$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json) Hash identifier: 0Ry9ZUEiKEjQprKxXcLART4tTeU65Kb56znaU6qqGxg= Subject key identifier: D1:CF:70:38:2E:84:2A:2B:D7:1A:57:B5:FB:B9:E7:0A:87:44:D8:EA Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584AC2E0E653D508E86DAC95A880 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16584 IP address blocks: 23.140.98.0/24 maxlen: 24 172.111.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e6:53:d5:08:e8:6d:ac:95:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=e3bd2205-d7f0-47da-9f33-2da0fcf7b651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:02:40:91:06:cc:d4:be:5e:1b:0c:9d:0e:92: 47:6a:ed:8a:47:9c:8e:36:e7:70:52:02:c2:60:c6: 20:7f:ba:79:76:6c:fb:fe:7b:26:8c:bb:4c:de:04: 29:a9:30:36:14:fe:25:a3:62:4d:e6:d7:d4:01:a8: ab:bc:9a:5a:92:7a:b4:63:5c:86:2a:3b:3e:e3:ea: e3:22:d7:f6:eb:e1:f0:fd:7a:80:e6:14:c6:b1:c3: fb:4b:99:f2:18:19:a9:92:ee:3d:ec:67:a9:b6:f5: 7e:91:75:8a:4e:d7:98:07:0d:17:7c:6f:83:da:b4: 5b:27:55:3b:75:b9:b3:a5:67:3b:a6:8d:1e:78:41: f9:c1:ea:f1:3e:65:3a:48:eb:ed:12:00:49:1d:fd: f6:53:ce:97:75:47:d8:57:18:df:b3:b3:5e:ad:ee: 16:4c:c2:82:8e:04:0e:d9:ae:e4:0e:c0:ef:68:2a: 32:78:40:13:c6:dd:17:04:0c:b4:33:b1:56:bc:b3: 72:18:bb:d4:b9:6e:21:07:dc:61:ab:78:3a:22:a0: 1b:ed:45:b1:fa:0e:a4:f6:cd:99:b9:1f:53:13:d4: 7a:19:fe:49:22:42:80:99:ea:71:5a:0e:ca:92:2f: 8d:65:bf:9f:df:fe:ee:83:38:d2:98:bb:68:69:58: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:70:38:2E:84:2A:2B:D7:1A:57:B5:FB:B9:E7:0A:87:44:D8:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.98.0/24 172.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:dc:00:ac:52:0f:6a:1f:9c:9e:6f:95:a5:d5:64:b6:ea:34: 4f:d7:a1:7c:43:e4:6f:92:e2:7f:41:42:79:34:0e:37:71:aa: 55:dc:d8:ac:be:49:87:5f:f9:d8:97:92:7f:97:eb:1f:06:d7: a1:4f:8b:54:c0:c2:7b:ee:96:04:93:5d:bf:97:7c:db:59:2f: f0:30:be:4c:c4:11:8b:04:90:19:5f:78:c5:a7:e5:9f:ad:48: b3:9f:db:14:5c:30:f9:a7:8b:cc:c8:74:ab:f2:df:10:b7:60: fb:37:7c:f8:b3:8a:b6:3e:59:df:97:ff:a4:f5:39:74:7b:ee: be:7f:25:a7:a7:18:26:87:0f:04:89:89:b9:a7:a7:15:67:0f: ad:86:46:ff:2c:77:21:ed:01:22:c1:5a:c3:b1:23:fe:f7:01: a6:c0:f4:86:02:21:ff:99:6e:7d:75:99:d3:f9:49:95:10:1b: d9:a1:ee:9e:e0:35:81:31:e6:04:e9:5f:88:19:9b:6f:25:42: 5c:66:8b:1b:22:a4:f9:a4:ff:a5:e0:17:e3:24:77:f9:9f:a6: fd:ad:f8:e1:00:9b:39:9a:cd:d9:f7:c8:62:c7:05:7c:a9:85: ec:65:01:de:fc:61:52:f9:15:80:da:64:f1:b1:78:16:16:ad: e5:32:77:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErC4OZT1QjobayVqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTNiZDIyMDUtZDdmMC00N2RhLTlmMzMtMmRhMGZjZjdiNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wJAkQbM1L5eGwydDpJHau2KR5yONudwUgLC YMYgf7p5dmz7/nsmjLtM3gQpqTA2FP4lo2JN5tfUAairvJpaknq0Y1yGKjs+4+rj Itf26+Hw/XqA5hTGscP7S5nyGBmpku497GeptvV+kXWKTteYBw0XfG+D2rRbJ1U7 dbmzpWc7po0eeEH5werxPmU6SOvtEgBJHf32U86XdUfYVxjfs7Nere4WTMKCjgQO 2a7kDsDvaCoyeEATxt0XBAy0M7FWvLNyGLvUuW4hB9xhq3g6IqAb7UWx+g6k9s2Z uR9TE9R6Gf5JIkKAmepxWg7Kki+NZb+f3/7ugzjSmLtoaVjwZQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNHPcDguhCor1xpXtfu55wqHRNjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAzcAKxSD2ofnJ5vlaXVZLbqNE/XoXxD5G+S4n9BQnk0Djdx qlXc2Ky+SYdf+diXkn+X6x8G16FPi1TAwnvulgSTXb+XfNtZL/AwvkzEEYsEkBlf eMWn5Z+tSLOf2xRcMPmni8zIdKvy3xC3YPs3fPizirY+Wd+X/6T1OXR77r5/Jaen GCaHDwSJibmnpxVnD62GRv8sdyHtASLBWsOxI/73AabA9IYCIf+Zbn11mdP5SZUQ G9mh7p7gNYEx5gTpX4gZm28lQlxmixsipPmk/6XgF+Mkd/mfpv2t+OEAmzmazdn3 yGLHBXyphexlAd78YVL5FYDaZPGxeBYWreUyd2M= -----END CERTIFICATE-----Generated at Sat Aug 23 13:56:26 2025 by rpki-client