfv H+9TBLfSn8WJqBuc+8UgUdBqRXHPLA/DYXT1AyvcqXOFkPiNBv4bCsWTlXKPYLt4 YpvAxxYhgUMzNoV0Crcr/qtbPilTGpbSssr71GVZaktZG6AkbBoOMRaRCNkfnQpW RfFXUxJva5diKkvZYE5FpfvI9tTFGz8JJDhf455fmJPGOsvBM8hhaQdsH8GmMlB5 mqYLfNezimC4GQ7yijTvP6/Fln66P1hel3/CwLvTgD5JGrgMhQ3DdQYI4GS+6zva KLbyLMW+4kq5LYp/CRRaXe3ioXzIULCNGulTQq0lMih43/uq1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMePEKWiIh2batzeZ6mdef8VZbzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWZhZWZlYjQtNjI4OS0z MDgzLWFjYjgtOTIwN2Y2OTIzYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+Y0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRvoHqQ6PpJhGpBgbNadZJv/4UKDpWygsCrXNAEqkLN5uvCL9Bs+IQB 2QOLl7rpLHjXhV1w5BAvrn+EsFUill2jA5FvzsAqOBJAyPef/zKPsVFyE6moxmE9 5IrEkUzA/FHIUKk2lOcmKUh7sWkmz673JPQNDJ2d+UnwImXlEz4HCcBQjsOV5kSa Ud9DCMsUY1pmznML+wziDN5EehxVTiqMsafn+7e/hDxXPBa0TRlFKueZ5fNpIaSa d4OJbBWdMZHIji28mjxiVQM8+ZzkdggiTGhYl2l334RSmvpjXlK+EKF/03wlDnR4 5+i/+SRlB7v5+wzJxTE3GR2jOCiW1Ck= -----END CERTIFICATE-----Generated at Tue Jul 1 21:00:39 2025 by rpki-client