$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/c3929a00-71dd-3fbe-8bb0-7b263bec1fa0.roa File: c3929a00-71dd-3fbe-8bb0-7b263bec1fa0.roa (raw, json) Hash identifier: 2Ar7FUTILjKr8IvTbt7bpXS0cPpRmAFDjF+Z+bQlRqE= Subject key identifier: 9E:DA:F0:DC:85:60:1D:81:F0:00:06:28:27:B6:EE:47:8F:64:7F:60 Certificate issuer: /CN=13a90422-997f-4e00-bfd1-3d9f4331b9c5 Certificate serial: 010D0C9F4328584A480AEEDDBEF6FA51DBB81D83 Authority key identifier: 8A:26:C3:9F:90:A8:FE:0B:D1:96:D3:3F:D7:EA:82:A1:C9:86:B0:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/c3929a00-71dd-3fbe-8bb0-7b263bec1fa0.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 16611 IP address blocks: 23.132.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/13a90422-997f-4e00-bfd1-3d9f4331b9c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/13a90422-997f-4e00-bfd1-3d9f4331b9c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ee:dd:be:f6:fa:51:db:b8:1d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13a90422-997f-4e00-bfd1-3d9f4331b9c5 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=fe9922e9-35e0-438f-8912-37cd99935999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:20:59:f4:d3:b9:eb:1e:ef:d5:ba:24:3c: 03:3f:a9:c7:5f:d9:58:89:87:0b:13:aa:db:fe:d4: 4c:3b:fa:7f:45:04:19:31:32:d3:50:c7:15:37:fd: 7a:02:f2:17:88:d2:38:65:c4:9a:bf:b0:8b:19:10: de:de:43:92:2f:48:35:ca:a4:ff:bf:b1:4c:ca:98: d9:ce:d5:2c:21:74:9c:69:3f:08:10:d4:75:3d:7c: 4f:73:27:c5:c1:ef:3b:f2:ac:24:56:02:80:da:22: a6:25:9a:5d:f1:ee:f8:f3:1c:b2:23:2a:94:24:50: 7c:a8:36:e4:42:61:3a:7d:f5:47:1c:72:57:f6:c3: 03:a4:70:05:15:80:3d:be:95:77:40:ed:de:ba:b2: 93:54:c7:fb:53:50:87:a6:0a:4a:fa:9f:e1:47:0e: 3a:44:f8:67:57:fd:45:69:ed:74:52:fa:ff:57:2a: c3:0c:33:14:bb:e3:55:7b:f7:a1:42:62:4d:02:74: 5b:92:45:f1:8e:5d:03:63:a5:74:88:c8:4a:d0:14: c1:45:b5:c3:cb:73:2c:bb:bd:7c:ca:ce:c5:e5:d2: 55:5d:17:28:a5:f7:cd:b8:b1:86:df:9c:87:73:9b: 9e:07:ea:43:c4:1d:04:46:cd:db:b2:b3:1d:ab:5e: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DA:F0:DC:85:60:1D:81:F0:00:06:28:27:B6:EE:47:8F:64:7F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/c3929a00-71dd-3fbe-8bb0-7b263bec1fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5/13a90422-997f-4e00-bfd1-3d9f4331b9c5.crl X509v3 Authority Key Identifier: keyid:8A:26:C3:9F:90:A8:FE:0B:D1:96:D3:3F:D7:EA:82:A1:C9:86:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13a90422-997f-4e00-bfd1-3d9f4331b9c5.cer sbgp-ipAddrBlock: critical IPv4: 23.132.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:58:a9:21:34:3c:1c:36:d1:f3:0d:d9:5c:51:66:c2:72:bf: 3a:80:be:14:41:4e:6a:19:f8:b0:bd:3c:e3:f5:12:fb:26:d8: ea:73:96:db:6a:ef:35:d5:4d:c7:c0:36:59:57:18:65:32:71: c3:ee:21:d3:8f:44:ed:bc:40:d5:da:d5:a9:e4:b2:73:3b:17: ac:65:da:4c:26:37:d6:62:1e:ad:cb:81:46:87:0a:72:a6:83: d9:31:bd:19:58:f8:a5:1b:f8:61:5d:38:46:ba:01:c5:dc:a2: ef:b4:25:5a:28:98:25:82:af:4b:c3:e8:18:0b:69:7b:cd:93: 9c:53:f2:8f:03:5b:76:19:e3:31:48:da:d5:f8:d3:d0:7e:04: 72:f7:2f:70:79:f9:2f:f4:af:09:5c:3b:24:39:db:33:6e:a6: 31:03:f0:82:82:46:b2:17:cd:1f:d3:fe:4b:d3:c5:a8:ca:47: 7e:33:a0:df:ae:c2:4c:88:07:d3:95:46:97:52:4d:55:c9:cc: de:8b:f5:19:ea:3a:3f:e2:b0:13:4a:c7:b7:9a:33:79:11:c8: e2:08:07:23:e8:95:3d:a3:86:f8:66:64:47:28:73:38:c6:d4: 1b:8a:11:53:04:78:d7:82:f3:fe:ee:03:11:1b:11:c8:1b:e9: c5:86:5c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICu7dvvb6Udu4HYMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNhOTA0MjItOTk3Zi00ZTAwLWJmZDEtM2Q5ZjQzMzFi OWM1MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZmU5OTIyZTktMzVlMC00MzhmLTg5MTItMzdjZDk5OTM1OTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AAgWfTTuese79W6JDwDP6nHX9lYiYcLE6rb /tRMO/p/RQQZMTLTUMcVN/16AvIXiNI4ZcSav7CLGRDe3kOSL0g1yqT/v7FMypjZ ztUsIXScaT8IENR1PXxPcyfFwe878qwkVgKA2iKmJZpd8e748xyyIyqUJFB8qDbk QmE6ffVHHHJX9sMDpHAFFYA9vpV3QO3eurKTVMf7U1CHpgpK+p/hRw46RPhnV/1F ae10Uvr/VyrDDDMUu+NVe/ehQmJNAnRbkkXxjl0DY6V0iMhK0BTBRbXDy3Msu718 ys7F5dJVXRcopffNuLGG35yHc5ueB+pDxB0ERs3bsrMdq17JzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7a8NyFYB2B8AAGKCe27kePZH9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xM2E5 MDQyMi05OTdmLTRlMDAtYmZkMS0zZDlmNDMzMWI5YzUvYzM5MjlhMDAtNzFkZC0z ZmJlLThiYjAtN2IyNjNiZWMxZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTNhOTA0MjItOTk3Zi00ZTAwLWJm ZDEtM2Q5ZjQzMzFiOWM1LzEzYTkwNDIyLTk5N2YtNGUwMC1iZmQxLTNkOWY0MzMx YjljNS5jcmwwHwYDVR0jBBgwFoAUiibDn5Co/gvRltM/1+qCocmGsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xM2E5MDQyMi05OTdmLTRlMDAtYmZkMS0zZDlm NDMzMWI5YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFYqSE0PBw20fMN2VxRZsJyvzqAvhRBTmoZ+LC9POP1Evsm2Opzlttq 7zXVTcfANllXGGUyccPuIdOPRO28QNXa1anksnM7F6xl2kwmN9ZiHq3LgUaHCnKm g9kxvRlY+KUb+GFdOEa6AcXcou+0JVoomCWCr0vD6BgLaXvNk5xT8o8DW3YZ4zFI 2tX409B+BHL3L3B5+S/0rwlcOyQ52zNupjED8IKCRrIXzR/T/kvTxajKR34zoN+u wkyIB9OVRpdSTVXJzN6L9RnqOj/isBNKx7eaM3kRyOIIByPolT2jhvhmZEcoczjG 1BuKEVMEeNeC8/7uAxEbEcgb6cWGXPQ= -----END CERTIFICATE-----Generated at Sun Jun 29 00:41:48 2025 by rpki-client