$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa File: 930237d2-7c98-3e15-b444-d23772ae4891.roa (raw, json) Hash identifier: p9Kq0YG2mYwFtEZeKmoFrtHqwF95XzEyv2NmjaSWxdg= Subject key identifier: 23:8A:36:55:96:55:D9:14:44:2B:8B:23:3A:76:31:0C:F7:54:5C:6F Certificate issuer: /CN=862a9ade-3d88-4730-8033-1414625d565b Certificate serial: 010D0C9F4328584A3E45AEE64371A1E0FD931780 Authority key identifier: 2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 400593 IP address blocks: 23.131.108.0/24 maxlen: 24 2602:f75d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:ae:e6:43:71:a1:e0:fd:93:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=862a9ade-3d88-4730-8033-1414625d565b Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=64a20cb1-9a0e-4cbe-9b76-b54321dbeb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:36:90:54:a5:53:65:85:1e:8e:1a:c3:de: d6:33:1f:a4:99:cf:a8:30:12:34:40:b9:c5:f2:3c: de:7d:58:d0:a6:84:a8:d6:a2:f6:97:6f:cf:c9:a2: 93:15:f4:fd:b0:7e:d8:c9:e2:4c:b3:c5:4e:d5:ba: 55:a7:90:f8:e1:4a:da:b1:ca:37:5c:17:d6:d4:3b: a8:12:15:be:77:bb:4d:c7:ce:62:f0:bb:45:13:6b: a2:f0:22:de:d7:96:75:2a:7a:fd:04:e9:6e:e4:2e: ea:e0:5f:cf:3c:30:a5:39:4a:62:3c:0e:e3:81:d0: e1:7b:70:77:e9:e4:39:e3:25:07:7e:1b:e6:58:c6: 09:34:12:73:2d:65:0a:19:b1:fb:fe:7c:6b:0b:e5: 7d:bd:57:73:82:f2:af:31:71:25:84:4f:f5:b9:21: fd:2d:92:e0:e5:78:66:ec:ba:06:b4:30:c9:2f:6d: 90:de:1b:55:b6:c9:7a:1e:d2:09:d8:9f:fc:d4:da: b1:f9:57:43:bf:39:20:18:8c:75:36:59:40:5a:e9: 31:7e:37:f5:d5:9c:c5:59:f8:f7:e4:67:c4:56:c9: 3d:4d:c3:03:10:59:b9:01:f5:6b:56:be:15:08:72: 0c:b7:a5:c6:2a:19:43:49:3a:5c:3d:b8:94:ff:94: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8A:36:55:96:55:D9:14:44:2B:8B:23:3A:76:31:0C:F7:54:5C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl X509v3 Authority Key Identifier: keyid:2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer sbgp-ipAddrBlock: critical IPv4: 23.131.108.0/24 IPv6: 2602:f75d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3c:40:c2:41:67:4c:48:94:54:99:ab:df:c2:02:f2:fa:8c: 6d:51:74:52:11:59:79:74:82:8a:1f:aa:6f:a4:32:c2:d8:50: a5:c4:f9:7f:3d:0e:e5:25:3e:05:7a:a0:94:d9:fa:28:f6:07: 96:46:2c:74:49:c8:14:d5:bb:a6:d1:b6:bd:85:6b:14:f1:a5: c9:6b:7c:01:d8:3c:d5:90:be:c4:c4:21:25:3a:76:64:5a:af: 0d:68:d7:5c:dd:e1:82:a9:7c:94:29:95:57:47:f8:e8:b3:f7: 7f:c7:74:19:9d:53:aa:bb:ca:f2:17:0b:81:b7:35:99:25:b4: ea:85:8f:55:60:3f:a0:c0:0a:c1:c6:2f:3e:ca:17:48:03:e7: 16:d6:4b:bb:f8:d0:64:d4:9a:03:9f:dd:fb:39:79:47:02:63: 43:c8:d1:8b:0f:13:9d:33:9f:2a:a0:e3:9a:fc:54:90:4a:22: 91:57:82:d2:f1:cd:17:db:f7:57:90:56:c5:0b:be:ac:d0:08: e0:29:88:ea:dc:8e:2d:c7:b0:46:f2:ff:8e:00:50:1c:48:74: f3:a2:0f:97:4c:dc:db:58:ae:9c:8b:64:b4:73:1e:49:f7:1d: 43:d0:45:c4:df:03:36:71:39:48:ea:c3:6c:81:a4:f9:c5:20: 05:46:31:96 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEo+Ra7mQ3Gh4P2TF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYyYTlhZGUtM2Q4OC00NzMwLTgwMzMtMTQxNDYyNWQ1 NjViMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk NjRhMjBjYjEtOWEwZS00Y2JlLTliNzYtYjU0MzIxZGJlYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0w2kFSlU2WFHo4aw97WMx+kmc+oMBI0QLnF 8jzefVjQpoSo1qL2l2/PyaKTFfT9sH7YyeJMs8VO1bpVp5D44Urasco3XBfW1Duo EhW+d7tNx85i8LtFE2ui8CLe15Z1Knr9BOlu5C7q4F/PPDClOUpiPA7jgdDhe3B3 6eQ54yUHfhvmWMYJNBJzLWUKGbH7/nxrC+V9vVdzgvKvMXElhE/1uSH9LZLg5Xhm 7LoGtDDJL22Q3htVtsl6HtIJ2J/81Nqx+VdDvzkgGIx1NllAWukxfjf11ZzFWfj3 5GfEVsk9TcMDEFm5AfVrVr4VCHIMt6XGKhlDSTpcPbiU/5S9NwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCOKNlWWVdkURCuLIzp2MQz3VFxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NjJh OWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0NjI1ZDU2NWIvOTMwMjM3ZDItN2M5OC0z ZTE1LWI0NDQtZDIzNzcyYWU0ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODYyYTlhZGUtM2Q4OC00NzMwLTgw MzMtMTQxNDYyNWQ1NjViLzg2MmE5YWRlLTNkODgtNDczMC04MDMzLTE0MTQ2MjVk NTY1Yi5jcmwwHwYDVR0jBBgwFoAULOFG2t/V5HgusfTj4W9u5RjqxO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjJhOWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0 NjI1ZDU2NWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4NsMA4E AgACMAgDBgQmAvddADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApPEDCQWdMSJRUmavfwgLy+oxtUXRSEVl5 dIKKH6pvpDLC2FClxPl/PQ7lJT4FeqCU2foo9geWRix0ScgU1bum0ba9hWsU8aXJ a3wB2DzVkL7ExCElOnZkWq8NaNdc3eGCqXyUKZVXR/jos/d/x3QZnVOqu8ryFwuB tzWZJbTqhY9VYD+gwArBxi8+yhdIA+cW1ku7+NBk1JoDn937OXlHAmNDyNGLDxOd M58qoOOa/FSQSiKRV4LS8c0X2/dXkFbFC76s0AjgKYjq3I4tx7BG8v+OAFAcSHTz og+XTNzbWK6ci2S0cx5J9x1D0EXE3wM2cTlI6sNsgaT5xSAFRjGW -----END CERTIFICATE-----Generated at Fri Jul 4 21:40:10 2025 by rpki-client