$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa File: aff7f59a-de88-3f24-af6f-6932047f3217.roa (raw, json) Hash identifier: csARwV199bcINDggwP/rJMptxqDltVo/+T7sxW9lvs0= Subject key identifier: 8D:EB:33:D2:2E:B7:4A:70:E9:4D:CF:65:E6:7D:AC:11:7F:EE:36:81 Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F4328584A77808CC58EA8E58CA8EB94A0 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 33099 IP address blocks: 23.157.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8c:c5:8e:a8:e5:8c:a8:eb:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=306ed78d-8121-4950-8fcb-d08730ed254a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:16:15:0a:2a:af:57:eb:7d:1c:30:84:e3: e9:fb:07:2c:ad:c1:d1:10:13:b3:02:cd:65:ec:ae: c1:1b:25:54:5d:d7:e4:87:c3:8b:a1:a4:11:cb:6f: 86:b9:18:01:63:d4:53:09:7c:cb:3d:5a:c9:30:9c: b3:d3:cb:5a:9e:4a:d6:02:0c:f2:8c:68:68:3c:80: 27:c3:f6:47:ce:50:31:d8:2a:4b:28:b2:e7:36:3d: e9:51:6d:ae:ad:ef:3e:b5:52:39:a6:af:7c:92:1c: 86:69:9d:e2:ef:be:c9:98:60:25:4a:7f:94:11:9d: 5b:1f:cd:fc:e9:d4:91:bf:f9:d6:e6:f2:43:5d:36: b8:90:4f:0b:db:ab:0e:1f:83:ca:dd:45:60:b6:7e: d8:a3:c6:d5:05:1b:c4:dc:6e:39:2d:25:c1:e4:42: e6:8c:9f:d9:16:ac:43:03:e7:81:19:06:ff:af:22: 61:1a:fe:85:71:88:21:aa:89:05:28:c4:3f:3f:36: 2a:34:61:3d:a6:2f:65:af:2d:d6:47:8e:f7:f3:7c: 6f:da:d9:7d:20:e0:a0:53:53:32:48:a9:ef:fd:06: 26:4f:52:32:28:de:81:21:1b:a1:dd:66:61:00:39: d4:59:0f:43:51:f3:38:10:d3:ac:99:ef:95:31:b1: 7f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EB:33:D2:2E:B7:4A:70:E9:4D:CF:65:E6:7D:AC:11:7F:EE:36:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 23.157.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:dc:57:2f:cf:a2:91:81:1d:a7:17:ff:bd:22:0f:a8:dc:65: f1:97:6f:e4:22:e2:03:51:07:47:52:6c:f7:2e:dd:ba:9b:38: bc:62:b2:c4:d7:95:5e:66:7b:a7:7d:d7:f5:03:27:1c:4e:a3: 4e:e9:b3:da:b0:3b:f1:9e:a3:dd:43:46:b5:e5:86:d5:28:50: 6a:de:f6:88:0f:a0:9b:cf:57:e3:72:0b:e6:4e:ed:b2:f2:e9: 8d:06:97:51:18:34:0b:6b:b3:3d:55:58:8e:1e:29:a2:66:cc: d4:eb:18:6e:e4:2d:fc:87:42:ee:db:19:d2:5b:c4:a8:11:a4: 9e:83:82:c9:2d:c0:75:94:25:93:17:d9:bf:f6:99:ca:9a:9d: 9a:52:48:6b:48:c5:0c:06:42:a9:e1:a3:57:9a:a9:a9:c7:25: c0:be:fe:52:22:b2:65:1a:0f:42:b8:05:a9:c3:f0:24:5a:d7: 79:92:7d:ca:2d:d3:3f:9c:d5:85:7f:3f:99:86:84:30:57:b0: 33:e1:13:24:22:be:ef:c3:0e:6a:e2:60:c5:da:8b:cf:23:3e: 49:84:fd:a8:fe:ba:4e:a7:dc:1f:e3:0f:6a:f5:0c:0c:81:bd: fa:e4:3b:ac:23:ba:dc:ed:c3:64:00:bb:ef:51:55:fc:b0:05: 8b:7a:d8:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIzFjqjljKjrlKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MzA2ZWQ3OGQtODEyMS00OTUwLThmY2ItZDA4NzMwZWQyNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglUWFQoqr1frfRwwhOPp+wcsrcHREBOzAs1l 7K7BGyVUXdfkh8OLoaQRy2+GuRgBY9RTCXzLPVrJMJyz08tankrWAgzyjGhoPIAn w/ZHzlAx2CpLKLLnNj3pUW2ure8+tVI5pq98khyGaZ3i777JmGAlSn+UEZ1bH838 6dSRv/nW5vJDXTa4kE8L26sOH4PK3UVgtn7Yo8bVBRvE3G45LSXB5ELmjJ/ZFqxD A+eBGQb/ryJhGv6FcYghqokFKMQ/PzYqNGE9pi9lry3WR47383xv2tl9IOCgU1My SKnv/QYmT1IyKN6BIRuh3WZhADnUWQ9DUfM4ENOsme+VMbF/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3rM9Iut0pw6U3PZeZ9rBF/7jaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvYWZmN2Y1OWEtZGU4OC0z ZjI0LWFmNmYtNjkzMjA0N2YzMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPcVy/PopGBHacX/70iD6jcZfGXb+Qi4gNRB0dSbPcu3bqbOLxissTX lV5me6d91/UDJxxOo07ps9qwO/Geo91DRrXlhtUoUGre9ogPoJvPV+NyC+ZO7bLy 6Y0Gl1EYNAtrsz1VWI4eKaJmzNTrGG7kLfyHQu7bGdJbxKgRpJ6DgsktwHWUJZMX 2b/2mcqanZpSSGtIxQwGQqnho1eaqanHJcC+/lIismUaD0K4BanD8CRa13mSfcot 0z+c1YV/P5mGhDBXsDPhEyQivu/DDmriYMXai88jPkmE/aj+uk6n3B/jD2r1DAyB vfrkO6wjutztw2QAu+9RVfywBYt62G8= -----END CERTIFICATE-----Generated at Thu Jul 10 13:45:32 2025 by rpki-client