$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa File: d823da31-dfeb-3482-8118-efd174a432a0.roa (raw, json) Hash identifier: Zdm9LNF8hpY1MM6o86a2PMSY9xRkeGu4WYvDc5y6yfM= Subject key identifier: 42:67:0B:57:3A:83:D4:26:0A:7A:5C:33:01:88:92:08:69:65:FA:82 Certificate issuer: /CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Certificate serial: 010D0C9F4328584A4AD599C080F7E0B37563AC80 Authority key identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 400402 IP address blocks: 23.134.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:99:c0:80:f7:e0:b3:75:63:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=14a3f507-dce8-47fa-bfcf-3af30ac61a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:79:d4:11:8f:b7:7a:cb:f8:7b:04:1f:a8: 17:64:3a:74:8f:6e:47:00:d9:af:22:3f:cb:df:c7: fd:e2:72:0a:d1:69:fb:8e:2c:35:d4:1a:37:79:cb: 74:0a:38:72:78:0a:15:2a:4a:e2:17:83:f4:36:81: d3:9e:9f:1b:f0:22:21:14:ac:a7:07:ff:ea:1a:2b: 05:6b:3a:45:fc:07:9e:47:d0:2e:81:db:f4:40:e5: 8b:0e:d7:a7:7d:d7:9b:74:c7:35:84:ee:b0:18:4a: 70:99:51:44:d7:78:55:60:0c:e1:1f:18:06:8d:1e: dc:5d:12:e3:ea:30:29:e0:23:29:17:67:b3:24:84: 5b:f2:24:8c:78:d3:e1:c4:8f:ba:d8:56:96:3a:eb: dc:85:38:17:3c:ab:f0:92:dc:92:8a:54:c7:be:00: 35:d4:e8:97:63:02:10:e9:49:52:10:93:70:13:0b: 2c:34:01:83:ee:7b:c4:c7:5f:73:01:d3:5b:3f:15: fc:68:da:40:64:3f:2b:d0:32:fe:8d:6d:7f:6b:3f: db:a1:9e:5a:36:02:a8:31:74:de:a7:b2:78:e3:7a: 78:bd:7a:f4:5d:1e:4f:c1:fe:52:71:82:df:d8:ac: 67:61:b2:1f:20:86:aa:92:10:af:5c:aa:94:50:ff: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:67:0B:57:3A:83:D4:26:0A:7A:5C:33:01:88:92:08:69:65:FA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl X509v3 Authority Key Identifier: keyid:DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer sbgp-ipAddrBlock: critical IPv4: 23.134.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:25:1e:6a:df:bd:85:89:f9:3d:62:6a:60:d1:3e:8c:14:2d: 59:a3:a8:76:81:5b:f2:a7:f2:1e:97:b0:04:94:c8:01:a7:42: be:1c:f0:63:e6:7a:46:f9:d9:f0:c3:86:66:71:dc:c3:f1:b8: 45:49:0b:0b:1d:8f:79:be:c4:3b:5d:3e:cd:40:c6:dc:da:33: 19:02:97:69:42:26:10:d1:b9:bf:01:32:98:72:d2:cf:52:17: 9f:4a:0e:f6:43:6b:64:54:2e:9e:86:53:10:ce:04:a7:7c:a1: 8d:3d:af:21:ab:72:54:06:eb:ab:97:3e:c2:93:4e:1f:ed:9e: fa:ed:c8:37:8e:1a:6b:b2:ae:cc:c4:05:09:2f:c9:c9:59:77: 76:12:6f:0f:1b:d0:c5:2a:3b:1a:2d:6a:df:67:31:85:a8:02: 7e:9f:03:04:5b:89:e3:5e:13:3b:16:07:ee:d3:63:64:51:69: 38:a3:e4:6d:10:19:12:ce:43:69:74:6b:47:9c:44:09:c4:e6: 96:1f:91:a3:c6:4a:ca:44:9b:96:a4:01:4b:0b:77:22:a5:51: df:80:05:6f:00:fe:0f:0d:b2:69:23:b5:63:7c:36:83:71:c8: c9:34:24:19:69:89:fb:bf:f7:d7:cf:77:50:7b:87:ad:f7:b5: 01:2a:39:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZnAgPfgs3VjrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhYTViMjItYmRhMi00MTQxLThiZGYtOThhNzg2OTZk ZDAzMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTRhM2Y1MDctZGNlOC00N2ZhLWJmY2YtM2FmMzBhYzYxYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrl51BGPt3rL+HsEH6gXZDp0j25HANmvIj/L 38f94nIK0Wn7jiw11Bo3ect0CjhyeAoVKkriF4P0NoHTnp8b8CIhFKynB//qGisF azpF/AeeR9Augdv0QOWLDtenfdebdMc1hO6wGEpwmVFE13hVYAzhHxgGjR7cXRLj 6jAp4CMpF2ezJIRb8iSMeNPhxI+62FaWOuvchTgXPKvwktySilTHvgA11OiXYwIQ 6UlSEJNwEwssNAGD7nvEx19zAdNbPxX8aNpAZD8r0DL+jW1/az/boZ5aNgKoMXTe p7J443p4vXr0XR5Pwf5ScYLf2KxnYbIfIIaqkhCvXKqUUP+G2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJnC1c6g9QmCnpcMwGIkghpZfqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGFh NWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3ODY5NmRkMDMvZDgyM2RhMzEtZGZlYi0z NDgyLTgxMTgtZWZkMTc0YTQzMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRhYTViMjItYmRhMi00MTQxLThi ZGYtOThhNzg2OTZkZDAzLzc0YWE1YjIyLWJkYTItNDE0MS04YmRmLTk4YTc4Njk2 ZGQwMy5jcmwwHwYDVR0jBBgwFoAU3qp9sUUjQBMBvni32v/Oz8/U868wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NGFhNWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3 ODY5NmRkMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8lHmrfvYWJ+T1iamDRPowULVmjqHaBW/Kn8h6XsASUyAGnQr4c8GPm ekb52fDDhmZx3MPxuEVJCwsdj3m+xDtdPs1AxtzaMxkCl2lCJhDRub8BMphy0s9S F59KDvZDa2RULp6GUxDOBKd8oY09ryGrclQG66uXPsKTTh/tnvrtyDeOGmuyrszE BQkvyclZd3YSbw8b0MUqOxotat9nMYWoAn6fAwRbieNeEzsWB+7TY2RRaTij5G0Q GRLOQ2l0a0ecRAnE5pYfkaPGSspEm5akAUsLdyKlUd+ABW8A/g8NsmkjtWN8NoNx yMk0JBlpifu/99fPd1B7h633tQEqOSI= -----END CERTIFICATE-----Generated at Mon Jul 21 12:31:59 2025 by rpki-client