$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/642b642f-dda0-3282-9400-562fd60f2082.roa File: 642b642f-dda0-3282-9400-562fd60f2082.roa (raw, json) Hash identifier: cxxTZqCeOJsq5mcckI1oFp5FFDCnHE1k+0jeDLVxxY4= Subject key identifier: 58:41:3A:A7:AB:CC:BB:43:6C:8D:75:45:EE:48:B9:53:24:E9:92:3C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A7A4B471EB6271A4504F91380 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/642b642f-dda0-3282-9400-562fd60f2082.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 64267 IP address blocks: 23.160.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:47:1e:b6:27:1a:45:04:f9:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=869c1262-f4b1-4c15-8bed-2a61229c1632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:0b:9c:42:cb:c3:3c:78:a5:6a:de:11:7f: 09:9a:cb:6f:89:9a:be:af:87:d4:3b:ec:b6:65:e7: e9:83:70:39:af:4e:6f:db:b6:0f:05:18:32:71:dc: 8a:a2:fe:27:49:27:4a:f7:64:c4:43:eb:10:84:b4: 36:25:3c:c6:6d:a6:a8:fb:61:9b:10:27:98:bf:e0: 10:f1:d5:b8:52:09:8c:22:ba:9c:c5:b2:69:a1:7f: ea:23:d2:d2:c9:19:db:d4:0c:d7:cf:2d:43:99:ac: fe:7b:1e:a0:b6:44:ce:fa:e3:ec:44:e0:52:44:29: a2:74:c3:fb:90:79:0e:68:e9:78:3d:49:d1:1d:9a: 18:1a:6f:04:a8:0b:c8:bc:c6:b9:72:c9:75:fd:8a: 1b:07:c2:72:57:88:22:fc:7a:12:7f:05:b2:7b:37: df:cc:48:89:1a:f8:73:45:25:70:cf:10:d4:3f:9e: a6:d6:51:7a:aa:59:26:3d:a0:e1:a0:56:34:ea:e4: c8:65:1a:b6:24:87:3b:35:68:d8:14:70:4f:30:97: 30:2d:41:dc:84:4d:09:06:1b:76:e6:c8:c2:e5:ea: 59:22:1d:59:ab:21:b3:7f:18:53:66:24:93:60:64: 67:11:fd:c7:f5:13:6e:cb:92:c4:7c:ab:a7:be:8a: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:41:3A:A7:AB:CC:BB:43:6C:8D:75:45:EE:48:B9:53:24:E9:92:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/642b642f-dda0-3282-9400-562fd60f2082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 23.160.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c2:36:91:21:72:2b:40:4b:1f:53:4a:c8:1f:26:ad:0d:ca: 87:10:f5:56:8b:42:d9:92:24:d1:31:b0:ee:a5:96:68:64:1b: 83:50:55:0d:42:24:a3:4a:29:6d:ff:1c:cd:e9:83:9a:15:ef: 92:08:15:24:7d:12:f4:d6:9f:dd:8f:1d:07:bd:6c:46:e4:b0: b9:f1:fb:86:61:9e:f7:10:10:b8:94:d7:12:73:c1:5e:6f:57: ac:6d:bc:d6:cd:b2:71:60:6f:02:7e:d7:e4:d5:f8:23:46:3b: 01:f0:25:ec:af:12:61:0f:4c:cf:b8:60:f6:f1:ca:fd:cf:93: d8:6d:4f:92:ca:22:80:79:22:0d:2e:c3:42:16:b0:b9:64:a9: 0e:3d:da:a9:84:e5:33:fc:97:1c:6f:d1:25:49:6d:95:d0:f1: 8a:d1:08:a4:1f:16:06:07:6e:bb:8e:21:16:e7:bb:1d:96:e4: bf:56:bb:0c:ab:1e:0c:a9:23:70:b3:61:13:c1:95:39:e7:db: 4e:3e:19:78:56:81:d4:48:30:34:11:5d:b3:d1:6c:81:04:f3: 1c:f2:73:f3:ab:1d:a1:19:7e:94:6e:45:5b:22:da:2f:b4:24: 06:81:99:13:9e:0c:ea:4e:5d:c4:1c:06:80:63:cf:cd:64:5f: 1e:fa:00:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0ceticaRQT5E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ODY5YzEyNjItZjRiMS00YzE1LThiZWQtMmE2MTIyOWMxNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ4LnELLwzx4pWreEX8JmstviZq+r4fUO+y2 Zefpg3A5r05v27YPBRgycdyKov4nSSdK92TEQ+sQhLQ2JTzGbaao+2GbECeYv+AQ 8dW4UgmMIrqcxbJpoX/qI9LSyRnb1AzXzy1Dmaz+ex6gtkTO+uPsROBSRCmidMP7 kHkOaOl4PUnRHZoYGm8EqAvIvMa5csl1/YobB8JyV4gi/HoSfwWyezffzEiJGvhz RSVwzxDUP56m1lF6qlkmPaDhoFY06uTIZRq2JIc7NWjYFHBPMJcwLUHchE0JBht2 5sjC5epZIh1ZqyGzfxhTZiSTYGRnEf3H9RNuy5LEfKunvoqYEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhBOqerzLtDbI11Re5IuVMk6ZI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjQyYjY0MmYtZGRhMC0z MjgyLTk0MDAtNTYyZmQ2MGYyMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6CAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjCNpEhcitASx9TSsgfJq0NyocQ9VaLQtmSJNExsO6llmhkG4NQVQ1C JKNKKW3/HM3pg5oV75IIFSR9EvTWn92PHQe9bEbksLnx+4ZhnvcQELiU1xJzwV5v V6xtvNbNsnFgbwJ+1+TV+CNGOwHwJeyvEmEPTM+4YPbxyv3Pk9htT5LKIoB5Ig0u w0IWsLlkqQ492qmE5TP8lxxv0SVJbZXQ8YrRCKQfFgYHbruOIRbnux2W5L9Wuwyr HgypI3CzYRPBlTnn204+GXhWgdRIMDQRXbPRbIEE8xzyc/OrHaEZfpRuRVsi2i+0 JAaBmROeDOpOXcQcBoBjz81kXx76ALY= -----END CERTIFICATE-----Generated at Tue Jul 22 19:21:35 2025 by rpki-client