$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa File: 7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa (raw, json) Hash identifier: KKxtSPr7tTe+nnPB6NYMtUBb8e3flm+uWzd9ndmPb2o= Subject key identifier: 87:D7:A7:D6:7B:69:03:E0:45:3A:0B:4D:57:E5:DA:06:99:49:EC:AC Certificate issuer: /CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Certificate serial: 010D0C9F43285849EC713F36B7150CC002AA7EC0 Authority key identifier: 85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa Signing time: Wed 21 May 2025 05:32:46 +0000 ROA not before: Wed 21 May 2025 05:32:46 +0000 ROA not after: Tue 19 Aug 2025 05:32:46 +0000 asID: 214483 IP address blocks: 23.138.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ec:71:3f:36:b7:15:0c:c0:02:aa:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Validity Not Before: May 21 05:32:46 2025 GMT Not After : Aug 19 05:32:46 2025 GMT Subject: CN=69b0e85d-151c-4394-b6ed-0c6a61c5bde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2b:68:09:8c:a5:a2:8b:7a:23:bf:0b:fe:de: 81:c6:3b:4e:81:16:9b:0e:f1:12:12:f6:84:61:85: 37:c4:d5:3e:9f:2f:32:17:3d:6a:85:3c:4d:a1:42: aa:1e:8c:85:8d:d5:96:f1:0d:61:77:fe:57:c6:e5: 3b:64:33:45:b8:68:f2:72:52:9e:c8:da:17:78:6b: b9:d6:eb:b2:d2:03:49:4b:64:3e:7e:18:2c:48:47: 40:c1:7d:d8:cf:18:77:bd:9e:9c:fb:b5:86:1c:9a: c1:57:92:da:f6:1b:90:f1:76:27:8a:65:6b:a2:26: cf:06:44:c6:31:9c:81:3a:6d:bc:fa:05:b0:9f:34: eb:71:50:6f:36:73:90:3e:21:bc:7f:96:4e:82:02: e4:7c:b5:10:f2:0a:e8:f6:82:03:6a:18:c0:ee:89: 91:00:4a:33:ed:9b:ee:b9:db:33:34:b5:ad:6b:8d: 67:34:bf:d2:7d:42:19:94:1d:f8:48:26:98:18:64: 1d:b3:28:0f:f7:a2:21:a7:06:9c:93:21:6b:ff:b4: cb:db:4c:51:d7:0b:2b:ad:ac:bf:33:27:c4:9c:f1: 93:9a:92:ed:e5:c1:79:0a:e5:dc:b6:05:90:da:af: 73:4a:74:9b:fb:70:e6:3d:f0:6b:21:e8:46:4b:a5: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:A7:D6:7B:69:03:E0:45:3A:0B:4D:57:E5:DA:06:99:49:EC:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.crl X509v3 Authority Key Identifier: keyid:85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer sbgp-ipAddrBlock: critical IPv4: 23.138.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:bf:0f:3f:b3:92:bd:cf:4e:e1:1b:7d:60:38:fb:10:a9:90: 21:58:d2:c8:5d:d9:7d:bf:8c:4c:69:25:c3:70:12:d5:54:8f: e1:6e:67:96:9d:25:c3:a6:6e:9c:17:6b:73:d8:59:08:e9:d8: 22:76:d3:7e:0a:5c:af:94:84:4e:e3:47:7c:7a:3e:cf:fb:ec: 38:14:8f:1a:a4:03:fb:7d:58:25:ca:d3:ed:0b:eb:b2:c4:07: c4:98:98:aa:33:b2:85:a4:72:5c:78:8c:95:3d:a8:54:e1:71: 35:22:09:52:03:4a:dd:a4:b7:1a:e3:02:26:17:c3:b8:fa:23: a8:70:ed:90:94:6e:a1:8b:91:cf:4c:3b:16:b9:31:32:fc:8e: e9:49:f3:6a:4c:73:ab:9a:ea:9f:1b:fa:41:3c:d2:25:68:0b: c7:03:87:cd:8a:d2:56:4e:75:15:31:84:b7:5d:ae:bc:1b:1c: 55:f8:78:8b:13:c0:e0:2a:d5:09:72:75:fe:ce:e1:04:21:25: 10:cd:28:b9:e2:7c:61:21:4f:b1:eb:f8:10:cd:6e:56:09:1b: 15:ff:6d:3c:e7:69:e5:fb:a9:9d:da:9c:88:06:48:8b:b8:80: fd:48:bf:17:80:a5:24:95:5f:78:0e:ef:12:2d:09:5a:90:ee: 16:9f:5c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnscT82txUMwAKqfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjN2U0ODQtNjRlNy00NmNiLWExNWMtMzYwYTYwYjM2 MmQ0MB4XDTI1MDUyMTA1MzI0NloXDTI1MDgxOTA1MzI0NlowLzEtMCsGA1UEAxMk NjliMGU4NWQtMTUxYy00Mzk0LWI2ZWQtMGM2YTYxYzViZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmitoCYyloot6I78L/t6BxjtOgRabDvESEvaE YYU3xNU+ny8yFz1qhTxNoUKqHoyFjdWW8Q1hd/5XxuU7ZDNFuGjyclKeyNoXeGu5 1uuy0gNJS2Q+fhgsSEdAwX3Yzxh3vZ6c+7WGHJrBV5La9huQ8XYnimVroibPBkTG MZyBOm28+gWwnzTrcVBvNnOQPiG8f5ZOggLkfLUQ8gro9oIDahjA7omRAEoz7Zvu udszNLWta41nNL/SfUIZlB34SCaYGGQdsygP96IhpwackyFr/7TL20xR1wsrray/ MyfEnPGTmpLt5cF5CuXctgWQ2q9zSnSb+3DmPfBrIehGS6UFCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfXp9Z7aQPgRToLTVfl2gaZSeysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM3 ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBhNjBiMzYyZDQvNzcyMmI2ZmEtYmYxMy0z NDkyLTlmNDgtNmFjNmFlOTc2Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjN2U0ODQtNjRlNy00NmNiLWEx NWMtMzYwYTYwYjM2MmQ0LzJiYzdlNDg0LTY0ZTctNDZjYi1hMTVjLTM2MGE2MGIz NjJkNC5jcmwwHwYDVR0jBBgwFoAUhQJ9iFXNUhQLgB0LkveCdMAqWk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM3ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBh NjBiMzYyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4r8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC/Dz+zkr3PTuEbfWA4+xCpkCFY0shd2X2/jExpJcNwEtVUj+FuZ5ad JcOmbpwXa3PYWQjp2CJ2034KXK+UhE7jR3x6Ps/77DgUjxqkA/t9WCXK0+0L67LE B8SYmKozsoWkclx4jJU9qFThcTUiCVIDSt2ktxrjAiYXw7j6I6hw7ZCUbqGLkc9M Oxa5MTL8julJ82pMc6ua6p8b+kE80iVoC8cDh82K0lZOdRUxhLddrrwbHFX4eIsT wOAq1Qlydf7O4QQhJRDNKLnifGEhT7Hr+BDNblYJGxX/bTznaeX7qZ3anIgGSIu4 gP1IvxeApSSVX3gO7xItCVqQ7hafXO8= -----END CERTIFICATE-----Generated at Sun Jun 29 00:59:06 2025 by rpki-client