$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa File: 897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (raw, json) Hash identifier: ermRzgJ9Fovjp+RgStCyzEXbog/o6C9IBvmPq3pbLJI= Subject key identifier: 69:DC:11:F1:76:F2:49:A3:2C:8B:C5:EA:DA:C3:06:6C:73:63:9A:F0 Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F4328584A612B0E990B8EAAD26545AE60 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 400442 IP address blocks: 23.133.168.0/24 maxlen: 24 205.236.99.0/24 maxlen: 24 2602:fbc7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0e:99:0b:8e:aa:d2:65:45:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=7b282dd7-5857-4512-bd14-bd1a6fce4cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:59:41:4d:42:e9:be:c1:c4:2c:1b:9e:55: e9:0a:b2:20:a5:1c:85:06:b6:22:3e:ec:8b:c5:be: 76:07:0a:74:4a:4d:56:d9:9d:eb:1c:30:3f:38:5e: 1c:ea:25:28:f8:01:31:0b:85:89:88:1a:94:5b:0f: dd:73:c3:67:b1:ca:06:66:eb:d0:39:de:91:c9:87: 50:05:92:41:8c:24:2c:5d:77:6b:03:cf:4e:39:a7: d7:fb:22:b0:89:91:b2:d9:1a:71:6c:34:26:61:58: c9:a2:be:61:68:65:49:0d:b0:3c:32:1c:96:48:7c: fb:f3:c0:cc:d6:14:10:b0:8d:b1:e0:26:95:28:a0: e0:95:55:db:d6:9f:0e:65:ee:be:07:bb:bd:18:da: 91:a0:c4:09:24:88:77:4d:48:7c:98:45:96:9d:17: dc:c7:ce:9a:3f:b8:87:79:3b:2b:d9:79:d5:59:48: 07:e3:3c:85:d5:63:ef:e7:c6:ae:e2:fb:e1:fb:50: c4:0b:e3:43:b4:de:5d:73:5a:0b:c0:44:6c:e6:22: bc:87:e5:e2:83:c7:8a:7d:05:58:69:e5:d4:68:75: 7f:d0:d1:bd:b7:68:65:5e:73:35:c4:24:30:58:5a: 43:19:e8:3e:64:65:6b:e3:d5:45:0a:75:6b:0a:07: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DC:11:F1:76:F2:49:A3:2C:8B:C5:EA:DA:C3:06:6C:73:63:9A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv4: 23.133.168.0/24 205.236.99.0/24 IPv6: 2602:fbc7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c6:9f:f0:f3:b0:ac:f6:65:47:c9:8d:52:fa:f5:92:6a:69: af:01:a2:05:10:4a:8f:2c:03:d7:cc:b5:9c:da:d8:88:f1:84: 4f:b3:ee:80:e7:39:f3:d6:00:1b:97:4f:b5:23:e8:76:a1:69: 67:42:b4:f0:01:2f:89:cc:f9:ed:7c:ea:7c:e1:5e:c9:5b:b5: 9e:fe:c7:29:1e:69:36:20:63:c4:02:c8:9d:7a:f8:61:3d:dc: d6:7c:09:dd:4a:62:bb:19:b6:a1:e7:7b:e9:f1:44:38:58:12: e8:b7:45:e9:33:7e:dc:dd:9e:1a:72:ac:47:ba:9d:b8:41:ea: c0:34:b1:82:0d:5b:25:5e:b6:0e:6f:45:48:d9:77:01:6d:2f: de:e6:85:22:20:0e:cc:e7:8e:b3:12:34:c6:24:93:81:87:75: 0d:0a:23:ea:f8:97:23:51:09:53:e4:36:54:21:99:5e:f8:56: 5c:3f:ed:5b:8c:a8:9f:b7:16:aa:29:b6:15:7b:a7:84:bc:d7: ea:cf:4e:42:49:1c:ef:67:b9:10:04:82:1e:33:52:90:74:ad: 03:e7:32:6a:67:20:8c:93:30:e5:cb:64:16:6d:0f:ee:00:52: 74:d8:42:17:f7:03:15:f0:5c:6e:83:60:b3:65:d8:5a:79:c8: 26:30:fa:20 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEphKw6ZC46q0mVFrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk N2IyODJkZDctNTg1Ny00NTEyLWJkMTQtYmQxYTZmY2U0Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlphZQU1C6b7BxCwbnlXpCrIgpRyFBrYiPuyL xb52Bwp0Sk1W2Z3rHDA/OF4c6iUo+AExC4WJiBqUWw/dc8NnscoGZuvQOd6RyYdQ BZJBjCQsXXdrA89OOafX+yKwiZGy2RpxbDQmYVjJor5haGVJDbA8MhyWSHz788DM 1hQQsI2x4CaVKKDglVXb1p8OZe6+B7u9GNqRoMQJJIh3TUh8mEWWnRfcx86aP7iH eTsr2XnVWUgH4zyF1WPv58au4vvh+1DEC+NDtN5dc1oLwERs5iK8h+Xig8eKfQVY aeXUaHV/0NG9t2hlXnM1xCQwWFpDGeg+ZGVr49VFCnVrCgf6TQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFGncEfF28kmjLIvF6trDBmxzY5rwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvODk3YWRkZGItYTMwOS0z ZmMwLWI3OTMtY2NiZjUzODhjMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4WoAwQA zexjMA4EAgACMAgDBgAmAvvHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgxp/w87Cs9mVHyY1S+vWSammv AaIFEEqPLAPXzLWc2tiI8YRPs+6A5znz1gAbl0+1I+h2oWlnQrTwAS+JzPntfOp8 4V7JW7We/scpHmk2IGPEAsidevhhPdzWfAndSmK7Gbah53vp8UQ4WBLot0XpM37c 3Z4acqxHup24QerANLGCDVslXrYOb0VI2XcBbS/e5oUiIA7M546zEjTGJJOBh3UN CiPq+JcjUQlT5DZUIZle+FZcP+1bjKiftxaqKbYVe6eEvNfqz05CSRzvZ7kQBIIe M1KQdK0D5zJqZyCMkzDly2QWbQ/uAFJ02EIX9wMV8Fxug2CzZdhaecgmMPog -----END CERTIFICATE-----Generated at Thu Jul 3 13:24:08 2025 by rpki-client