$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/4f4122b7-8496-3e28-8763-970d5d4f19d2.roa File: 4f4122b7-8496-3e28-8763-970d5d4f19d2.roa (raw, json) Hash identifier: 5bF6P0B4yc/scWga/ozaREgsYJ9OzVxvJoN2O7t+2xo= Subject key identifier: 6D:45:EB:4C:D1:C1:36:5F:FC:FB:0E:7A:81:63:DE:D2:79:E9:C3:CB Certificate issuer: /CN=398117f0-030c-4fca-8a7f-c35017830f8f Certificate serial: 010D0C9F4328584A5E605B3C49856B1877026980 Authority key identifier: D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/4f4122b7-8496-3e28-8763-970d5d4f19d2.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 26548 IP address blocks: 23.137.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5b:3c:49:85:6b:18:77:02:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398117f0-030c-4fca-8a7f-c35017830f8f Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=56f162f8-521a-44e8-92af-603c1ec795fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:5d:7f:69:76:ca:49:b6:bc:51:37:80:94: 3e:fa:a7:15:d5:4f:37:ea:44:4c:d2:71:48:98:ff: 8c:48:33:10:7f:e5:2a:24:ba:77:0b:5c:8d:96:39: 19:7e:7a:52:02:41:87:41:bd:c3:85:20:6a:c2:a4: a4:29:04:8d:c8:ba:27:c8:b7:e6:ce:89:01:11:d0: ff:52:2d:5f:18:92:c4:1f:e5:59:f6:d8:02:72:f7: 86:0f:56:56:68:5d:46:38:81:90:07:29:ce:1c:a9: 1b:db:9f:78:83:38:75:b4:a1:e7:ed:6d:f8:26:bb: 98:ec:e6:a6:3c:85:49:f1:c0:f4:a5:9b:93:40:d5: d1:aa:d6:e3:be:45:75:ea:69:e3:5b:e3:98:68:2f: b1:a0:25:79:fc:1e:59:54:62:07:08:73:37:19:38: 42:4d:72:20:9b:4a:a2:ea:a3:43:a2:af:a7:20:da: a4:b7:70:0c:53:b7:13:3d:e1:9a:24:ab:e0:24:e6: 96:5e:02:0b:5c:93:64:82:3f:ce:de:a6:36:fd:58: 48:06:92:3c:34:42:2f:44:50:3e:93:9d:4d:12:fa: 89:d6:10:73:95:b5:0c:8d:fb:4a:6c:ea:11:ed:60: 6e:88:ce:62:0c:fe:9f:38:b3:80:21:32:13:d3:d4: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:45:EB:4C:D1:C1:36:5F:FC:FB:0E:7A:81:63:DE:D2:79:E9:C3:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/4f4122b7-8496-3e28-8763-970d5d4f19d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl X509v3 Authority Key Identifier: keyid:D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer sbgp-ipAddrBlock: critical IPv4: 23.137.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:75:e1:53:4e:9f:33:de:d8:a9:dc:7c:78:ce:43:cb:56:45: d1:41:43:77:c4:51:28:2c:8c:47:a1:7c:46:4e:68:fb:b4:d2: 25:47:a6:90:5d:dc:a1:d3:c5:93:37:1a:1f:1f:41:7d:16:b4: c2:35:31:6b:2f:84:0e:b3:c1:6a:72:7f:70:5d:49:79:7d:43: 07:ac:a2:f4:67:d8:f8:b2:6a:cb:06:b2:d5:c5:1b:db:1e:74: c5:01:4b:5c:11:a4:72:42:0a:6e:c9:33:c1:03:95:9c:a5:c3: ce:68:dd:5e:ba:2c:ab:55:0a:19:60:47:aa:43:16:41:87:3a: 1a:d0:a6:ee:ac:41:84:5b:a2:b8:12:72:ed:b6:28:e0:26:d8: 3d:d6:2d:ff:ce:30:6d:f8:9a:f1:4a:90:e3:63:6f:c8:c1:71: 03:36:6c:eb:09:0b:10:da:6c:68:04:bb:ea:db:b9:8f:c0:46: 98:7c:74:e9:15:7e:0e:ad:a5:4c:f2:23:bc:82:11:12:f7:a7: b9:e2:7c:d6:d5:87:ee:6f:67:e5:15:8b:27:d3:2f:70:50:11: 0d:6a:ad:e8:b0:fb:20:b8:93:b8:85:1b:e2:01:5a:c7:54:90: 32:05:4f:3a:9a:bf:79:2b:70:84:80:6d:bd:72:f1:38:8a:ef: 43:49:aa:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFs8SYVrGHcCaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MTE3ZjAtMDMwYy00ZmNhLThhN2YtYzM1MDE3ODMw ZjhmMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NTZmMTYyZjgtNTIxYS00NGU4LTkyYWYtNjAzYzFlYzc5NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb5df2l2ykm2vFE3gJQ++qcV1U836kRM0nFI mP+MSDMQf+UqJLp3C1yNljkZfnpSAkGHQb3DhSBqwqSkKQSNyLonyLfmzokBEdD/ Ui1fGJLEH+VZ9tgCcveGD1ZWaF1GOIGQBynOHKkb2594gzh1tKHn7W34JruY7Oam PIVJ8cD0pZuTQNXRqtbjvkV16mnjW+OYaC+xoCV5/B5ZVGIHCHM3GThCTXIgm0qi 6qNDoq+nINqkt3AMU7cTPeGaJKvgJOaWXgILXJNkgj/O3qY2/VhIBpI8NEIvRFA+ k51NEvqJ1hBzlbUMjftKbOoR7WBuiM5iDP6fOLOAITIT09RS5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1F60zRwTZf/PsOeoFj3tJ56cPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgx MTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUwMTc4MzBmOGYvNGY0MTIyYjctODQ5Ni0z ZTI4LTg3NjMtOTcwZDVkNGYxOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk4MTE3ZjAtMDMwYy00ZmNhLThh N2YtYzM1MDE3ODMwZjhmLzM5ODExN2YwLTAzMGMtNGZjYS04YTdmLWMzNTAxNzgz MGY4Zi5jcmwwHwYDVR0jBBgwFoAU0zqWn+U3hLo1c9gddq3vnpZd4cIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgxMTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUw MTc4MzBmOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4mEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt14VNOnzPe2KncfHjOQ8tWRdFBQ3fEUSgsjEehfEZOaPu00iVHppBd 3KHTxZM3Gh8fQX0WtMI1MWsvhA6zwWpyf3BdSXl9QwesovRn2PiyassGstXFG9se dMUBS1wRpHJCCm7JM8EDlZylw85o3V66LKtVChlgR6pDFkGHOhrQpu6sQYRborgS cu22KOAm2D3WLf/OMG34mvFKkONjb8jBcQM2bOsJCxDabGgEu+rbuY/ARph8dOkV fg6tpUzyI7yCERL3p7nifNbVh+5vZ+UViyfTL3BQEQ1qreiw+yC4k7iFG+IBWsdU kDIFTzqav3krcISAbb1y8TiK70NJqg4= -----END CERTIFICATE-----Generated at Wed Jul 2 16:33:00 2025 by rpki-client