$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa File: 14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa (raw, json) Hash identifier: 2epZBsVfaofYy3WYmTUTIS8w0gwkbAzaCRJvQxeErNE= Subject key identifier: B6:75:45:01:0D:FA:16:A6:5D:73:21:83:D3:AF:AB:42:E5:42:60:9E Certificate issuer: /CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Certificate serial: 010D0C9F4328584A374AD6F5249078989EE065C0 Authority key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 401328 IP address blocks: 23.131.20.0/24 maxlen: 32 2602:f769::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d6:f5:24:90:78:98:9e:e0:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=a60f5254-36b4-46b8-9b7e-57f5dc7c2b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:24:ba:fd:41:d1:e7:4e:2f:a3:62:6b:8a: 23:c0:4b:71:b2:fa:eb:57:83:dd:5d:96:ce:7d:c2: 54:04:c6:34:54:28:20:46:d7:9a:59:4a:e4:85:e5: 37:8d:e4:ee:33:2d:eb:10:1b:7f:dc:08:6f:06:61: 54:01:12:21:67:da:cc:a5:8a:77:ff:5e:45:fa:5f: 63:2c:4d:53:90:23:ec:30:35:96:e3:c6:61:15:20: b4:9b:ed:56:6e:f3:f2:83:15:8c:5a:1d:c4:82:f7: 1e:4f:fa:dc:c3:f0:ca:95:bf:91:c5:b8:f3:84:ff: 88:eb:47:a7:af:ee:54:9c:db:1f:21:5c:9a:57:25: 12:d7:b6:9d:65:33:df:70:0d:b2:60:99:be:93:08: d1:54:82:01:5b:3d:49:d9:5e:e2:3c:ab:d4:db:ab: 48:4c:38:89:d3:cc:9e:28:9d:86:dc:31:6e:0e:1c: 92:3d:81:c7:ae:d1:32:8f:fc:10:3c:6e:ff:00:fd: 7b:fc:bd:8b:b2:1c:a9:97:9d:fe:7d:48:be:b3:42: d8:7d:6e:af:85:9b:85:8e:e6:e9:1f:fd:5f:d3:3a: 1b:53:fd:03:ba:33:94:af:60:d5:4e:d1:00:cd:ad: cf:87:b8:24:a6:ab:5d:71:a4:19:b0:60:59:cb:bb: e8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:75:45:01:0D:FA:16:A6:5D:73:21:83:D3:AF:AB:42:E5:42:60:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl X509v3 Authority Key Identifier: keyid:B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer sbgp-ipAddrBlock: critical IPv4: 23.131.20.0/24 IPv6: 2602:f769::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:63:c3:b3:02:84:5e:cc:d4:de:5c:6f:92:aa:55:bf:22:dd: c5:70:f1:04:95:2d:17:01:e2:8d:93:06:17:0e:21:cb:c1:6c: 0a:6d:65:57:0e:63:4f:5d:1a:39:9e:b7:4a:0c:c2:1a:bb:59: 3e:fe:fc:dc:54:e6:62:17:87:d0:b5:df:28:e9:a6:a3:ed:7a: 02:31:94:8c:a7:0c:1e:ee:28:ca:c2:39:77:c8:a4:2b:32:3d: eb:5e:83:b7:50:19:0e:d9:9d:39:df:f0:87:86:03:8f:09:73: 47:1d:1e:7b:a4:55:85:a1:05:93:23:d2:e0:45:78:9f:3e:61: 03:81:2b:71:10:ac:2e:83:b8:4a:68:b6:58:ed:1d:e0:26:be: 89:14:56:82:b8:8b:ed:31:a2:2e:7f:0d:e7:a7:36:e6:d9:85: bd:6a:eb:a6:79:13:81:64:f0:3f:b1:13:3a:07:f5:24:b2:19: 89:d0:5c:c3:d2:75:53:ad:e3:e7:eb:a8:5d:ac:6e:5f:5e:dd: 9f:ce:34:76:bb:93:2e:3b:d8:99:0a:23:fb:96:5a:c5:bb:4e: 6b:92:63:c0:f4:bd:2a:4f:17:59:69:a3:27:ae:bd:e2:8f:a3: 67:51:be:91:a2:80:6c:0b:4c:7a:d9:e3:2c:ec:69:94:12:10: 5a:39:91:64 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEo3Stb1JJB4mJ7gZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdm Mzg2MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YTYwZjUyNTQtMzZiNC00NmI4LTliN2UtNTdmNWRjN2MyYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroYkuv1B0edOL6Nia4ojwEtxsvrrV4PdXZbO fcJUBMY0VCggRteaWUrkheU3jeTuMy3rEBt/3AhvBmFUARIhZ9rMpYp3/15F+l9j LE1TkCPsMDWW48ZhFSC0m+1WbvPygxWMWh3EgvceT/rcw/DKlb+RxbjzhP+I60en r+5UnNsfIVyaVyUS17adZTPfcA2yYJm+kwjRVIIBWz1J2V7iPKvU26tITDiJ08ye KJ2G3DFuDhySPYHHrtEyj/wQPG7/AP17/L2Lshypl53+fUi+s0LYfW6vhZuFjubp H/1f0zobU/0DujOUr2DVTtEAza3Ph7gkpqtdcaQZsGBZy7voDQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLZ1RQEN+hamXXMhg9Ovq0LlQmCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjhh MmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvMTRiMzhlMzctYjVmZS0z ZDAxLTk3ZGItM2I3ZGUxY2ViNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY4YTJkMWQtMmMzNi00YTFkLTg4 YTctMGMzMGQyNTdmMzg2L2Q2OGEyZDFkLTJjMzYtNGExZC04OGE3LTBjMzBkMjU3 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUtQ9QgY04B+AhOdH40Z4gI+5guyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMw ZDI1N2YzODYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4MUMA4E AgACMAgDBgQmAvdpADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhY8OzAoRezNTeXG+SqlW/It3FcPEElS0X AeKNkwYXDiHLwWwKbWVXDmNPXRo5nrdKDMIau1k+/vzcVOZiF4fQtd8o6aaj7XoC MZSMpwwe7ijKwjl3yKQrMj3rXoO3UBkO2Z053/CHhgOPCXNHHR57pFWFoQWTI9Lg RXifPmEDgStxEKwug7hKaLZY7R3gJr6JFFaCuIvtMaIufw3npzbm2YW9auumeROB ZPA/sRM6B/UkshmJ0FzD0nVTrePn66hdrG5fXt2fzjR2u5MuO9iZCiP7llrFu05r kmPA9L0qTxdZaaMnrr3ij6NnUb6RooBsC0x62eMs7GmUEhBaOZFk -----END CERTIFICATE-----Generated at Mon Jun 30 10:04:11 2025 by rpki-client