$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa File: ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa (raw, json) Hash identifier: bv849i9yo6/wvep3o4XUAKl/43uAzKgjqymxO7A6/Mk= Subject key identifier: 60:BC:9C:C0:B3:07:4B:CC:16:77:A1:90:BF:56:15:B7:AF:82:A9:3A Certificate issuer: /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Certificate serial: 010D0C9F4328584A45403742A71E5BB9A3D3BE80 Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 398292 IP address blocks: 23.158.48.0/24 maxlen: 24 169.197.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:37:42:a7:1e:5b:b9:a3:d3:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=15e710e5-d95e-42ef-852d-d7e5d4934949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:17:00:06:ec:23:b2:77:6c:4c:65:07:99: f2:ed:09:50:0f:df:ba:ac:5c:9a:76:8a:f6:e4:62: 20:32:87:e0:53:cb:80:2a:76:2d:72:c5:d1:7d:ae: 2a:e9:a7:1d:63:05:e3:80:c0:d4:02:f7:f3:5d:26: 74:d5:10:37:8e:cb:0c:89:c9:ae:5b:d0:f4:32:38: 66:57:a9:bc:ed:15:76:c4:76:d4:be:42:49:d8:9b: 56:a2:f7:f8:24:20:6b:d6:80:dd:36:1a:60:9c:99: f8:70:b8:1a:27:0e:0a:4e:ed:0c:05:3d:07:da:bc: 4a:4e:14:93:32:af:c6:01:01:c5:e0:d0:06:cd:bb: 9f:a9:07:cf:d6:6a:9d:0a:1d:aa:42:b8:ab:a3:e6: f8:9a:74:05:e5:ed:58:81:a2:d2:96:a4:01:11:96: ef:ef:c6:d0:19:63:6a:43:95:73:76:54:05:2f:ec: 7a:5c:aa:c5:a8:46:0f:2b:bd:f7:00:55:44:15:9b: c7:39:2b:ca:ff:5e:6d:5c:2d:ea:1b:f8:39:38:ba: 56:71:11:77:b3:52:c0:44:93:61:72:ea:8d:fc:80: fa:09:5d:f7:3f:33:1e:ff:e2:65:75:c9:dd:e3:56: eb:56:79:60:75:c4:a3:6f:b0:5e:49:d8:a3:8b:77: 5e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BC:9C:C0:B3:07:4B:CC:16:77:A1:90:BF:56:15:B7:AF:82:A9:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl X509v3 Authority Key Identifier: keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer sbgp-ipAddrBlock: critical IPv4: 23.158.48.0/24 169.197.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:0b:84:be:14:15:33:d0:b8:9b:24:9f:6b:25:99:5e:90:a3: 6a:83:42:6d:5b:87:c3:6f:ef:44:10:93:ce:37:68:3b:76:94: 59:c0:c2:6e:15:7a:7b:25:be:a5:27:af:07:4f:a0:b4:ae:66: d0:25:3b:d6:b5:64:60:53:e3:42:9f:37:b5:d2:96:56:8d:e2: e5:83:fe:e2:2c:68:18:26:e9:cd:12:af:95:88:dc:fa:8a:0d: 8a:d4:a5:91:dc:91:fd:a1:b2:6f:0a:18:41:2e:4f:69:e3:02: a1:05:73:fa:41:26:5b:36:9d:9e:dc:bd:2d:72:18:60:58:51: 4a:d1:1b:a2:5e:2e:c4:67:69:21:5b:43:85:20:6e:5a:59:37: 66:e9:07:cb:ba:99:f4:12:84:ab:3d:d9:3f:e7:30:e9:83:6e: ae:fa:b5:1a:55:64:ce:27:f6:f5:bc:03:3f:8d:b4:11:ae:ab: ef:7e:2b:09:34:d3:96:c8:22:b8:be:2a:a1:a3:fd:c8:50:11: 9c:67:7d:37:8f:ee:cb:48:91:2e:c8:04:d0:ab:38:17:b4:3f: 01:d5:dd:e7:57:af:a4:1d:16:db:0f:fe:fd:9a:db:50:ab:02: d9:42:85:8a:90:37:20:f5:e2:ab:89:db:fa:b9:12:66:32:56: 10:2e:c4:71 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpFQDdCpx5buaPTvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU2M2ZhM2MtYjYyMy00NWVkLWJjNTAtNWM1ZjZjZTFl ZWU4MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTVlNzEwZTUtZDk1ZS00MmVmLTg1MmQtZDdlNWQ0OTM0OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArusXAAbsI7J3bExlB5ny7QlQD9+6rFyador2 5GIgMofgU8uAKnYtcsXRfa4q6acdYwXjgMDUAvfzXSZ01RA3jssMicmuW9D0Mjhm V6m87RV2xHbUvkJJ2JtWovf4JCBr1oDdNhpgnJn4cLgaJw4KTu0MBT0H2rxKThST Mq/GAQHF4NAGzbufqQfP1mqdCh2qQriro+b4mnQF5e1YgaLSlqQBEZbv78bQGWNq Q5VzdlQFL+x6XKrFqEYPK733AFVEFZvHOSvK/15tXC3qG/g5OLpWcRF3s1LARJNh cuqN/ID6CV33PzMe/+Jldcnd41brVnlgdcSjb7BeSdiji3deIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGC8nMCzB0vMFnehkL9WFbevgqk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYz ZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVmNmNlMWVlZTgvZmZhNmViYTEtMThjNS0z ZWRmLWFhMWEtYzU0Y2Q0MDA1ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWU2M2ZhM2MtYjYyMy00NWVkLWJj NTAtNWM1ZjZjZTFlZWU4LzFlNjNmYTNjLWI2MjMtNDVlZC1iYzUwLTVjNWY2Y2Ux ZWVlOC5jcmwwHwYDVR0jBBgwFoAUownWF7q1MeX/MRUio0wUUiJgU40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYzZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVm NmNlMWVlZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF54wAwQC qcWcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFgLhL4UFTPQuJskn2slmV6Qo2qDQm1bh8Nv70QQk843aDt2 lFnAwm4VenslvqUnrwdPoLSuZtAlO9a1ZGBT40KfN7XSllaN4uWD/uIsaBgm6c0S r5WI3PqKDYrUpZHckf2hsm8KGEEuT2njAqEFc/pBJls2nZ7cvS1yGGBYUUrRG6Je LsRnaSFbQ4UgblpZN2bpB8u6mfQShKs92T/nMOmDbq76tRpVZM4n9vW8Az+NtBGu q+9+Kwk005bIIri+KqGj/chQEZxnfTeP7stIkS7IBNCrOBe0PwHV3edXr6QdFtsP /v2a21CrAtlChYqQNyD14quJ2/q5EmYyVhAuxHE= -----END CERTIFICATE-----Generated at Sun Jun 29 22:40:26 2025 by rpki-client