$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa File: bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa (raw, json) Hash identifier: ZNOJWlKijc/hB4O/JREFW/NFSy0Ls/h2KWvFif+MsNo= Subject key identifier: 3B:99:BC:10:B1:E3:79:B6:33:7B:91:DE:F8:E9:4E:10:53:88:78:F8 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584A6B18C8C25D2E56F97B87EB80 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa Signing time: Sat 05 Jul 2025 14:22:12 +0000 ROA not before: Sat 05 Jul 2025 14:22:12 +0000 ROA not after: Fri 03 Oct 2025 14:22:12 +0000 asID: 135074 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6b:18:c8:c2:5d:2e:56:f9:7b:87:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Jul 5 14:22:12 2025 GMT Not After : Oct 3 14:22:12 2025 GMT Subject: CN=25ec2397-79c8-4cd8-8f41-a7566807a35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:4d:22:bc:62:d4:43:c1:f5:ee:3a:fc:54: 05:0f:b3:11:fb:8a:ba:c9:35:37:d3:f1:ef:f0:da: 56:63:df:c1:ef:d0:4a:50:4c:0d:ed:a0:aa:f8:e0: 42:92:eb:ca:ba:1a:1a:ec:a5:a6:49:aa:00:17:31: ce:04:7a:60:1c:fb:ea:fe:e8:57:71:3b:d2:3a:10: fa:ae:e7:20:b9:5b:a4:1d:79:ae:10:25:8e:83:05: 7c:6a:69:ec:5a:c2:ad:ba:95:9b:4d:87:10:47:1b: 69:20:bb:fb:2a:c5:76:33:36:73:9f:18:41:e8:df: 19:8b:a6:ba:72:82:fb:bd:e3:f5:c5:f7:0d:e6:90: 83:41:7f:9b:a1:71:bb:a8:4a:8e:ea:f1:7c:94:cc: fe:83:62:db:57:4d:8a:60:b4:ce:25:65:75:f9:f5: d3:93:46:e3:9d:b5:6f:03:08:cf:5c:78:d4:a7:ef: 80:93:0f:57:ff:bd:17:77:3e:b1:65:25:bc:e7:1b: 8f:32:28:0d:67:64:c1:da:36:58:c3:83:e1:f0:64: e8:e3:aa:be:29:ea:70:4e:c0:eb:89:3d:99:2a:c1: 18:df:71:0f:7f:54:93:a1:fc:32:68:7c:60:39:1b: af:10:e8:00:c3:99:e2:02:3b:89:a3:e4:05:bc:f2: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:99:BC:10:B1:E3:79:B6:33:7B:91:DE:F8:E9:4E:10:53:88:78:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c6:46:60:d7:6a:24:f4:cf:95:46:37:7d:80:5c:68:e1:98: 70:8f:01:82:de:da:e4:76:be:6e:c6:da:81:bf:92:b4:3f:f9: ed:7e:49:bd:af:4e:8c:67:78:5d:e4:e1:06:15:f6:97:60:9d: 9b:b0:5e:59:ef:ee:bf:0a:70:88:eb:13:46:cc:b0:f9:10:0b: 68:c1:6e:ab:8f:af:60:41:e8:02:f7:14:ca:49:e2:0d:3d:ec: 52:a2:51:c4:cd:a0:73:d3:c8:72:9b:43:91:16:92:f2:9f:b6: ab:3a:07:d2:3e:47:03:df:5d:25:3c:37:c6:6c:cd:0d:95:a4: a3:6d:9d:57:dc:79:d0:30:23:7b:11:71:d6:74:78:b3:61:91: f8:cc:7a:a1:98:2f:98:c3:32:d7:56:eb:5d:fc:ab:bf:cb:53: 36:1a:5c:86:1b:5d:a4:ba:bb:18:03:bd:d1:26:59:70:2e:4b: 20:c1:a1:dd:f3:0f:28:ec:0d:1a:4f:95:db:3c:78:de:2b:7e: 3f:e6:8e:18:96:3b:41:7c:51:8b:0c:e0:8c:59:e8:d1:fc:56: fb:41:04:6b:2a:5b:29:e8:f2:1f:c4:20:92:e9:ac:62:4c:de: d2:56:9c:ac:b3:dd:b8:01:a2:bf:b4:84:0b:a2:8f:af:47:17: 5c:1c:f7:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEprGMjCXS5W+XuH64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI1MDcwNTE0MjIxMloXDTI1MTAwMzE0MjIxMlowLzEtMCsGA1UEAxMk MjVlYzIzOTctNzljOC00Y2Q4LThmNDEtYTc1NjY4MDdhMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/5NIrxi1EPB9e46/FQFD7MR+4q6yTU30/Hv 8NpWY9/B79BKUEwN7aCq+OBCkuvKuhoa7KWmSaoAFzHOBHpgHPvq/uhXcTvSOhD6 rucguVukHXmuECWOgwV8amnsWsKtupWbTYcQRxtpILv7KsV2MzZznxhB6N8Zi6a6 coL7veP1xfcN5pCDQX+boXG7qEqO6vF8lMz+g2LbV02KYLTOJWV1+fXTk0bjnbVv AwjPXHjUp++Akw9X/70Xdz6xZSW85xuPMigNZ2TB2jZYw4Ph8GTo46q+KepwTsDr iT2ZKsEY33EPf1STofwyaHxgORuvEOgAw5niAjuJo+QFvPK6oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuZvBCx43m2M3uR3vjpThBTiHj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvYmZlMWIxMmQtOWNiZi0z YmQzLWEzNTctOGJlZDVmM2UzOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXGRmDXaiT0z5VGN32AXGjhmHCPAYLe2uR2vm7G2oG/krQ/+e1+Sb2v ToxneF3k4QYV9pdgnZuwXlnv7r8KcIjrE0bMsPkQC2jBbquPr2BB6AL3FMpJ4g09 7FKiUcTNoHPTyHKbQ5EWkvKftqs6B9I+RwPfXSU8N8ZszQ2VpKNtnVfcedAwI3sR cdZ0eLNhkfjMeqGYL5jDMtdW6138q7/LUzYaXIYbXaS6uxgDvdEmWXAuSyDBod3z DyjsDRpPlds8eN4rfj/mjhiWO0F8UYsM4IxZ6NH8VvtBBGsqWyno8h/EIJLprGJM 3tJWnKyz3bgBor+0hAuij69HF1wc96g= -----END CERTIFICATE-----Generated at Thu Jul 10 09:22:57 2025 by rpki-client