$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa File: 42311329-687f-3581-9dd8-4ecc3e9bc883.roa (raw, json) Hash identifier: b9vIzKS77iQwW6E4CbGS4LRJUUFlieNaoKYZwy0TkgU= Subject key identifier: 45:9B:66:11:C3:06:4C:40:A4:F9:E3:61:7A:F9:2A:A2:A6:87:91:F9 Certificate issuer: /CN=3d3016dd-bb93-47bb-b986-002f3d7984c5 Certificate serial: 010D0C9F4328584A3FAADDC3A24398C6109A5700 Authority key identifier: DE:0B:DB:E1:3C:B2:D9:EC:20:71:4B:AE:12:5D:C0:2A:E4:5A:A1:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 21699 IP address blocks: 23.188.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:dd:c3:a2:43:98:c6:10:9a:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3016dd-bb93-47bb-b986-002f3d7984c5 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=6cd8ff32-63a3-4d73-8055-e704133b68ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:d9:a1:c7:60:96:dc:c5:9c:53:6c:f7:15: ae:9b:76:90:50:3e:84:2c:11:83:25:d9:18:7b:cc: b7:2d:cd:43:a5:e8:26:cb:60:86:ce:1f:dc:2c:56: 3c:ec:05:da:e6:27:59:30:c6:c0:4d:12:d3:b3:80: 0a:93:55:61:a7:67:1d:f6:4b:ad:c5:25:8d:4a:4f: c7:00:36:05:48:ce:38:4b:a0:3c:1d:48:23:86:89: 5f:a5:c1:57:28:2e:66:d9:af:21:57:30:5d:14:34: 18:3d:0b:f7:17:f1:a6:c5:a9:85:39:29:1d:2d:16: a3:66:99:29:53:78:49:6b:ee:14:72:ee:7c:af:94: 1b:30:35:50:a5:8f:21:97:2c:c8:39:92:2f:e4:80: f3:f1:61:81:8a:be:b9:fb:a6:bd:0e:f2:a7:e9:99: 90:95:cb:05:03:6a:68:8f:20:0f:f3:65:a5:5a:da: 31:4a:27:2e:60:f4:e6:1a:d6:71:a9:3e:b2:53:d4: ad:eb:34:8d:f9:0d:0c:50:ca:20:4d:9c:8a:63:30: 52:45:3e:43:a3:c2:27:1c:a1:c7:ff:3c:31:96:a5: 8e:8e:3e:30:cb:73:a6:0b:87:f4:4d:92:77:5c:2f: 08:13:6c:0d:bd:bb:58:a0:d4:4c:f1:81:b1:24:74: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:66:11:C3:06:4C:40:A4:F9:E3:61:7A:F9:2A:A2:A6:87:91:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.crl X509v3 Authority Key Identifier: keyid:DE:0B:DB:E1:3C:B2:D9:EC:20:71:4B:AE:12:5D:C0:2A:E4:5A:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer sbgp-ipAddrBlock: critical IPv4: 23.188.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:66:e5:8f:64:c4:6b:75:9a:ef:7f:ea:0f:ec:a3:d2:b6:8e: 04:a7:46:18:e3:60:3e:3f:57:bd:99:ff:87:c6:28:b0:b2:90: 39:78:02:fb:48:c1:38:a0:4a:c2:dd:36:ec:fc:5f:6e:9f:ba: 3e:8b:6b:5d:9b:09:d4:be:d8:2a:d4:3f:8a:93:61:b0:77:58: d9:e6:14:12:e3:80:19:5e:26:52:11:58:0f:21:04:fe:31:6c: 64:51:eb:99:1e:15:45:ed:57:44:47:9e:f1:44:4a:6a:b4:a2: 5d:12:3c:5e:e7:76:82:e8:f2:63:d7:53:00:ee:8f:42:9a:8d: 93:2c:e9:9e:35:1a:2c:22:2b:1a:0f:87:76:df:50:59:5e:a7: 38:ae:b6:1d:49:33:6a:de:b0:51:9b:fa:4c:f5:60:1b:01:48: a7:0b:9e:bf:c7:fc:71:1b:e4:33:92:a3:16:11:b8:c4:32:17: 1b:fc:56:d2:3a:d9:e7:40:e5:f2:58:3e:75:41:d7:db:54:89: ad:14:63:93:96:3d:e9:81:ab:71:d0:92:75:d6:46:c8:cf:2a: c2:28:a6:09:55:72:8f:f3:85:41:83:4f:25:1c:49:27:35:56: 38:66:51:18:fa:9c:ed:53:07:dc:7b:56:aa:3a:71:f2:4c:4a: 93:0b:d3:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qt3DokOYxhCaVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMDE2ZGQtYmI5My00N2JiLWI5ODYtMDAyZjNkNzk4 NGM1MB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk NmNkOGZmMzItNjNhMy00ZDczLTgwNTUtZTcwNDEzM2I2OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifZocdgltzFnFNs9xWum3aQUD6ELBGDJdkY e8y3Lc1Dpegmy2CGzh/cLFY87AXa5idZMMbATRLTs4AKk1Vhp2cd9kutxSWNSk/H ADYFSM44S6A8HUgjholfpcFXKC5m2a8hVzBdFDQYPQv3F/GmxamFOSkdLRajZpkp U3hJa+4Ucu58r5QbMDVQpY8hlyzIOZIv5IDz8WGBir65+6a9DvKn6ZmQlcsFA2po jyAP82WlWtoxSicuYPTmGtZxqT6yU9St6zSN+Q0MUMogTZyKYzBSRT5Do8InHKHH /zwxlqWOjj4wy3OmC4f0TZJ3XC8IE2wNvbtYoNRM8YGxJHR3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWbZhHDBkxApPnjYXr5KqKmh5H5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZDMw MTZkZC1iYjkzLTQ3YmItYjk4Ni0wMDJmM2Q3OTg0YzUvNDIzMTEzMjktNjg3Zi0z NTgxLTlkZDgtNGVjYzNlOWJjODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2QzMDE2ZGQtYmI5My00N2JiLWI5 ODYtMDAyZjNkNzk4NGM1LzNkMzAxNmRkLWJiOTMtNDdiYi1iOTg2LTAwMmYzZDc5 ODRjNS5jcmwwHwYDVR0jBBgwFoAU3gvb4Tyy2ewgcUuuEl3AKuRaoS4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZDMwMTZkZC1iYjkzLTQ3YmItYjk4Ni0wMDJm M2Q3OTg0YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7xoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFm5Y9kxGt1mu9/6g/so9K2jgSnRhjjYD4/V72Z/4fGKLCykDl4AvtI wTigSsLdNuz8X26fuj6La12bCdS+2CrUP4qTYbB3WNnmFBLjgBleJlIRWA8hBP4x bGRR65keFUXtV0RHnvFESmq0ol0SPF7ndoLo8mPXUwDuj0KajZMs6Z41GiwiKxoP h3bfUFlepziuth1JM2resFGb+kz1YBsBSKcLnr/H/HEb5DOSoxYRuMQyFxv8VtI6 2edA5fJYPnVB19tUia0UY5OWPemBq3HQknXWRsjPKsIopglVco/zhUGDTyUcSSc1 VjhmURj6nO1TB9x7Vqo6cfJMSpML09c= -----END CERTIFICATE-----Generated at Tue Jul 1 06:50:33 2025 by rpki-client