$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa File: 14f73e52-7825-3f57-b7ce-56bda9756aa4.roa (raw, json) Hash identifier: Phz80yN4CTMI5M8A8iIFtM95ddgzdNoJuYl8qojVuqE= Subject key identifier: 1A:C8:10:60:95:4B:98:C7:D8:97:F3:BA:B9:87:B3:36:00:90:08:C1 Certificate issuer: /CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83 Certificate serial: 010D0C9F4328584A5A30716F9F08A533CE8FF680 Authority key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 396279 IP address blocks: 23.173.128.0/24 maxlen: 24 2620:12f:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:71:6f:9f:08:a5:33:ce:8f:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=0712085b-5425-4f46-9f59-c33970ca26cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:08:8a:d2:7c:ba:29:63:00:6c:a7:a5:89:a2: 14:70:f8:d7:29:0f:0f:2e:93:3f:09:cd:87:cf:7f: 57:ec:90:31:3f:2f:67:6e:45:57:03:e8:ce:a2:bb: ba:c3:1f:65:15:1e:3d:c3:10:63:80:23:06:dc:96: 11:69:6b:b0:59:1d:a8:a5:5d:8e:40:b3:a7:06:0c: 29:3e:75:05:8d:e9:3f:8b:3d:9b:8c:1b:45:69:df: ad:e5:9b:6d:1d:63:6a:3f:5a:8a:44:ec:54:10:fb: 2a:f1:96:55:7f:e9:fc:94:35:30:13:e7:4f:76:50: a9:af:65:77:53:dc:6a:25:cd:70:7d:44:c9:a4:c1: 2f:1e:67:d7:e6:c4:34:a3:f4:cd:ff:6d:b9:6d:dd: 11:bc:e2:1e:81:3a:38:1b:68:55:c0:ca:0d:54:0e: 0a:8c:78:80:68:81:58:9d:c4:5f:70:54:b7:4c:ab: 22:aa:04:98:65:85:27:3e:94:13:3d:cf:b5:ec:37: 0c:06:a8:8b:a8:f9:a7:66:e4:3c:83:33:33:6f:05: 6c:d4:92:ae:15:2d:5f:e8:1b:be:a4:5b:d5:dd:e7: 78:8b:36:cf:61:b8:ed:cd:e1:4e:ed:bc:a5:9e:af: 7a:c5:f3:d8:15:c6:e4:39:57:d0:fa:b2:76:b0:49: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C8:10:60:95:4B:98:C7:D8:97:F3:BA:B9:87:B3:36:00:90:08:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl X509v3 Authority Key Identifier: keyid:A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer sbgp-ipAddrBlock: critical IPv4: 23.173.128.0/24 IPv6: 2620:12f:100e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fb:85:a4:a5:18:4c:e2:ce:f4:10:0b:30:7e:ed:14:52:fe: 49:10:4b:d9:68:4a:70:5c:16:09:78:ee:32:26:e0:48:80:a0: 40:24:d0:e3:2b:45:70:0b:02:c0:6c:a8:fd:77:df:6b:37:de: c9:17:66:22:6b:d5:98:68:4f:4f:15:9f:c4:7d:28:d7:80:f3: 3b:7b:61:ca:18:81:a4:ae:a1:c6:ac:d4:40:53:97:e1:7b:df: 4a:3e:5c:1b:46:bb:cd:13:fb:f3:04:af:85:7e:62:1e:d8:71: ec:0e:72:3d:64:7c:1c:7b:21:5d:eb:91:95:22:ab:76:67:3a: f6:c1:5a:13:aa:80:c3:1e:d1:21:c1:e4:41:d4:71:9f:16:57: ac:ad:d7:86:41:41:f3:4b:8d:1e:af:50:9a:ed:10:35:9f:5e: 07:f3:56:9f:63:a3:05:fd:1a:1c:7b:0a:c0:70:94:0c:75:be: 20:87:20:7a:c8:2c:2d:4b:e4:2a:cf:ca:c1:25:1d:92:cd:0a: f8:49:4e:90:ef:69:aa:19:e9:8f:77:69:64:a5:ed:de:b6:ef: 20:99:6e:63:19:70:f4:ae:d7:d8:f0:43:06:c1:b7:65:f7:4a: 60:80:0f:99:f4:4c:17:a9:17:df:53:0c:f5:77:aa:1a:ed:46: 08:e2:2c:32 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEpaMHFvnwilM86P9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlhMzhhYTktZWVhOS00ZGEzLTljN2EtOWVkMWMyMzQw YjgzMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk MDcxMjA4NWItNTQyNS00ZjQ2LTlmNTktYzMzOTcwY2EyNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggiK0ny6KWMAbKeliaIUcPjXKQ8PLpM/Cc2H z39X7JAxPy9nbkVXA+jOoru6wx9lFR49wxBjgCMG3JYRaWuwWR2opV2OQLOnBgwp PnUFjek/iz2bjBtFad+t5ZttHWNqP1qKROxUEPsq8ZZVf+n8lDUwE+dPdlCpr2V3 U9xqJc1wfUTJpMEvHmfX5sQ0o/TN/225bd0RvOIegTo4G2hVwMoNVA4KjHiAaIFY ncRfcFS3TKsiqgSYZYUnPpQTPc+17DcMBqiLqPmnZuQ8gzMzbwVs1JKuFS1f6Bu+ pFvV3ed4izbPYbjtzeFO7bylnq96xfPYFcbkOVfQ+rJ2sEk9gwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBrIEGCVS5jH2JfzurmHszYAkAjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWEz OGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQxYzIzNDBiODMvMTRmNzNlNTItNzgyNS0z ZjU3LWI3Y2UtNTZiZGE5NzU2YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlhMzhhYTktZWVhOS00ZGEzLTlj N2EtOWVkMWMyMzQwYjgzLzk5YTM4YWE5LWVlYTktNGRhMy05YzdhLTllZDFjMjM0 MGI4My5jcmwwHwYDVR0jBBgwFoAUprX8ebmAJVcnQICNntPieS8xdfEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWEzOGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQx YzIzNDBiODMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF62AMA8E AgACMAkDBwAmIAEvEA4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIPuFpKUYTOLO9BALMH7tFFL+SRBL2WhK cFwWCXjuMibgSICgQCTQ4ytFcAsCwGyo/XffazfeyRdmImvVmGhPTxWfxH0o14Dz O3thyhiBpK6hxqzUQFOX4XvfSj5cG0a7zRP78wSvhX5iHthx7A5yPWR8HHshXeuR lSKrdmc69sFaE6qAwx7RIcHkQdRxnxZXrK3XhkFB80uNHq9Qmu0QNZ9eB/NWn2Oj Bf0aHHsKwHCUDHW+IIcgesgsLUvkKs/KwSUdks0K+ElOkO9pqhnpj3dpZKXt3rbv IJluYxlw9K7X2PBDBsG3ZfdKYIAPmfRMF6kX31MM9XeqGu1GCOIsMg== -----END CERTIFICATE-----Generated at Sun Jun 29 20:07:14 2025 by rpki-client