$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa File: 331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa (raw, json) Hash identifier: /9zpjV2471WFVpWeqnn3ik0MI8Sh6faPOr2Df5l3s7s= Subject key identifier: A8:82:44:2F:D6:9C:0A:D7:3F:54:BF:1D:43:4A:B0:04:30:AF:8B:86 Certificate issuer: /CN=cf438e4b-3515-40c3-b514-36b1b15593d8 Certificate serial: 010D0C9F4328584A486B994A28326269393CDD80 Authority key identifier: BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa Signing time: Mon 23 Jun 2025 04:15:46 +0000 ROA not before: Mon 23 Jun 2025 04:15:46 +0000 ROA not after: Sun 21 Sep 2025 04:15:46 +0000 asID: 401541 IP address blocks: 23.142.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:6b:99:4a:28:32:62:69:39:3c:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf438e4b-3515-40c3-b514-36b1b15593d8 Validity Not Before: Jun 23 04:15:46 2025 GMT Not After : Sep 21 04:15:46 2025 GMT Subject: CN=eed2f8f6-53d4-4407-aa1f-03519788a421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:e7:41:6f:2b:79:3f:e2:a1:28:20:82:ee: a2:ec:81:78:3b:51:20:d2:ae:fe:c7:f4:25:44:7a: ec:68:3a:ea:cf:10:7f:41:b7:51:83:21:fb:ee:b2: 7f:49:d4:a3:a1:b3:f7:9d:1f:3d:ea:55:41:f8:15: 25:a8:49:a2:e1:07:b9:f6:34:a9:2e:e3:07:05:a3: c4:96:56:cf:92:14:7d:76:96:35:b1:9e:ce:9b:b7: 32:e2:b6:ba:bd:71:28:9c:70:91:80:51:96:db:de: 81:b7:8e:61:7e:9a:c8:3a:ab:b3:3f:9a:a9:b6:7f: 6f:aa:6b:89:4f:38:37:5c:30:a8:3a:08:f9:ec:31: 8b:0d:0f:3a:62:18:21:19:90:a3:e0:74:14:24:ee: 30:66:cb:a1:14:81:e5:41:a0:60:22:96:fc:1a:f9: 4c:c9:4d:7e:83:90:a7:88:10:8c:fd:ab:de:75:30: 90:97:fc:bd:ee:6d:3e:63:3a:f7:03:9d:01:24:7b: 05:55:8c:f3:ae:4e:15:db:11:f3:03:6b:2b:ad:72: 3f:81:98:7a:28:b1:ef:35:fe:03:1f:b7:9c:86:3d: 52:d2:5a:28:2c:ac:2f:6b:81:d7:29:97:0f:4d:e0: c0:2e:33:24:7e:5c:24:28:33:11:45:d3:ce:9e:dc: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:82:44:2F:D6:9C:0A:D7:3F:54:BF:1D:43:4A:B0:04:30:AF:8B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl X509v3 Authority Key Identifier: keyid:BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b3:0f:0e:58:91:c1:b2:23:4d:d1:d9:f1:90:be:19:99:30: c8:99:de:b7:e4:56:9b:8b:98:11:26:dd:4a:87:25:86:c5:e2: 7e:27:dc:ad:6d:11:bb:2b:02:7d:fb:36:b0:7f:e5:3c:86:0a: cd:f3:13:7f:8a:ae:b8:64:d7:4b:da:3d:68:51:cb:77:b9:64: 3d:a4:19:17:53:93:9a:f8:25:42:a2:bb:b4:a2:e7:08:92:84: de:94:83:df:55:c3:b4:a0:ba:86:58:d4:75:76:e0:1f:7f:a8: 6d:7c:ef:e4:d5:08:f4:2a:fe:65:d0:74:12:07:47:b3:44:4a: 20:c9:7d:3e:63:9c:71:aa:bb:09:e6:83:18:3e:ff:a0:bf:d2: d9:92:d6:34:12:e5:7a:96:eb:3a:75:50:af:6f:25:e8:f0:74: 28:5b:f2:29:0a:72:48:e7:d8:75:01:ac:1c:f9:f7:f6:39:66: f7:69:62:f4:5f:82:27:47:c0:9b:8a:e1:9d:ff:7c:14:36:a5: 24:be:97:0f:e6:1b:c8:67:6c:1b:1b:63:c7:0b:5e:78:58:aa: 62:b5:2c:47:71:c7:c3:d6:4a:87:9d:9e:66:9e:2e:03:d9:6d: 60:6b:51:14:8d:6c:1e:ef:b3:23:a2:47:13:4a:7d:c2:02:2e: 8e:9d:a3:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpIa5lKKDJiaTk83YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y0MzhlNGItMzUxNS00MGMzLWI1MTQtMzZiMWIxNTU5 M2Q4MB4XDTI1MDYyMzA0MTU0NloXDTI1MDkyMTA0MTU0NlowLzEtMCsGA1UEAxMk ZWVkMmY4ZjYtNTNkNC00NDA3LWFhMWYtMDM1MTk3ODhhNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiznQW8reT/ioSgggu6i7IF4O1Eg0q7+x/Ql RHrsaDrqzxB/QbdRgyH77rJ/SdSjobP3nR896lVB+BUlqEmi4Qe59jSpLuMHBaPE llbPkhR9dpY1sZ7Om7cy4ra6vXEonHCRgFGW296Bt45hfprIOquzP5qptn9vqmuJ Tzg3XDCoOgj57DGLDQ86YhghGZCj4HQUJO4wZsuhFIHlQaBgIpb8GvlMyU1+g5Cn iBCM/avedTCQl/y97m0+Yzr3A50BJHsFVYzzrk4V2xHzA2srrXI/gZh6KLHvNf4D H7echj1S0looLKwva4HXKZcPTeDALjMkflwkKDMRRdPOntwdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiCRC/WnArXP1S/HUNKsAQwr4uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZjQz OGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIxYjE1NTkzZDgvMzMxYWQxZTctZDk2YS0z ZTdkLWIzMTYtMWZkYzM0OWZkOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2Y0MzhlNGItMzUxNS00MGMzLWI1 MTQtMzZiMWIxNTU5M2Q4L2NmNDM4ZTRiLTM1MTUtNDBjMy1iNTE0LTM2YjFiMTU1 OTNkOC5jcmwwHwYDVR0jBBgwFoAUvpJwZfXmDbQRBqzWGqwiJj2MTd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZjQzOGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIx YjE1NTkzZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF45UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFizDw5YkcGyI03R2fGQvhmZMMiZ3rfkVpuLmBEm3UqHJYbF4n4n3K1t EbsrAn37NrB/5TyGCs3zE3+Krrhk10vaPWhRy3e5ZD2kGRdTk5r4JUKiu7Si5wiS hN6Ug99Vw7SguoZY1HV24B9/qG187+TVCPQq/mXQdBIHR7NESiDJfT5jnHGquwnm gxg+/6C/0tmS1jQS5XqW6zp1UK9vJejwdChb8ikKckjn2HUBrBz59/Y5ZvdpYvRf gidHwJuK4Z3/fBQ2pSS+lw/mG8hnbBsbY8cLXnhYqmK1LEdxx8PWSoednmaeLgPZ bWBrURSNbB7vsyOiRxNKfcICLo6do98= -----END CERTIFICATE-----Generated at Mon Jun 30 15:02:27 2025 by rpki-client