$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa File: 2e52f828-a538-3e6a-b928-f02369bcab6e.roa (raw, json) Hash identifier: dJyICnfNfs9GrwB5rCChr+Os+rQzxsf6WtI3ll6hyGQ= Subject key identifier: 16:EC:95:AA:2D:65:24:14:35:63:32:8D:6B:33:18:E0:B0:3B:1F:E4 Certificate issuer: /CN=cc43c894-0822-4819-9b8f-df16b53cf6de Certificate serial: 010D0C9F4328584A64D10B9787E7F76456EDA280 Authority key identifier: 9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa Signing time: Thu 03 Jul 2025 08:22:48 +0000 ROA not before: Thu 03 Jul 2025 08:22:48 +0000 ROA not after: Wed 01 Oct 2025 08:22:48 +0000 asID: 399861 IP address blocks: 23.130.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:64:d1:0b:97:87:e7:f7:64:56:ed:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc43c894-0822-4819-9b8f-df16b53cf6de Validity Not Before: Jul 3 08:22:48 2025 GMT Not After : Oct 1 08:22:48 2025 GMT Subject: CN=89f88f4e-976d-449e-9451-66e28e5e7035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:8e:9f:cb:08:11:e1:70:50:c2:64:21:21: c9:5c:0f:c1:fc:8e:49:e3:3b:07:06:b0:d8:bc:80: ef:75:19:37:6e:f8:1f:fb:1d:0f:32:37:8e:ff:b9: ae:4c:1d:ed:33:b6:7d:d8:98:6f:14:20:2d:ba:02: 21:d4:69:50:ec:04:36:d5:bb:cf:96:87:8e:86:02: ef:71:c2:d5:fa:de:eb:ca:2c:b4:6b:4c:4d:9b:0c: 50:1a:84:a6:0a:7b:6d:1c:cf:41:0e:14:ec:f9:fb: f1:b6:9b:e7:08:8d:26:c2:76:26:85:65:8a:46:d3: 19:3a:4a:17:83:13:91:9f:d1:7a:42:c5:9b:69:1a: 69:98:39:7b:72:98:dd:91:77:2a:de:74:8c:39:b4: ff:fd:04:d4:0a:87:ce:a9:14:4c:e1:6c:6c:72:31: 38:8d:65:b2:60:7d:f0:ce:6f:6d:f6:ce:41:bf:a3: 4c:c9:db:79:1c:cc:11:b4:7a:f4:63:c6:63:1a:9e: 62:6c:1f:e3:34:e7:ab:05:7c:52:06:37:8d:05:96: 17:1c:af:39:c4:84:0d:93:66:52:51:b9:17:d7:b7: d5:21:b5:32:09:7e:36:af:54:2b:21:15:56:f5:ea: 09:f2:0a:c8:4f:b3:69:fe:c8:bc:39:35:f2:37:32: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EC:95:AA:2D:65:24:14:35:63:32:8D:6B:33:18:E0:B0:3B:1F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.crl X509v3 Authority Key Identifier: keyid:9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer sbgp-ipAddrBlock: critical IPv4: 23.130.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:da:48:6d:41:d7:30:8a:12:68:3d:75:88:fa:fa:33:cd:6a: 02:49:64:95:6d:f2:bc:6a:25:1c:66:90:88:75:14:8f:79:cf: 7c:88:dc:c8:0b:b9:1e:b1:14:2a:ee:97:77:2c:a7:43:f1:19: aa:06:d6:52:4b:c8:a3:0c:70:86:12:e0:42:73:57:4f:74:a0: f5:9a:c1:00:4b:92:4b:04:e6:88:23:ce:26:34:b3:ab:ae:e7: f9:14:76:53:97:a4:f9:6d:e8:02:64:7c:e0:35:31:4b:38:41: 74:e9:3f:7b:29:5e:ba:ac:a3:ae:e3:13:6f:43:88:8a:ff:f2: a5:4e:02:23:c4:14:4a:e7:49:4e:2e:be:70:57:35:66:cd:66: e7:e2:b8:e5:4e:11:e0:be:f8:e3:3b:66:08:6a:5e:fb:2f:6d: d8:ec:a4:a9:22:41:65:83:60:3e:48:7f:4f:56:95:73:29:5b: 62:00:26:a2:f1:67:30:b3:9c:d2:e6:47:06:36:76:ba:37:58: 0c:45:03:fc:78:09:0b:57:f4:06:33:09:66:55:87:16:11:cf: cb:5c:16:ca:68:8b:ed:d3:62:ad:64:09:3a:fc:74:82:c3:5a: cb:51:0a:82:93:9d:6c:9e:54:04:2c:1a:a9:27:27:5c:ee:19: 60:21:31:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpk0QuXh+f3ZFbtooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M0M2M4OTQtMDgyMi00ODE5LTliOGYtZGYxNmI1M2Nm NmRlMB4XDTI1MDcwMzA4MjI0OFoXDTI1MTAwMTA4MjI0OFowLzEtMCsGA1UEAxMk ODlmODhmNGUtOTc2ZC00NDllLTk0NTEtNjZlMjhlNWU3MDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN6On8sIEeFwUMJkISHJXA/B/I5J4zsHBrDY vIDvdRk3bvgf+x0PMjeO/7muTB3tM7Z92JhvFCAtugIh1GlQ7AQ21bvPloeOhgLv ccLV+t7ryiy0a0xNmwxQGoSmCnttHM9BDhTs+fvxtpvnCI0mwnYmhWWKRtMZOkoX gxORn9F6QsWbaRppmDl7cpjdkXcq3nSMObT//QTUCofOqRRM4WxscjE4jWWyYH3w zm9t9s5Bv6NMydt5HMwRtHr0Y8ZjGp5ibB/jNOerBXxSBjeNBZYXHK85xIQNk2ZS UbkX17fVIbUyCX42r1QrIRVW9eoJ8grIT7Np/si8OTXyNzJXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbslaotZSQUNWMyjWszGOCwOx/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYzQz Yzg5NC0wODIyLTQ4MTktOWI4Zi1kZjE2YjUzY2Y2ZGUvMmU1MmY4MjgtYTUzOC0z ZTZhLWI5MjgtZjAyMzY5YmNhYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2M0M2M4OTQtMDgyMi00ODE5LTli OGYtZGYxNmI1M2NmNmRlL2NjNDNjODk0LTA4MjItNDgxOS05YjhmLWRmMTZiNTNj ZjZkZS5jcmwwHwYDVR0jBBgwFoAUm3Qj0L1QiD9Fct/ObL7cdA+K9DowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYzQzYzg5NC0wODIyLTQ4MTktOWI4Zi1kZjE2 YjUzY2Y2ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPaSG1B1zCKEmg9dYj6+jPNagJJZJVt8rxqJRxmkIh1FI95z3yI3MgL uR6xFCrul3csp0PxGaoG1lJLyKMMcIYS4EJzV090oPWawQBLkksE5ogjziY0s6uu 5/kUdlOXpPlt6AJkfOA1MUs4QXTpP3spXrqso67jE29DiIr/8qVOAiPEFErnSU4u vnBXNWbNZufiuOVOEeC++OM7ZghqXvsvbdjspKkiQWWDYD5If09WlXMpW2IAJqLx ZzCznNLmRwY2dro3WAxFA/x4CQtX9AYzCWZVhxYRz8tcFspoi+3TYq1kCTr8dILD WstRCoKTnWyeVAQsGqknJ1zuGWAhMVo= -----END CERTIFICATE-----Generated at Thu Jul 3 23:39:48 2025 by rpki-client