$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa File: e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa (raw, json) Hash identifier: YvkdG0pY9id2Tb9ZHiFeK4U0XZ4gR80XLuo1M8uh9ZM= Subject key identifier: 47:AC:44:CD:68:2B:1B:56:9B:F4:F7:9A:C6:14:DB:C4:79:11:AC:EE Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584A3CE02DEDFF5BAE321870F900 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 213622 IP address blocks: 23.130.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2d:ed:ff:5b:ae:32:18:70:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=56017087-dd03-409f-9abf-b59d7f989596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:8a:2e:00:6a:ce:a8:3c:3c:52:d2:aa:3e: bd:ed:2f:3c:e5:56:fb:73:ae:d1:d5:6d:13:ed:f7: 34:2f:4c:88:87:7f:20:ea:5b:18:86:47:b4:22:53: d4:51:02:9a:21:23:ad:83:fe:c3:67:09:17:ce:a7: d9:49:64:39:24:a0:4e:55:f5:9a:8b:f6:d5:15:a6: 49:e0:b9:be:56:db:cc:1a:f1:d3:aa:5a:76:48:d6: f5:27:b3:43:bf:9b:b0:c4:04:a9:a4:9b:e3:75:6b: 89:ee:3c:82:49:a8:25:3e:88:6a:af:97:42:04:29: bd:5c:6c:2e:0e:de:21:3b:bc:ac:a9:e8:99:2e:42: 9b:bd:d8:c3:15:dd:63:a4:3b:a0:ec:23:66:e4:90: 5c:7f:a7:03:f8:e6:3d:4a:b5:60:47:b1:f5:a4:84: 57:6c:d4:01:36:e8:06:4c:0a:6a:01:66:28:85:53: b4:2f:69:6d:24:37:b5:9a:ca:dd:8e:b9:ef:f4:2a: a9:c4:cd:c7:a6:47:42:e7:b7:b0:16:38:c9:8f:6e: 5a:8b:57:00:b5:69:af:a8:68:8c:a4:4d:82:8d:06: 68:fb:2d:3f:76:9d:27:1f:93:35:d6:21:2c:8e:95: f7:82:26:1b:c8:c4:98:65:b0:e6:04:49:66:ee:fb: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AC:44:CD:68:2B:1B:56:9B:F4:F7:9A:C6:14:DB:C4:79:11:AC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:3b:45:50:bf:94:06:80:51:5f:28:a9:5c:58:c6:90:6c:51: 96:87:da:85:30:d8:cf:16:d4:73:6c:bc:10:8c:bc:d6:0e:4f: 36:ce:84:ef:9f:1d:d6:db:82:f9:6d:46:f4:1e:9c:d2:7c:fb: 29:5b:6d:a7:ac:5d:ec:05:3a:ab:05:61:98:32:2a:c2:99:98: 43:96:dc:f6:25:62:48:e1:27:50:38:e3:1a:29:d2:5d:d5:25: d3:cc:87:af:4c:bd:ad:e2:c0:64:fe:16:09:eb:d0:90:0f:8d: e4:b0:66:05:8e:e4:02:9b:e8:ee:59:0c:71:89:9a:e9:2d:f5: d3:b4:e0:7c:71:16:3e:1b:0b:4a:34:4b:90:a4:32:62:e9:a9: 95:0a:43:b4:b2:ab:36:ea:32:e0:ce:a3:98:8b:8a:bd:b6:ab: ad:d8:69:f7:8d:01:81:9c:35:03:68:c6:55:00:88:6d:8e:34: f2:28:d2:70:99:5e:b3:71:0b:1f:77:d1:ea:29:b6:81:f9:dd: 4a:d8:7c:27:8d:73:be:0c:78:6f:e0:88:00:c2:6d:17:6b:b9: 97:41:25:0e:78:ad:8a:9c:1b:67:c1:36:4b:16:fc:14:78:07: d4:65:3a:94:23:25:66:a7:83:59:20:27:4c:3f:d5:10:de:df: 4b:57:03:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84C3t/1uuMhhw+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk NTYwMTcwODctZGQwMy00MDlmLTlhYmYtYjU5ZDdmOTg5NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMKKLgBqzqg8PFLSqj697S885Vb7c67R1W0T 7fc0L0yIh38g6lsYhke0IlPUUQKaISOtg/7DZwkXzqfZSWQ5JKBOVfWai/bVFaZJ 4Lm+VtvMGvHTqlp2SNb1J7NDv5uwxASppJvjdWuJ7jyCSaglPohqr5dCBCm9XGwu Dt4hO7ysqeiZLkKbvdjDFd1jpDug7CNm5JBcf6cD+OY9SrVgR7H1pIRXbNQBNugG TApqAWYohVO0L2ltJDe1msrdjrnv9CqpxM3HpkdC57ewFjjJj25ai1cAtWmvqGiM pE2CjQZo+y0/dp0nH5M11iEsjpX3giYbyMSYZbDmBElm7vt8xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEesRM1oKxtWm/T3msYU28R5EazuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvZTg1ZWEwN2ItZWYwYS0z NDU2LWEzN2QtYTIzZWMyYTI2MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANk7RVC/lAaAUV8oqVxYxpBsUZaH2oUw2M8W1HNsvBCMvNYOTzbOhO+f HdbbgvltRvQenNJ8+ylbbaesXewFOqsFYZgyKsKZmEOW3PYlYkjhJ1A44xop0l3V JdPMh69Mva3iwGT+Fgnr0JAPjeSwZgWO5AKb6O5ZDHGJmukt9dO04HxxFj4bC0o0 S5CkMmLpqZUKQ7SyqzbqMuDOo5iLir22q63YafeNAYGcNQNoxlUAiG2ONPIo0nCZ XrNxCx930eoptoH53UrYfCeNc74MeG/giADCbRdruZdBJQ54rYqcG2fBNksW/BR4 B9RlOpQjJWang1kgJ0w/1RDe30tXA9M= -----END CERTIFICATE-----Generated at Sun Jun 29 23:16:43 2025 by rpki-client