$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/929897a7-ecc0-34d6-a55c-aeb26602f817.roa File: 929897a7-ecc0-34d6-a55c-aeb26602f817.roa (raw, json) Hash identifier: UBVPB2uhma6S2Mu6ods0SnMiYnoK/hs6raCL5SsKTUE= Subject key identifier: F2:67:D9:CC:63:AC:58:99:64:24:BB:1B:A5:61:F0:60:69:88:ED:CD Certificate issuer: /CN=4d906a8c-85ee-4279-9f48-d84ea4865122 Certificate serial: 010D0C9F4328584A4F05BBDEE536F05635A6C0C0 Authority key identifier: C5:52:3D:9F:A1:CC:FC:24:0A:04:F9:19:66:E1:44:3B:9E:0F:B6:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/929897a7-ecc0-34d6-a55c-aeb26602f817.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 401568 IP address blocks: 23.132.100.0/24 maxlen: 24 2602:f73a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:bb:de:e5:36:f0:56:35:a6:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d906a8c-85ee-4279-9f48-d84ea4865122 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=ab7ac1d8-ea39-4fc7-bf8d-9cbc302fe11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:48:30:89:05:d5:91:cc:3f:aa:42:04:a7: 5e:1d:bf:59:69:f2:e0:a1:73:26:32:d6:ac:39:69: 86:e3:ac:e3:d5:81:5d:1d:63:1e:f7:94:08:53:6d: 1d:d8:17:0f:b5:10:63:df:5e:d6:9e:69:e1:9a:8d: 54:9d:e3:ed:d9:1e:4e:97:1d:9c:a0:76:0e:fe:e9: bb:66:c4:68:cd:a2:25:18:bc:b9:ae:15:4e:e9:3e: 05:82:b5:eb:23:18:8f:67:56:f7:a2:8a:97:d3:8b: 7e:b3:36:9a:66:73:b8:e2:78:e7:5f:b4:ff:8d:3a: 70:5f:1e:46:a4:7b:e7:7a:0c:17:50:af:51:3f:91: 5b:13:4e:84:73:0f:d0:7d:47:ee:00:0f:79:66:e7: 45:fe:80:f2:d3:20:5b:0d:2c:92:42:69:d1:b0:a6: 6e:a8:c9:08:e6:ef:9e:f5:dd:00:c2:01:70:26:21: a8:4e:70:84:04:a9:27:28:31:40:13:f3:84:aa:5a: 91:a3:63:0a:ab:d4:30:56:e7:89:32:9e:f1:be:a8: e1:cd:5c:3d:ee:5a:44:fc:42:33:72:03:67:55:6e: 99:22:43:48:54:31:e0:d0:8c:2b:fc:94:5e:cc:8e: 79:19:41:e7:6e:c0:c3:d5:ca:6d:bc:92:b1:5f:45: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:67:D9:CC:63:AC:58:99:64:24:BB:1B:A5:61:F0:60:69:88:ED:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/929897a7-ecc0-34d6-a55c-aeb26602f817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.crl X509v3 Authority Key Identifier: keyid:C5:52:3D:9F:A1:CC:FC:24:0A:04:F9:19:66:E1:44:3B:9E:0F:B6:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer sbgp-ipAddrBlock: critical IPv4: 23.132.100.0/24 IPv6: 2602:f73a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8e:b8:09:05:ea:0d:0d:f7:0a:91:98:0f:3f:81:27:7f:df: f6:e7:75:a0:ca:32:f2:c0:d6:14:cf:8f:bc:88:f9:a8:12:8c: 03:39:b0:ab:af:58:53:ba:3e:c9:be:23:a6:cd:1e:d4:74:08: 51:7c:22:0c:c9:7e:e0:48:69:80:e3:f1:37:f5:22:0e:6b:e0: 34:e3:f0:ac:a3:ec:0f:b7:5d:62:02:4a:c3:65:04:fa:73:cc: c4:15:58:9d:fc:71:ed:06:0c:27:8d:e0:39:5f:15:fc:20:e4: 30:e5:fd:3a:f2:ea:ad:e8:64:95:7e:21:a0:f5:08:17:11:14: 7d:92:01:43:21:91:df:22:9b:ad:76:ac:b3:4f:28:09:78:39: e5:32:90:30:74:8d:f3:8e:a6:a5:0b:6e:5f:19:d2:5e:21:ef: cc:2b:38:31:79:fd:1b:b1:84:10:ff:79:66:18:af:af:4a:b9: 08:bc:5f:0d:9b:94:af:c7:f3:59:1d:aa:27:64:57:cb:e0:7a: ad:94:4a:94:df:49:59:55:01:57:10:d2:79:80:35:df:3a:f5: 99:5c:da:d9:a2:dd:04:d0:e5:c6:7c:19:ff:02:05:18:2b:94: b0:73:d4:ec:46:1a:c5:dd:1b:87:62:61:2c:9c:b4:d8:24:f0: ff:6d:cc:a3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpPBbve5TbwVjWmwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5MDZhOGMtODVlZS00Mjc5LTlmNDgtZDg0ZWE0ODY1 MTIyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YWI3YWMxZDgtZWEzOS00ZmM3LWJmOGQtOWNiYzMwMmZlMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh9IMIkF1ZHMP6pCBKdeHb9ZafLgoXMmMtas OWmG46zj1YFdHWMe95QIU20d2BcPtRBj317Wnmnhmo1UnePt2R5Olx2coHYO/um7 ZsRozaIlGLy5rhVO6T4FgrXrIxiPZ1b3ooqX04t+szaaZnO44njnX7T/jTpwXx5G pHvnegwXUK9RP5FbE06Ecw/QfUfuAA95ZudF/oDy0yBbDSySQmnRsKZuqMkI5u+e 9d0AwgFwJiGoTnCEBKknKDFAE/OEqlqRo2MKq9QwVueJMp7xvqjhzVw97lpE/EIz cgNnVW6ZIkNIVDHg0Iwr/JRezI55GUHnbsDD1cptvJKxX0WmOwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPJn2cxjrFiZZCS7G6Vh8GBpiO3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZDkw NmE4Yy04NWVlLTQyNzktOWY0OC1kODRlYTQ4NjUxMjIvOTI5ODk3YTctZWNjMC0z NGQ2LWE1NWMtYWViMjY2MDJmODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGQ5MDZhOGMtODVlZS00Mjc5LTlm NDgtZDg0ZWE0ODY1MTIyLzRkOTA2YThjLTg1ZWUtNDI3OS05ZjQ4LWQ4NGVhNDg2 NTEyMi5jcmwwHwYDVR0jBBgwFoAUxVI9n6HM/CQKBPkZZuFEO54Pth0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZDkwNmE4Yy04NWVlLTQyNzktOWY0OC1kODRl YTQ4NjUxMjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4RkMA4E AgACMAgDBgQmAvc6ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUjrgJBeoNDfcKkZgPP4Enf9/253WgyjLy wNYUz4+8iPmoEowDObCrr1hTuj7JviOmzR7UdAhRfCIMyX7gSGmA4/E39SIOa+A0 4/Cso+wPt11iAkrDZQT6c8zEFVid/HHtBgwnjeA5XxX8IOQw5f068uqt6GSVfiGg 9QgXERR9kgFDIZHfIputdqyzTygJeDnlMpAwdI3zjqalC25fGdJeIe/MKzgxef0b sYQQ/3lmGK+vSrkIvF8Nm5Svx/NZHaonZFfL4HqtlEqU30lZVQFXENJ5gDXfOvWZ XNrZot0E0OXGfBn/AgUYK5Swc9TsRhrF3RuHYmEsnLTYJPD/bcyj -----END CERTIFICATE-----Generated at Mon Jun 30 10:18:22 2025 by rpki-client