$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa File: 412a11c3-55d8-30a7-954e-7f92feb5901b.roa (raw, json) Hash identifier: wlVlZ1AqX+lG5LvXbX+aY4r4/V0GuP5QVWhtN7Gy77E= Subject key identifier: F9:B0:60:65:5D:FD:BB:5F:14:0B:0B:D9:65:65:6A:9C:FC:E9:1D:44 Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F4328584AEE268743D8D0A660B99DC880 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 62164 IP address blocks: 23.129.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:87:43:d8:d0:a6:60:b9:9d:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=6f26dc5f-378c-46e5-a2e0-52ca339bbaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:dd:c0:94:ef:30:8e:f0:bb:a7:70:1f:d9: 88:c8:4d:47:7a:a0:da:7d:07:95:d5:bf:c3:34:c3: 07:b4:53:a6:b2:f1:9a:72:14:a4:23:99:c9:0d:77: 36:d4:0b:7a:63:8a:60:2f:83:bc:2d:55:33:84:33: 04:37:7d:ac:97:e6:ec:4f:c3:f1:48:f0:c7:34:5b: c0:37:7e:f5:31:a5:5d:aa:07:dd:bc:4e:d2:29:22: 67:7e:22:cd:32:07:30:95:4b:72:e6:c9:53:59:d6: 4a:a8:78:cc:79:fe:3e:61:b8:27:dd:ea:fd:b1:f4: 17:8a:8b:80:5a:4b:de:48:00:84:6b:f9:32:02:17: ad:12:d3:d2:15:92:35:c2:bf:0c:dd:7c:f3:6f:b2: 9d:21:e2:e6:86:50:e2:cb:a3:bf:3f:27:19:27:87: a2:11:54:32:96:77:a4:fe:5d:e6:5b:22:73:08:0c: a2:c9:1a:57:db:a6:18:cf:95:73:09:2f:c2:47:44: 01:8a:39:2b:6e:f3:1b:b5:a7:e3:37:b7:06:79:55: 61:ef:42:59:a2:51:ce:96:ee:0f:0d:cb:b9:a2:d4: 91:27:83:8d:b7:ee:aa:26:2f:d3:18:3b:a9:7a:2a: 6f:b3:70:67:bf:84:f8:6f:e3:6f:d7:bf:94:8a:fa: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B0:60:65:5D:FD:BB:5F:14:0B:0B:D9:65:65:6A:9C:FC:E9:1D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv4: 23.129.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a8:ec:6d:bb:02:2b:49:05:3e:50:03:14:c6:a8:5a:5e:37: 92:0c:77:96:7b:5c:e3:c4:a4:50:22:e3:6c:67:14:7a:3d:3a: c2:79:9a:31:c0:86:8e:69:76:88:14:b2:d8:2d:1a:31:42:25: ec:0c:67:b0:24:24:4d:23:a1:52:a4:56:11:2b:2b:71:e3:2e: 61:19:7d:7a:59:2a:1e:e7:04:44:82:b9:75:33:18:4f:a1:a1: 54:e3:67:03:1a:89:cc:a2:62:f7:7a:ff:e0:b7:27:be:b6:21: 05:d5:b4:ac:f3:32:b8:e2:0c:5e:94:af:23:cf:58:b1:e2:36: 71:51:f3:e3:02:f5:f8:cb:50:5d:fd:ec:8d:9a:cf:36:6b:7c: c2:34:50:ac:2b:68:ed:b5:b2:b0:11:41:9a:89:02:9f:6c:7d: 04:87:52:56:9c:95:18:f4:11:d0:01:b8:a9:d4:f1:14:0a:ec: fa:f1:5a:87:d2:37:39:de:cb:87:79:2e:5a:ac:37:92:14:d6: 6a:16:76:a7:e0:82:48:05:b2:2b:90:33:87:0d:1a:70:49:18: af:2c:d8:de:ed:ea:23:da:1d:1d:26:a7:a4:1c:9e:76:1c:cb: bd:84:70:5f:6f:ab:1d:56:30:24:7d:5e:79:af:c9:2b:b3:92: 11:86:76:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJodD2NCmYLmdyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NmYyNmRjNWYtMzc4Yy00NmU1LWEyZTAtNTJjYTMzOWJiYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrndwJTvMI7wu6dwH9mIyE1HeqDafQeV1b/D NMMHtFOmsvGachSkI5nJDXc21At6Y4pgL4O8LVUzhDMEN32sl+bsT8PxSPDHNFvA N371MaVdqgfdvE7SKSJnfiLNMgcwlUty5slTWdZKqHjMef4+Ybgn3er9sfQXiouA WkveSACEa/kyAhetEtPSFZI1wr8M3Xzzb7KdIeLmhlDiy6O/PycZJ4eiEVQylnek /l3mWyJzCAyiyRpX26YYz5VzCS/CR0QBijkrbvMbtafjN7cGeVVh70JZolHOlu4P Dcu5otSRJ4ONt+6qJi/TGDupeipvs3Bnv4T4b+Nv17+UivrZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmwYGVd/btfFAsL2WVlapz86R1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNDEyYTExYzMtNTVkOC0z MGE3LTk1NGUtN2Y5MmZlYjU5MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSo7G27AitJBT5QAxTGqFpeN5IMd5Z7XOPEpFAi42xnFHo9OsJ5mjHA ho5pdogUstgtGjFCJewMZ7AkJE0joVKkVhErK3HjLmEZfXpZKh7nBESCuXUzGE+h oVTjZwMaicyiYvd6/+C3J762IQXVtKzzMrjiDF6UryPPWLHiNnFR8+MC9fjLUF39 7I2azzZrfMI0UKwraO21srARQZqJAp9sfQSHUlaclRj0EdABuKnU8RQK7PrxWofS Nzney4d5LlqsN5IU1moWdqfggkgFsiuQM4cNGnBJGK8s2N7t6iPaHR0mp6QcnnYc y72EcF9vqx1WMCR9XnmvySuzkhGGdhM= -----END CERTIFICATE-----Generated at Sun Aug 24 02:28:17 2025 by rpki-client