$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa File: cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (raw, json) Hash identifier: yd9o8HwafYIblgdtqlrOqfNS3PwSifqiELmajYdpObk= Subject key identifier: 67:B6:11:00:7A:EA:16:E6:11:95:91:70:69:FA:8C:88:48:97:36:B8 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584A4F05CDF2D9084320D4CDDB80 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 209242 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:cd:f2:d9:08:43:20:d4:cd:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=c0f3a374-f80f-4dd9-8a52-47895ef1a912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:38:74:82:a1:0e:be:ef:7e:42:e9:b7:74: ca:90:a8:e1:b4:63:77:70:f2:51:ce:ae:75:d4:42: 93:bb:16:5c:a8:6b:08:1d:bb:98:4a:fd:3d:e8:07: 55:74:37:c2:3d:ba:10:dc:0d:8d:ff:08:c3:07:a5: 03:b3:09:46:fc:b4:fd:d8:63:f3:42:cd:a4:76:c7: 89:f3:9c:d5:20:91:04:d3:37:06:a1:c9:bc:5f:fd: 28:a8:b9:e2:b9:48:c1:99:aa:69:7e:a0:a2:f6:99: 05:fc:22:de:b1:3e:d7:7a:97:f6:5d:c5:62:25:a5: 8d:92:54:0c:38:48:14:05:2e:e0:be:89:16:6e:c6: 08:61:c9:14:ed:e4:8c:8f:95:e4:ed:66:60:a2:8b: be:86:4f:8e:25:27:bf:66:e1:67:dc:17:14:1e:40: cd:70:a4:f3:65:dd:66:5d:1e:7b:19:cf:f5:fc:f6: 15:ed:6a:c6:1d:02:b6:3d:65:4d:82:25:53:49:c2: 1e:81:41:c4:5e:14:a5:e4:5a:fc:d3:7f:ec:d3:4f: c4:6d:e0:6f:0e:d8:d6:4d:5f:9b:3a:1c:2d:9e:77: 17:36:77:56:3f:67:f7:e1:e3:29:37:9f:46:ee:ef: fc:e8:74:1b:95:5b:2c:29:6e:c6:57:34:16:5e:f8: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:11:00:7A:EA:16:E6:11:95:91:70:69:FA:8C:88:48:97:36:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e1:9a:a9:a0:f3:c3:fa:e1:9b:ad:40:86:14:7a:4f:fe:10: 36:e0:39:05:d5:78:69:1b:0e:06:6b:b2:1c:a6:ea:80:4d:96: 1a:45:4e:23:9b:85:bc:7c:bb:7d:98:70:ff:9c:4f:62:88:6f: c1:59:dc:89:c3:28:48:08:24:68:fe:3c:8a:41:79:96:07:78: d0:4f:13:97:93:18:d2:c1:82:f4:0d:27:44:c4:48:3f:78:66: 3c:da:5a:d4:5f:0d:f4:0a:09:e3:8f:5a:09:5c:07:ef:43:8f: 99:ed:34:6e:91:ab:34:9b:39:94:b8:23:c4:0c:0e:79:6c:ea: f2:9d:29:51:6c:ce:02:ac:0c:94:82:76:4e:eb:62:60:46:e1: 84:00:39:3b:cd:b3:5b:eb:39:41:73:91:dd:72:49:f1:bd:5d: 62:c6:9b:7d:64:be:b8:21:83:a2:5e:6b:91:1b:30:10:2c:92: df:7f:f7:fe:99:06:5d:cc:bd:97:d7:2f:51:42:d0:07:33:6d: f1:b2:2b:dd:bf:a9:e8:83:8e:5e:e2:36:43:90:25:c9:5d:d1: 60:e3:7c:9a:e8:38:ad:5e:1c:9d:41:48:74:d6:7e:cf:27:2e: ab:c2:88:3a:ac:b6:b0:23:58:6e:b2:5c:9e:2a:92:a7:0a:d1: f7:04:a9:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBc3y2QhDINTN24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YzBmM2EzNzQtZjgwZi00ZGQ5LThhNTItNDc4OTVlZjFhOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDY4dIKhDr7vfkLpt3TKkKjhtGN3cPJRzq51 1EKTuxZcqGsIHbuYSv096AdVdDfCPboQ3A2N/wjDB6UDswlG/LT92GPzQs2kdseJ 85zVIJEE0zcGocm8X/0oqLniuUjBmappfqCi9pkF/CLesT7Xepf2XcViJaWNklQM OEgUBS7gvokWbsYIYckU7eSMj5Xk7WZgoou+hk+OJSe/ZuFn3BcUHkDNcKTzZd1m XR57Gc/1/PYV7WrGHQK2PWVNgiVTScIegUHEXhSl5Fr803/s00/EbeBvDtjWTV+b OhwtnncXNndWP2f34eMpN59G7u/86HQblVssKW7GVzQWXviF8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe2EQB66hbmEZWRcGn6jIhIlza4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvY2I0YjVlZTYtYmMwOC0z ZDYwLTkxOWEtODhmNzkyYzdiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvhmqmg88P64ZutQIYUek/+EDbgOQXVeGkbDgZrshym6oBNlhpFTiOb hbx8u32YcP+cT2KIb8FZ3InDKEgIJGj+PIpBeZYHeNBPE5eTGNLBgvQNJ0TESD94 ZjzaWtRfDfQKCeOPWglcB+9Dj5ntNG6RqzSbOZS4I8QMDnls6vKdKVFszgKsDJSC dk7rYmBG4YQAOTvNs1vrOUFzkd1ySfG9XWLGm31kvrghg6Jea5EbMBAskt9/9/6Z Bl3MvZfXL1FC0AczbfGyK92/qeiDjl7iNkOQJcld0WDjfJroOK1eHJ1BSHTWfs8n LqvCiDqstrAjWG6yXJ4qkqcK0fcEqYw= -----END CERTIFICATE-----Generated at Sun Jun 29 21:31:27 2025 by rpki-client