$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa File: 4611c568-faa4-3083-94c1-062a9876a795.roa (raw, json) Hash identifier: BekdOxMfckPeV4lEmBcgYMschXLY07Xzm9Rg7HRkjX4= Subject key identifier: 99:5B:2A:C9:7C:17:66:C8:0D:C1:0C:E0:BB:71:4E:F1:44:29:B1:18 Certificate issuer: /CN=268f6692-999f-4dd3-86b7-32b134a18d56 Certificate serial: 010D0C9F43285849DC8FC67CD075B90EED63F9C0 Authority key identifier: 99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 401459 IP address blocks: 23.130.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c6:7c:d0:75:b9:0e:ed:63:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f6692-999f-4dd3-86b7-32b134a18d56 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=d359b156-092f-4c59-8b39-ac22517ab49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:34:c9:10:1a:ff:cc:47:37:6e:d3:1d:46: 82:24:2c:65:43:2f:0a:c1:3b:29:da:d4:68:f0:9d: 8b:c1:39:ce:ec:38:8b:ed:c7:a2:cf:cf:b2:c6:14: 24:2b:a0:bb:61:ee:e7:de:84:77:0e:2f:1d:86:0f: 12:e7:f3:5d:4b:75:6a:4c:0e:6b:6c:01:39:eb:24: 2c:a7:2c:95:35:68:da:a8:e6:cc:18:c8:ec:04:84: cd:68:4a:b0:2f:13:eb:99:0d:70:b0:57:f6:1a:bc: 59:7c:e6:9f:90:82:aa:c7:15:47:36:f8:5f:45:b5: b6:a4:67:84:09:13:0c:1f:71:31:3c:ad:32:0c:3d: 72:e8:66:49:f4:28:36:fe:e4:00:50:f9:05:b6:3a: ef:7c:c9:82:78:d0:9f:06:b0:58:7e:ac:cd:62:db: 26:01:5a:49:f2:4a:9b:15:41:9b:d3:2f:2e:2b:0e: ce:eb:69:08:c9:43:a1:77:fc:22:36:c4:c4:68:0a: 5d:b0:1f:26:6a:26:45:da:be:4c:62:05:ea:e3:89: 89:41:b0:bb:24:41:aa:c7:5f:c0:ef:28:a6:0c:37: 1f:94:44:f2:8e:08:8c:29:40:3a:9b:d2:9e:c9:93: 22:71:58:44:69:65:c8:8e:df:35:70:23:c7:72:ec: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5B:2A:C9:7C:17:66:C8:0D:C1:0C:E0:BB:71:4E:F1:44:29:B1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl X509v3 Authority Key Identifier: keyid:99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer sbgp-ipAddrBlock: critical IPv4: 23.130.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:71:88:c2:44:22:57:8d:f5:d1:ae:af:87:9c:5c:62:70:ec: 5c:b2:48:90:08:a8:85:5b:3f:9f:ba:1a:3d:e0:11:cf:57:31: 70:ad:6f:6c:be:c6:be:74:50:cb:6a:6e:20:26:e6:8c:1a:27: 3a:b0:ee:57:c0:a2:11:6a:7a:b1:1d:38:62:1b:73:49:c0:c9: 15:33:c8:ad:67:58:42:d2:11:9f:53:97:18:6c:4b:35:93:0f: 72:21:ca:e0:ff:1a:ce:e2:c8:ba:11:2a:ef:e5:87:40:37:03: 31:38:cd:16:81:b0:e9:9b:01:46:a7:69:5a:bf:1b:28:78:62: 23:8f:6d:2b:ff:60:6d:5b:f6:9e:a6:80:31:08:43:e4:fc:0a: a8:89:79:4e:21:6b:95:01:54:a7:4c:c2:ee:f2:74:6d:cf:af: 13:d8:ea:17:69:df:47:08:09:1b:25:45:99:46:8d:f9:93:fd: 2c:1f:4e:f0:97:36:30:a2:18:23:10:3a:65:97:7a:0a:c7:d4: 97:22:8e:b7:41:04:3e:d0:37:34:4c:60:72:94:c0:16:1d:bb: 84:72:ae:cb:d2:f7:c0:3d:8a:67:41:8d:d7:b2:ac:de:50:5d: ac:fe:92:15:d0:2a:fc:ba:b4:9c:62:f3:3e:a9:cf:60:b0:be: 74:29:ad:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8Z80HW5Du1j+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY4ZjY2OTItOTk5Zi00ZGQzLTg2YjctMzJiMTM0YTE4 ZDU2MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDM1OWIxNTYtMDkyZi00YzU5LThiMzktYWMyMjUxN2FiNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcY0yRAa/8xHN27THUaCJCxlQy8KwTsp2tRo 8J2LwTnO7DiL7ceiz8+yxhQkK6C7Ye7n3oR3Di8dhg8S5/NdS3VqTA5rbAE56yQs pyyVNWjaqObMGMjsBITNaEqwLxPrmQ1wsFf2GrxZfOafkIKqxxVHNvhfRbW2pGeE CRMMH3ExPK0yDD1y6GZJ9Cg2/uQAUPkFtjrvfMmCeNCfBrBYfqzNYtsmAVpJ8kqb FUGb0y8uKw7O62kIyUOhd/wiNsTEaApdsB8maiZF2r5MYgXq44mJQbC7JEGqx1/A 7yimDDcflETyjgiMKUA6m9KeyZMicVhEaWXIjt81cCPHcuwZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlbKsl8F2bIDcEM4LtxTvFEKbEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNjhm NjY5Mi05OTlmLTRkZDMtODZiNy0zMmIxMzRhMThkNTYvNDYxMWM1NjgtZmFhNC0z MDgzLTk0YzEtMDYyYTk4NzZhNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjY4ZjY2OTItOTk5Zi00ZGQzLTg2 YjctMzJiMTM0YTE4ZDU2LzI2OGY2NjkyLTk5OWYtNGRkMy04NmI3LTMyYjEzNGEx OGQ1Ni5jcmwwHwYDVR0jBBgwFoAUmYEPro6tS74cKMer2/z6JV3uR7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNjhmNjY5Mi05OTlmLTRkZDMtODZiNy0zMmIx MzRhMThkNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1xiMJEIleN9dGur4ecXGJw7FyySJAIqIVbP5+6Gj3gEc9XMXCtb2y+ xr50UMtqbiAm5owaJzqw7lfAohFqerEdOGIbc0nAyRUzyK1nWELSEZ9TlxhsSzWT D3IhyuD/Gs7iyLoRKu/lh0A3AzE4zRaBsOmbAUanaVq/Gyh4YiOPbSv/YG1b9p6m gDEIQ+T8CqiJeU4ha5UBVKdMwu7ydG3PrxPY6hdp30cICRslRZlGjfmT/SwfTvCX NjCiGCMQOmWXegrH1JcijrdBBD7QNzRMYHKUwBYdu4RyrsvS98A9imdBjdeyrN5Q Xaz+khXQKvy6tJxi8z6pz2CwvnQprSM= -----END CERTIFICATE-----Generated at Tue Jul 1 09:55:08 2025 by rpki-client