$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: dZ/x//w/8BABUfSOMqKmMfxiOwZzBlk4PdIYP46UTjo= Subject key identifier: 24:A9:13:2B:9B:FF:2B:E4:67:A8:19:1B:E1:7F:A0:88:C0:77:95:3F Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F4328584A66C068A7BB0655779AB64340 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:68:a7:bb:06:55:77:9a:b6:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=c14e8002-0702-4d10-8181-8b222c629a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:4d:ee:f4:30:55:d8:0c:be:97:44:4e:e6: b1:78:24:26:0d:16:8f:c8:4d:e4:c9:73:54:0b:b1: 3a:4c:ab:c9:cf:27:54:e6:d3:39:10:e2:df:b1:72: 81:1f:ea:70:4d:b9:f3:3a:6c:64:c9:fd:c9:99:54: 3d:d1:b7:ab:4e:51:f3:f6:e7:3d:3a:f6:57:fc:24: cd:17:d7:95:02:a7:02:4b:1c:6f:da:34:e8:65:e5: ef:5d:fa:b8:fd:82:6b:9d:a6:83:14:ea:36:5b:89: 1d:28:1b:82:19:64:ce:b5:39:3d:64:03:79:5c:96: 3d:fa:ad:26:1e:2b:d0:a7:c0:3e:0c:1e:ed:8f:92: df:84:ce:b5:50:90:e5:02:2d:8f:60:c1:34:4e:d1: fe:22:eb:dc:72:74:e5:33:7b:e1:54:44:96:79:69: 34:d6:44:83:2f:17:30:ab:3a:45:7c:e2:33:13:64: ea:3f:94:db:c0:c1:bc:34:02:88:c8:3a:71:8a:f5: c0:44:2d:5c:4d:0c:74:5b:c0:11:27:42:1f:e4:50: 75:3c:69:6a:5d:36:b2:94:0f:d0:b5:a9:d5:5b:c7: af:a8:1d:c3:74:85:6c:0b:ce:a7:0f:2d:12:a0:b2: 99:0e:6e:41:c8:18:65:34:67:d2:c4:88:62:40:fa: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A9:13:2B:9B:FF:2B:E4:67:A8:19:1B:E1:7F:A0:88:C0:77:95:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f6:32:38:4a:6e:76:83:b9:d2:1d:41:72:47:9f:b6:ca:6b: d9:de:89:c5:20:16:a1:bd:6b:3e:a8:25:ff:29:87:8e:46:26: 3e:9b:a8:3d:0b:89:45:24:94:05:04:38:05:21:11:8e:e2:26: 52:77:5c:07:b5:11:35:87:45:f4:d3:f6:28:fe:8f:7a:77:ed: 23:a3:b3:d6:48:0d:39:be:d1:4b:b9:26:5b:7d:a2:a6:d2:c1: 19:9b:61:30:6d:7a:be:2e:cb:9b:10:f4:00:ff:d8:f0:62:38: ad:82:38:e1:05:db:5f:f9:09:50:f6:36:87:a2:ed:85:18:88: 1e:95:cf:0f:c6:bd:0d:32:17:dd:86:ff:33:92:3c:1c:64:f5: 40:0c:c5:db:21:4c:a7:82:96:b4:64:f2:c6:52:2a:a6:28:a2: 7c:e9:97:e5:b6:97:dd:1c:c9:4d:33:2b:52:eb:5d:0b:bd:97: c9:29:e4:6d:e3:e9:4f:51:53:a5:5a:20:c7:20:16:f9:bf:a7: f6:f1:55:38:b0:f6:8c:b6:01:84:b8:85:75:1e:88:f2:38:00: d8:cf:f2:5c:6b:cf:ba:b3:fd:92:30:c8:d3:1a:ea:5b:02:70: 12:60:7b:ba:33:9f:3b:b2:aa:05:0d:f6:d1:ca:ab:fc:92:20: 0d:11:ff:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGinuwZVd5q2Q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk YzE0ZTgwMDItMDcwMi00ZDEwLTgxODEtOGIyMjJjNjI5YTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bZN7vQwVdgMvpdETuaxeCQmDRaPyE3kyXNU C7E6TKvJzydU5tM5EOLfsXKBH+pwTbnzOmxkyf3JmVQ90berTlHz9uc9OvZX/CTN F9eVAqcCSxxv2jToZeXvXfq4/YJrnaaDFOo2W4kdKBuCGWTOtTk9ZAN5XJY9+q0m HivQp8A+DB7tj5LfhM61UJDlAi2PYME0TtH+IuvccnTlM3vhVESWeWk01kSDLxcw qzpFfOIzE2TqP5TbwMG8NAKIyDpxivXARC1cTQx0W8ARJ0If5FB1PGlqXTaylA/Q tanVW8evqB3DdIVsC86nDy0SoLKZDm5ByBhlNGfSxIhiQPoQqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSpEyub/yvkZ6gZG+F/oIjAd5U/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv2MjhKbnaDudIdQXJHn7bKa9neicUgFqG9az6oJf8ph45GJj6bqD0L iUUklAUEOAUhEY7iJlJ3XAe1ETWHRfTT9ij+j3p37SOjs9ZIDTm+0Uu5Jlt9oqbS wRmbYTBter4uy5sQ9AD/2PBiOK2COOEF21/5CVD2Noei7YUYiB6Vzw/GvQ0yF92G /zOSPBxk9UAMxdshTKeClrRk8sZSKqYoonzpl+W2l90cyU0zK1LrXQu9l8kp5G3j 6U9RU6VaIMcgFvm/p/bxVTiw9oy2AYS4hXUeiPI4ANjP8lxrz7qz/ZIwyNMa6lsC cBJge7oznzuyqgUN9tHKq/ySIA0R/8E= -----END CERTIFICATE-----Generated at Fri Jul 25 06:58:13 2025 by rpki-client