$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa File: 1190cb49-d6b6-36f1-8898-ac542e226430.roa (raw, json) Hash identifier: gTamvtY4/LQZzweTmGGfVs0+6605l+Qktv+7KbzlqPw= Subject key identifier: FA:40:04:BA:A7:21:63:53:07:E6:3A:7D:FD:C0:F7:FE:4D:31:64:3A Certificate issuer: /CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Certificate serial: 010D0C9F4328584A5A308292CFEC70B2ED5E0828 Authority key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 7018 IP address blocks: 23.132.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:82:92:cf:ec:70:b2:ed:5e:08:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=df31b91d-ba08-4c6e-b1da-2ea73a680a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3c:cc:55:6d:c4:71:cd:b3:7b:54:df:d1:07: 25:4d:c8:8e:16:85:82:d8:25:38:24:65:f3:a4:0e: 74:da:1e:c4:f4:92:95:e6:4b:f8:73:6e:e3:65:e0: 34:92:36:07:2f:da:68:42:30:93:62:00:18:1e:4d: bf:c7:c4:36:b4:99:04:3e:14:4a:e5:d5:2c:dc:89: b9:ba:3d:13:dc:18:04:6a:aa:3a:7f:52:b5:14:bb: 37:a8:03:91:c9:1c:11:f0:70:5f:1b:f3:aa:72:3f: 44:42:f1:77:b4:e4:d3:51:3e:e4:a8:96:43:58:5f: 1e:76:b5:8a:82:02:40:a2:7d:32:d9:f6:10:09:0b: 1d:a1:d4:1b:b0:69:f7:67:39:86:ca:8d:e5:bd:08: d2:87:55:42:7c:c6:d1:51:28:30:dc:ca:6c:f7:53: f2:a1:32:0d:d2:27:55:e1:de:06:b3:bf:d1:33:40: ab:a3:85:81:49:20:ea:42:cb:17:03:c3:d5:b2:3b: ac:27:6f:d9:64:32:c9:3b:d2:88:cd:8a:60:33:dc: 62:f1:c3:73:2c:23:ac:05:43:e9:9a:49:3a:12:da: a6:c4:f3:d9:28:c3:84:cf:d1:4a:30:0b:e0:98:02: b2:54:5d:3d:73:8e:f3:9c:e4:fe:31:3b:9b:2c:2f: da:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:40:04:BA:A7:21:63:53:07:E6:3A:7D:FD:C0:F7:FE:4D:31:64:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl X509v3 Authority Key Identifier: keyid:D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer sbgp-ipAddrBlock: critical IPv4: 23.132.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:d3:2f:cd:49:33:89:78:eb:dc:26:c7:cb:e6:b2:31:2a:f9: b8:56:71:45:48:6a:b9:bf:80:6c:ee:43:0a:a0:7a:35:68:f7: bd:66:46:09:c2:87:14:f4:01:4c:c6:66:a4:6c:47:08:4a:1a: 16:62:73:23:78:96:74:1d:bd:50:6d:4c:c7:2a:ba:ad:6d:26: 55:60:db:4b:7f:e4:f6:84:bf:05:a6:c6:72:41:5e:6c:2c:3b: 86:5a:51:fb:8b:52:60:7d:a2:2b:45:6c:bd:8b:df:2a:00:68: de:af:7c:31:7d:cb:6a:93:87:7c:87:b6:70:9a:5a:e1:72:ee: 14:ec:a2:ac:63:10:82:23:53:d4:40:3b:59:4c:b0:0d:a8:e0: 51:54:2d:43:0e:32:6f:9c:15:cc:49:0b:50:bc:1e:a2:aa:37: c7:2a:69:11:f8:ee:8d:37:33:85:a2:6b:c8:01:75:0d:b6:9a: 8b:4e:70:63:c9:48:28:f1:69:69:f8:60:2d:05:d4:4d:ce:ad: 26:55:b9:d2:14:0f:f9:f2:f2:da:b6:d2:04:9a:2b:d9:0c:b7: de:6c:fd:80:a7:85:b9:8d:28:0f:67:e6:1a:fd:f9:77:7c:ad: 49:22:71:d9:5e:12:cd:ec:d6:19:24:b2:00:14:17:5f:94:36: f8:d4:b8:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMIKSz+xwsu1eCCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJiYjRjNTQtMTRhNi00ZTMyLWIzYTAtZGVmYWQzMDBk OWZjMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZGYzMWI5MWQtYmEwOC00YzZlLWIxZGEtMmVhNzNhNjgwYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TzMVW3Ecc2ze1Tf0QclTciOFoWC2CU4JGXz pA502h7E9JKV5kv4c27jZeA0kjYHL9poQjCTYgAYHk2/x8Q2tJkEPhRK5dUs3Im5 uj0T3BgEaqo6f1K1FLs3qAORyRwR8HBfG/Oqcj9EQvF3tOTTUT7kqJZDWF8edrWK ggJAon0y2fYQCQsdodQbsGn3ZzmGyo3lvQjSh1VCfMbRUSgw3Mps91PyoTIN0idV 4d4Gs7/RM0Cro4WBSSDqQssXA8PVsjusJ2/ZZDLJO9KIzYpgM9xi8cNzLCOsBUPp mkk6EtqmxPPZKMOEz9FKMAvgmAKyVF09c47znOT+MTubLC/arQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpABLqnIWNTB+Y6ff3A9/5NMWQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMmJi NGM1NC0xNGE2LTRlMzItYjNhMC1kZWZhZDMwMGQ5ZmMvMTE5MGNiNDktZDZiNi0z NmYxLTg4OTgtYWM1NDJlMjI2NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzJiYjRjNTQtMTRhNi00ZTMyLWIz YTAtZGVmYWQzMDBkOWZjL2MyYmI0YzU0LTE0YTYtNGUzMi1iM2EwLWRlZmFkMzAw ZDlmYy5jcmwwHwYDVR0jBBgwFoAU1FljNJLTiXWCreXe3xu4GJvnei8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMmJiNGM1NC0xNGE2LTRlMzItYjNhMC1kZWZh ZDMwMGQ5ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7TL81JM4l469wmx8vmsjEq+bhWcUVIarm/gGzuQwqgejVo971mRgnC hxT0AUzGZqRsRwhKGhZicyN4lnQdvVBtTMcquq1tJlVg20t/5PaEvwWmxnJBXmws O4ZaUfuLUmB9oitFbL2L3yoAaN6vfDF9y2qTh3yHtnCaWuFy7hTsoqxjEIIjU9RA O1lMsA2o4FFULUMOMm+cFcxJC1C8HqKqN8cqaRH47o03M4Wia8gBdQ22motOcGPJ SCjxaWn4YC0F1E3OrSZVudIUD/ny8tq20gSaK9kMt95s/YCnhbmNKA9n5hr9+Xd8 rUkicdleEs3s1hkksgAUF1+UNvjUuGk= -----END CERTIFICATE-----Generated at Mon Jun 30 15:48:41 2025 by rpki-client