$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa File: f83748be-c604-38fd-9db7-acbbef995831.roa (raw, json) Hash identifier: fRUbuulO4kf48z8PKgmBuDHe/UCeEHlBdYl22aQhqoo= Subject key identifier: 8A:3E:CB:C7:33:0D:1B:D8:32:33:F8:E9:A8:1C:55:A7:5D:D4:C2:FB Certificate issuer: /CN=caec0bfa-1434-4606-b19a-4a911d16534d Certificate serial: 010D0C9F4328584A3480205246EFDDA2AAD92020 Authority key identifier: 91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 401566 IP address blocks: 23.131.236.0/24 maxlen: 24 2602:f745::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:20:52:46:ef:dd:a2:aa:d9:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caec0bfa-1434-4606-b19a-4a911d16534d Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=1788d8df-83ba-48e4-bdab-cfb948f9cf8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:06:cc:70:f7:de:73:c8:b7:80:93:38:cb:fa: 8a:36:38:55:79:65:5a:6a:72:5a:c9:4b:e8:59:3f: 55:1d:bc:be:a6:4a:11:de:89:ef:f5:50:71:7a:59: 49:9c:31:4c:a9:db:20:c4:12:ab:4c:10:fc:dc:fc: 47:60:d4:db:c4:02:15:ff:3b:c3:b1:7d:ce:6c:e9: a7:45:0d:e4:12:5e:e4:a5:27:fa:aa:94:be:25:84: e2:f1:bc:b2:6d:57:45:98:9d:97:d7:04:93:ec:42: f6:80:46:e6:41:5f:61:30:55:00:a1:41:d0:b4:90: 2b:54:a4:d5:b2:ce:6c:70:93:b7:eb:4d:7f:21:dd: e6:90:60:42:7a:14:66:ed:d3:ea:99:ba:c4:d1:b4: 5f:05:b3:23:d1:a2:dd:b3:48:95:ca:ca:21:22:23: 61:a0:b0:06:7c:89:44:47:8e:d1:6d:fb:61:bc:fc: 17:f4:07:83:10:a4:09:72:46:5f:41:d8:f8:a7:86: 2a:09:45:b5:93:3f:f7:55:1f:60:07:5c:9d:7e:65: 63:ab:96:21:b5:f1:70:7e:6d:1f:b3:dd:37:fd:ff: a2:74:4c:81:ed:45:1d:0d:0d:bc:6f:74:6b:25:38: 48:87:4d:90:e1:51:31:81:97:49:f1:8e:98:bc:b3: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3E:CB:C7:33:0D:1B:D8:32:33:F8:E9:A8:1C:55:A7:5D:D4:C2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.crl X509v3 Authority Key Identifier: keyid:91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.236.0/24 IPv6: 2602:f745::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:59:30:27:11:85:5b:57:35:40:08:c8:33:0d:85:51:9b:ed: 01:14:cc:ca:e6:49:2b:e1:c4:f1:00:2e:13:a1:29:02:28:80: 9b:b6:1f:d9:29:c7:c8:8e:c7:22:b8:4a:8c:09:8b:ef:b0:aa: ee:98:e6:c7:cf:f0:20:ea:25:cc:82:45:ef:79:7a:46:b9:39: e9:0e:23:9b:44:ca:0a:ee:28:08:56:4e:db:9a:72:f4:23:89: 89:5c:31:43:49:27:57:45:5d:23:9b:5d:19:d3:07:c2:90:45: 48:47:31:45:f3:ef:1d:4a:50:61:f1:8e:97:8e:c5:69:81:6b: d6:3c:b5:81:4f:1b:92:2f:53:dd:68:2d:75:29:27:3b:49:b4: 01:59:0b:b0:5f:6a:ee:20:a4:ee:ec:94:31:01:21:14:97:2e: b0:48:92:62:15:6c:b8:67:43:52:b3:23:87:91:35:5c:7d:54: ee:8b:d9:93:ec:81:50:02:d4:22:44:f1:b9:5d:a4:e8:be:ce: f5:0f:ad:73:29:c6:ee:89:89:b8:7d:9f:00:ea:07:9f:df:5a: 81:b5:c0:e0:f2:0a:8f:8d:ed:97:f8:95:1f:bf:59:f9:79:a9: e0:2f:65:bc:a6:bb:00:a1:75:e7:63:e8:58:3b:41:3c:0f:aa: e2:9e:ab:67 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEo0gCBSRu/doqrZICAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FlYzBiZmEtMTQzNC00NjA2LWIxOWEtNGE5MTFkMTY1 MzRkMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk MTc4OGQ4ZGYtODNiYS00OGU0LWJkYWItY2ZiOTQ4ZjljZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQbMcPfec8i3gJM4y/qKNjhVeWVaanJayUvo WT9VHby+pkoR3onv9VBxellJnDFMqdsgxBKrTBD83PxHYNTbxAIV/zvDsX3ObOmn RQ3kEl7kpSf6qpS+JYTi8byybVdFmJ2X1wST7EL2gEbmQV9hMFUAoUHQtJArVKTV ss5scJO3601/Id3mkGBCehRm7dPqmbrE0bRfBbMj0aLds0iVysohIiNhoLAGfIlE R47RbfthvPwX9AeDEKQJckZfQdj4p4YqCUW1kz/3VR9gB1ydfmVjq5YhtfFwfm0f s903/f+idEyB7UUdDQ28b3RrJThIh02Q4VExgZdJ8Y6YvLP7UwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIo+y8czDRvYMjP46agcVadd1ML7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYWVj MGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkxMWQxNjUzNGQvZjgzNzQ4YmUtYzYwNC0z OGZkLTlkYjctYWNiYmVmOTk1ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2FlYzBiZmEtMTQzNC00NjA2LWIx OWEtNGE5MTFkMTY1MzRkL2NhZWMwYmZhLTE0MzQtNDYwNi1iMTlhLTRhOTExZDE2 NTM0ZC5jcmwwHwYDVR0jBBgwFoAUkYnvpwqd6EFrUXI50DOBr0BEl74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYWVjMGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkx MWQxNjUzNGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4PsMA4E AgACMAgDBgQmAvdFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZWTAnEYVbVzVACMgzDYVRm+0BFMzK5kkr 4cTxAC4ToSkCKICbth/ZKcfIjsciuEqMCYvvsKrumObHz/Ag6iXMgkXveXpGuTnp DiObRMoK7igIVk7bmnL0I4mJXDFDSSdXRV0jm10Z0wfCkEVIRzFF8+8dSlBh8Y6X jsVpgWvWPLWBTxuSL1PdaC11KSc7SbQBWQuwX2ruIKTu7JQxASEUly6wSJJiFWy4 Z0NSsyOHkTVcfVTui9mT7IFQAtQiRPG5XaTovs71D61zKcbuiYm4fZ8A6gef31qB tcDg8gqPje2X+JUfv1n5eangL2W8prsAoXXnY+hYO0E8D6rinqtn -----END CERTIFICATE-----Generated at Tue Jul 1 09:20:14 2025 by rpki-client