$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/681079b7-d96c-37fd-813c-e71ce2e1ed77.roa File: 681079b7-d96c-37fd-813c-e71ce2e1ed77.roa (raw, json) Hash identifier: MwGwgY+3Y1tAIJSNsP5+T+srE10qIZPrpRNapFaD1ME= Subject key identifier: 22:93:1D:7E:BF:E6:81:20:7D:18:93:FF:23:25:E3:CA:6E:19:BE:6E Certificate issuer: /CN=08bf980a-30d8-4eb6-80c5-4a9c8d5a352c Certificate serial: 010D0C9F4328584A62867C788C3FC91E88476840 Authority key identifier: 30:F3:CE:9A:E5:60:CE:D9:A7:12:0F:90:BD:88:BA:C2:B9:72:96:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/681079b7-d96c-37fd-813c-e71ce2e1ed77.roa Signing time: Wed 02 Jul 2025 12:40:57 +0000 ROA not before: Wed 02 Jul 2025 12:40:57 +0000 ROA not after: Tue 30 Sep 2025 12:40:57 +0000 asID: 401205 IP address blocks: 23.141.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:86:7c:78:8c:3f:c9:1e:88:47:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08bf980a-30d8-4eb6-80c5-4a9c8d5a352c Validity Not Before: Jul 2 12:40:57 2025 GMT Not After : Sep 30 12:40:57 2025 GMT Subject: CN=ed9f9ad3-c92d-416c-aae4-9c83a452625c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:76:01:52:67:73:58:e6:ef:82:7d:73:d8:e3: 8e:2c:c4:1a:42:ea:ba:90:e2:96:41:9d:4c:d7:98: e7:3c:35:9d:d0:3a:b1:f3:8e:76:8b:2d:34:a3:62: 20:b4:74:9e:65:35:5b:86:89:20:8c:86:fb:5d:ef: 57:91:f5:bd:a4:17:22:68:e9:39:2a:fc:cc:60:53: 29:2a:52:68:d4:6e:a5:db:ec:c4:b0:22:4e:b8:d0: c5:b5:80:ec:2a:ad:4c:6d:4e:9b:73:3d:fa:88:d6: 6d:71:e0:10:b8:cc:16:e6:bc:75:bd:0b:4a:da:86: 16:9d:2d:a3:03:51:e4:19:17:df:16:85:61:08:2a: f1:4c:12:b2:d5:18:08:71:d2:c2:48:89:d6:3b:67: 9e:0e:e4:e2:82:65:98:c2:7d:27:2b:f4:85:25:85: 52:8e:fe:95:da:ea:0a:e9:96:a7:cf:99:e6:96:e8: b1:62:96:49:ba:3a:91:6e:b7:85:ea:93:9e:8b:87: e2:ab:36:83:ef:da:4f:c0:7d:91:ac:70:d4:3b:7c: 29:70:e9:16:45:f5:c8:b3:01:e7:7e:41:e9:e0:ac: b8:29:1c:94:67:9c:45:c4:82:72:19:49:66:78:6e: 35:90:5f:98:7d:9c:93:de:8a:74:e4:e1:2e:2a:69: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:93:1D:7E:BF:E6:81:20:7D:18:93:FF:23:25:E3:CA:6E:19:BE:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/681079b7-d96c-37fd-813c-e71ce2e1ed77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.crl X509v3 Authority Key Identifier: keyid:30:F3:CE:9A:E5:60:CE:D9:A7:12:0F:90:BD:88:BA:C2:B9:72:96:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.cer sbgp-ipAddrBlock: critical IPv4: 23.141.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3b:f2:02:ea:05:c7:d7:d9:58:0f:60:f8:3c:4e:e9:4f:0e: 7a:7e:c5:03:ad:10:2a:9c:b5:82:cc:cc:9e:9c:81:ea:fb:13: 0b:0f:06:8e:e0:1e:fd:3b:0d:5c:d8:e8:b4:20:92:34:bd:dc: 32:78:51:6c:09:ae:dc:b3:1e:b5:cc:56:3a:a9:90:55:e4:1a: bd:70:3c:30:4b:5e:38:2c:7b:c3:fd:ba:0b:d6:3c:dc:55:70: da:d0:9c:b1:8a:ac:ed:78:52:9a:cf:88:b4:dd:64:05:76:c2: e4:34:9e:68:5b:2c:a5:99:34:d9:86:01:3f:71:49:ec:e9:33: 77:0b:5a:c8:d0:9a:42:a6:4f:19:3a:9f:da:f4:84:08:f6:76: 2f:8e:a0:57:46:10:94:ce:3d:c3:0f:88:6e:c0:b4:36:0b:3a: fc:f4:14:6c:ca:f3:4f:12:10:52:5c:2c:b4:29:69:2a:1e:dc: 14:48:30:49:3c:e7:40:e3:f7:9a:ea:e4:15:1e:da:43:f9:ec: ef:60:65:45:70:10:f1:b6:01:24:45:85:58:5d:fa:50:89:a7: fd:7f:94:32:17:88:b0:a8:d1:ea:24:6d:48:f2:b9:10:de:8f: 64:46:3f:67:cd:cf:17:20:d7:68:64:75:59:43:d9:8a:93:1b: 6b:93:9e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpihnx4jD/JHohHaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhiZjk4MGEtMzBkOC00ZWI2LTgwYzUtNGE5YzhkNWEz NTJjMB4XDTI1MDcwMjEyNDA1N1oXDTI1MDkzMDEyNDA1N1owLzEtMCsGA1UEAxMk ZWQ5ZjlhZDMtYzkyZC00MTZjLWFhZTQtOWM4M2E0NTI2MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXYBUmdzWObvgn1z2OOOLMQaQuq6kOKWQZ1M 15jnPDWd0Dqx8452iy00o2IgtHSeZTVbhokgjIb7Xe9XkfW9pBciaOk5KvzMYFMp KlJo1G6l2+zEsCJOuNDFtYDsKq1MbU6bcz36iNZtceAQuMwW5rx1vQtK2oYWnS2j A1HkGRffFoVhCCrxTBKy1RgIcdLCSInWO2eeDuTigmWYwn0nK/SFJYVSjv6V2uoK 6Zanz5nmluixYpZJujqRbreF6pOei4fiqzaD79pPwH2RrHDUO3wpcOkWRfXIswHn fkHp4Ky4KRyUZ5xFxIJyGUlmeG41kF+YfZyT3op05OEuKmmkJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKTHX6/5oEgfRiT/yMl48puGb5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wOGJm OTgwYS0zMGQ4LTRlYjYtODBjNS00YTljOGQ1YTM1MmMvNjgxMDc5YjctZDk2Yy0z N2ZkLTgxM2MtZTcxY2UyZTFlZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDhiZjk4MGEtMzBkOC00ZWI2LTgw YzUtNGE5YzhkNWEzNTJjLzA4YmY5ODBhLTMwZDgtNGViNi04MGM1LTRhOWM4ZDVh MzUyYy5jcmwwHwYDVR0jBBgwFoAUMPPOmuVgztmnEg+QvYi6wrlylrQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wOGJmOTgwYS0zMGQ4LTRlYjYtODBjNS00YTlj OGQ1YTM1MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF40cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE78gLqBcfX2VgPYPg8TulPDnp+xQOtECqctYLMzJ6cger7EwsPBo7g Hv07DVzY6LQgkjS93DJ4UWwJrtyzHrXMVjqpkFXkGr1wPDBLXjgse8P9ugvWPNxV cNrQnLGKrO14UprPiLTdZAV2wuQ0nmhbLKWZNNmGAT9xSezpM3cLWsjQmkKmTxk6 n9r0hAj2di+OoFdGEJTOPcMPiG7AtDYLOvz0FGzK808SEFJcLLQpaSoe3BRIMEk8 50Dj95rq5BUe2kP57O9gZUVwEPG2ASRFhVhd+lCJp/1/lDIXiLCo0eokbUjyuRDe j2RGP2fNzxcg12hkdVlD2YqTG2uTnqA= -----END CERTIFICATE-----Generated at Fri Jul 4 21:11:59 2025 by rpki-client