$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa File: 50295063-44b9-3f73-8e63-136553fdd8cc.roa (raw, json) Hash identifier: vaK41lbTJyItMpVyFXCBzSMGhFamJm9GQYwyRi0z2+M= Subject key identifier: 95:0E:03:2D:5B:BD:C1:05:4E:51:FC:3F:85:3A:64:9C:58:91:B6:6A Certificate issuer: /CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Certificate serial: 010D0C9F4328584A89CE028BE0C94A6904953840 Authority key identifier: C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa Signing time: Wed 16 Jul 2025 14:21:35 +0000 ROA not before: Wed 16 Jul 2025 14:21:35 +0000 ROA not after: Tue 14 Oct 2025 14:21:35 +0000 asID: 54004 IP address blocks: 23.141.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:ce:02:8b:e0:c9:4a:69:04:95:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Validity Not Before: Jul 16 14:21:35 2025 GMT Not After : Oct 14 14:21:35 2025 GMT Subject: CN=9bab1285-3b8e-4199-adab-5477cbae0f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:62:e8:18:13:92:bf:1a:34:98:2b:ce:87: 38:c3:00:2a:a5:08:bf:9b:3b:7f:fb:b1:63:b4:29: a2:5e:ff:ea:a2:8d:8f:5a:a5:ad:ab:f8:81:9a:bf: 45:40:93:53:37:66:f5:57:31:9a:1f:3e:6f:f8:6b: ea:ce:d8:c5:b9:e7:a5:3d:66:86:2e:24:2f:7a:6a: 79:6c:83:08:1f:57:00:9c:c7:7e:b6:ed:b7:5c:4e: e5:cf:54:e3:9d:e2:2e:b7:47:25:79:c6:5f:a9:17: 3a:08:75:35:2a:c8:1b:f9:69:c6:ee:45:55:48:11: a7:af:1a:ae:15:65:12:ef:cb:5b:75:06:69:ff:ca: 3c:c3:97:78:64:c8:36:c0:33:b1:1a:0b:e1:fb:2b: 29:04:d9:d7:b4:ad:9e:d6:18:1b:e2:82:f0:f9:73: e5:79:27:f1:2c:29:3d:62:07:68:1b:17:8d:75:f3: 23:a1:43:2b:67:87:7a:73:65:9b:be:54:88:de:89: 00:60:67:f4:3d:c5:df:55:db:ab:81:06:13:08:aa: b1:8f:71:48:80:f6:57:ac:e3:91:60:51:90:4e:cd: b9:0f:93:13:1a:0e:a5:62:d5:19:b4:44:74:cf:a6: 7b:9b:92:64:85:03:21:dc:d0:20:7f:9e:8b:e6:f7: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0E:03:2D:5B:BD:C1:05:4E:51:FC:3F:85:3A:64:9C:58:91:B6:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl X509v3 Authority Key Identifier: keyid:C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer sbgp-ipAddrBlock: critical IPv4: 23.141.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e8:51:48:53:2d:3f:c8:d2:59:ec:39:3d:1e:62:21:90:67: c1:5a:43:3e:bf:bc:f8:94:11:5a:30:a9:cb:76:72:cb:43:27: bc:02:1f:6b:2f:ee:88:96:40:08:96:54:85:03:d3:53:9b:ab: 48:2f:e6:c7:1c:6b:72:d5:99:62:d0:d0:29:73:2d:cd:e1:60: b4:bf:5c:ef:8f:f3:df:bf:80:ce:f7:c3:c4:04:be:7c:97:ac: d9:3c:42:bf:b7:cf:b1:24:68:ae:77:52:a8:b7:04:d8:1a:d2: 76:0a:7a:08:06:06:9a:98:40:d5:36:22:df:c2:ee:85:45:67: b4:2a:55:2e:4b:25:36:82:eb:63:b2:a8:ef:13:52:24:b9:ac: c2:bd:a5:43:5d:2e:a6:41:38:18:c6:18:2a:eb:cb:c7:a7:55: 94:17:b1:1e:3a:6e:cd:a5:4f:3b:d5:6f:4a:e5:18:e4:30:01: 0e:07:24:c2:95:2b:d3:64:88:00:a0:4c:af:3f:6b:dd:03:07: bb:9e:9d:a8:ec:c9:f8:7c:28:19:44:3b:d6:8e:38:99:96:99: d8:c3:f8:b0:41:f1:a1:1b:92:46:56:e2:21:c5:cd:72:22:48: b1:c1:76:b2:4d:ef:e7:91:28:d7:34:b4:09:a2:fb:48:3a:49: fb:41:d8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJzgKL4MlKaQSVOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYjlmNGUtYzM2OS00ZjRjLWFhMjQtMjdmM2ZjODUx YmM1MB4XDTI1MDcxNjE0MjEzNVoXDTI1MTAxNDE0MjEzNVowLzEtMCsGA1UEAxMk OWJhYjEyODUtM2I4ZS00MTk5LWFkYWItNTQ3N2NiYWUwZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl51i6BgTkr8aNJgrzoc4wwAqpQi/mzt/+7Fj tCmiXv/qoo2PWqWtq/iBmr9FQJNTN2b1VzGaHz5v+GvqztjFueelPWaGLiQvemp5 bIMIH1cAnMd+tu23XE7lz1TjneIut0clecZfqRc6CHU1Ksgb+WnG7kVVSBGnrxqu FWUS78tbdQZp/8o8w5d4ZMg2wDOxGgvh+yspBNnXtK2e1hgb4oLw+XPleSfxLCk9 YgdoGxeNdfMjoUMrZ4d6c2WbvlSI3okAYGf0PcXfVdurgQYTCKqxj3FIgPZXrOOR YFGQTs25D5MTGg6lYtUZtER0z6Z7m5JkhQMh3NAgf56L5vebsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUOAy1bvcEFTlH8P4U6ZJxYkbZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NzBi OWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2YzZmM4NTFiYzUvNTAyOTUwNjMtNDRiOS0z ZjczLThlNjMtMTM2NTUzZmRkOGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjcwYjlmNGUtYzM2OS00ZjRjLWFh MjQtMjdmM2ZjODUxYmM1LzY3MGI5ZjRlLWMzNjktNGY0Yy1hYTI0LTI3ZjNmYzg1 MWJjNS5jcmwwHwYDVR0jBBgwFoAUwp+puLpCfjzznWu7KBSK6QNRm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NzBiOWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2Yz ZmM4NTFiYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF418MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEroUUhTLT/I0lnsOT0eYiGQZ8FaQz6/vPiUEVowqct2cstDJ7wCH2sv 7oiWQAiWVIUD01Obq0gv5scca3LVmWLQ0ClzLc3hYLS/XO+P89+/gM73w8QEvnyX rNk8Qr+3z7EkaK53Uqi3BNga0nYKeggGBpqYQNU2It/C7oVFZ7QqVS5LJTaC62Oy qO8TUiS5rMK9pUNdLqZBOBjGGCrry8enVZQXsR46bs2lTzvVb0rlGOQwAQ4HJMKV K9NkiACgTK8/a90DB7uenajsyfh8KBlEO9aOOJmWmdjD+LBB8aEbkkZW4iHFzXIi SLHBdrJN7+eRKNc0tAmi+0g6SftB2GE= -----END CERTIFICATE-----Generated at Mon Jul 21 02:13:54 2025 by rpki-client