$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa File: 4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa (raw, json) Hash identifier: 4mqyk1wCYvNEkQDR/pIyoAamR0dCLJhSsGYzL7i0gAY= Subject key identifier: 15:E7:25:47:91:B4:79:30:94:92:FB:BB:10:2A:95:28:83:27:96:1A Certificate issuer: /CN=1d7e3237-b117-456b-b736-2b3c2300bcfe Certificate serial: 010D0C9F4328584A7780887A37BF1500E8845500 Authority key identifier: 15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 395033 IP address blocks: 23.129.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:88:7a:37:bf:15:00:e8:84:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d7e3237-b117-456b-b736-2b3c2300bcfe Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=4f415fc8-d5cc-4ac8-a1b5-dd4e114382b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:58:eb:e9:74:11:2a:de:01:37:48:23:78: b7:00:d8:03:b6:57:79:19:22:ec:5c:89:ec:46:f9: 14:9c:19:f4:06:42:b0:ec:45:23:e9:69:e7:4e:e8: 00:ce:e9:1f:b5:3a:70:86:e5:04:47:0b:82:7d:ff: 04:42:78:fa:6f:be:63:f3:64:cf:27:0e:7b:26:33: d1:9b:8e:a9:a1:76:c2:61:4c:1b:3d:d2:99:dd:6b: 9d:ff:a7:7b:dc:87:14:61:4b:e5:5d:0e:23:99:05: 93:da:13:53:fd:34:37:9c:e3:da:75:b3:9c:2e:e8: 54:84:8a:c4:c0:6e:25:23:a1:bb:6f:bd:4b:74:23: 28:b8:7c:94:09:b3:a1:35:c9:49:ac:70:7b:9e:e9: 4d:bc:52:a2:2d:71:43:10:56:8b:ae:c6:fe:7b:bf: 77:49:2e:60:b8:2a:ca:b1:42:5c:5e:65:75:27:8d: f1:5a:dd:1c:ef:b0:c8:0b:06:6d:65:74:cf:2d:ed: 0a:4b:95:f0:02:b6:05:7e:85:b5:9d:41:0a:24:b1: 79:6d:f7:df:43:8b:10:d4:fa:d9:1b:2e:5c:d5:f3: f2:ef:90:ae:97:fe:98:0c:9b:6c:10:46:75:03:f1: 67:11:ea:9f:0b:dd:9a:c1:ff:b9:a5:f7:83:c9:7d: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E7:25:47:91:B4:79:30:94:92:FB:BB:10:2A:95:28:83:27:96:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl X509v3 Authority Key Identifier: keyid:15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer sbgp-ipAddrBlock: critical IPv4: 23.129.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:58:74:39:75:3e:a4:28:e3:5d:3c:d9:98:83:46:e9:d6:30: a8:c9:0b:42:c0:cb:ba:76:69:00:a1:ec:99:21:a1:b1:22:17: fe:d1:6e:0e:f9:d3:e8:36:ab:f2:0a:f3:6f:6f:2c:65:b1:36: b1:b6:c4:06:86:6e:4a:f5:00:ca:7f:87:c7:e9:6e:93:0c:17: 88:bc:b8:33:95:a5:8e:fe:8a:c1:45:97:29:1d:5f:63:db:cf: 0c:49:02:43:27:5c:0d:7e:dc:73:49:3c:f8:04:76:37:84:10: 70:a7:d1:f8:f2:87:e6:a3:24:01:c1:49:3c:4a:16:12:f2:cf: b7:e7:b8:82:98:65:f0:00:d3:8a:e4:4c:d7:76:7f:eb:e0:98: a0:7b:14:0b:97:83:1c:b6:a6:fb:a0:a1:a8:a5:59:8b:4c:70: 6a:46:b3:d8:ec:fc:26:8c:03:50:12:86:46:7a:27:05:f6:1e: 12:ba:25:f3:60:61:92:68:07:76:74:b3:21:a3:61:ee:ec:b4: 91:6c:2c:ec:c8:7a:62:2a:15:b5:9d:e2:ed:f5:f8:70:b3:f6: 30:a0:5d:b4:83:de:f9:22:4a:c0:d7:bb:13:50:e0:a7:6e:80: e4:41:aa:1c:f8:7b:c3:7f:fb:f0:50:42:90:e8:95:52:4c:a5: e0:12:2b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIh6N78VAOiEVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3ZTMyMzctYjExNy00NTZiLWI3MzYtMmIzYzIzMDBi Y2ZlMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NGY0MTVmYzgtZDVjYy00YWM4LWExYjUtZGQ0ZTExNDM4MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxtY6+l0ESreATdII3i3ANgDtld5GSLsXIns RvkUnBn0BkKw7EUj6WnnTugAzukftTpwhuUERwuCff8EQnj6b75j82TPJw57JjPR m46poXbCYUwbPdKZ3Wud/6d73IcUYUvlXQ4jmQWT2hNT/TQ3nOPadbOcLuhUhIrE wG4lI6G7b71LdCMouHyUCbOhNclJrHB7nulNvFKiLXFDEFaLrsb+e793SS5guCrK sUJcXmV1J43xWt0c77DICwZtZXTPLe0KS5XwArYFfoW1nUEKJLF5bfffQ4sQ1PrZ Gy5c1fPy75Cul/6YDJtsEEZ1A/FnEeqfC92awf+5pfeDyX18SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXnJUeRtHkwlJL7uxAqlSiDJ5YaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdl MzIzNy1iMTE3LTQ1NmItYjczNi0yYjNjMjMwMGJjZmUvNGYwM2E5YzQtOTM1MC0z ZjkzLWIxZjYtNmIxYjFmOGJkODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ3ZTMyMzctYjExNy00NTZiLWI3 MzYtMmIzYzIzMDBiY2ZlLzFkN2UzMjM3LWIxMTctNDU2Yi1iNzM2LTJiM2MyMzAw YmNmZS5jcmwwHwYDVR0jBBgwFoAUFbuRDXZjPw9pAEsQoGEs2yZxcxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdlMzIzNy1iMTE3LTQ1NmItYjczNi0yYjNj MjMwMGJjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBYdDl1PqQo41082ZiDRunWMKjJC0LAy7p2aQCh7JkhobEiF/7Rbg75 0+g2q/IK829vLGWxNrG2xAaGbkr1AMp/h8fpbpMMF4i8uDOVpY7+isFFlykdX2Pb zwxJAkMnXA1+3HNJPPgEdjeEEHCn0fjyh+ajJAHBSTxKFhLyz7fnuIKYZfAA04rk TNd2f+vgmKB7FAuXgxy2pvugoailWYtMcGpGs9js/CaMA1AShkZ6JwX2HhK6JfNg YZJoB3Z0syGjYe7stJFsLOzIemIqFbWd4u31+HCz9jCgXbSD3vkiSsDXuxNQ4Kdu gORBqhz4e8N/+/BQQpDolVJMpeASK7E= -----END CERTIFICATE-----Generated at Thu Jul 10 13:23:09 2025 by rpki-client