$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/ccf5de24-f0d4-3d95-a48f-edb9492a4f0f.roa File: ccf5de24-f0d4-3d95-a48f-edb9492a4f0f.roa (raw, json) Hash identifier: vjen5z2P8xH/RbSZ0DR5xII86y6TuTSHa4+d0+Zr08U= Subject key identifier: B7:8B:6A:9D:A5:5C:DB:EB:87:C1:08:97:CD:97:58:11:EC:C9:EB:54 Certificate issuer: /CN=aed13af4-fb22-4782-93c3-62972bccdb12 Certificate serial: 010D0C9F4328584A612B0230E1EA2EC1013B5700 Authority key identifier: 51:D4:F9:96:8E:59:02:A5:4E:4F:A5:8E:6A:7E:14:33:45:11:FF:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/ccf5de24-f0d4-3d95-a48f-edb9492a4f0f.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 149513 IP address blocks: 23.174.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/aed13af4-fb22-4782-93c3-62972bccdb12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/aed13af4-fb22-4782-93c3-62972bccdb12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:02:30:e1:ea:2e:c1:01:3b:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed13af4-fb22-4782-93c3-62972bccdb12 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=42cf3764-95cb-4549-87c3-bbe9bf4a3a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:40:a3:09:ad:43:67:a3:57:88:da:b3:2f:aa: f5:69:6f:6f:23:f0:70:b6:77:1d:b9:32:67:70:40: 3d:18:f9:92:3b:51:84:75:fa:da:ad:6b:d6:6c:6e: 4d:e0:8b:f9:2f:cb:dc:8a:e4:47:c5:7c:2f:aa:2e: a5:8d:e2:b7:43:91:06:9f:58:89:2b:cd:b3:69:03: 82:6d:7d:17:12:b5:e0:88:30:a7:bc:ea:54:52:85: 33:ab:66:0b:d7:cc:5d:3e:c3:ac:5c:b1:74:8c:67: 49:3b:28:5b:7e:ef:80:44:65:32:f0:b4:38:57:39: a7:ea:66:bb:a7:56:f5:dd:41:00:b6:f8:96:5b:4d: d0:fb:6c:84:cd:56:48:03:53:70:43:71:b4:68:d5: d0:5e:fe:ba:b9:7f:31:61:58:15:3c:54:8f:d9:48: cb:62:41:24:e9:5f:48:a0:6d:53:db:09:bc:28:db: 3b:df:7e:fb:29:79:24:6a:86:32:17:53:71:8b:0e: df:3c:11:6b:02:82:b2:db:44:52:21:26:b5:da:5e: f7:59:9c:1b:29:34:9c:ec:a6:46:70:ba:9d:b2:3b: 8c:6c:d6:c2:2f:73:0a:1c:ed:f7:9a:ca:e6:55:5e: 12:03:84:dc:b3:2b:a5:73:77:b9:a2:c7:bb:7f:74: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8B:6A:9D:A5:5C:DB:EB:87:C1:08:97:CD:97:58:11:EC:C9:EB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/ccf5de24-f0d4-3d95-a48f-edb9492a4f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/aed13af4-fb22-4782-93c3-62972bccdb12.crl X509v3 Authority Key Identifier: keyid:51:D4:F9:96:8E:59:02:A5:4E:4F:A5:8E:6A:7E:14:33:45:11:FF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12.cer sbgp-ipAddrBlock: critical IPv4: 23.174.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:25:95:58:d5:a8:25:14:b9:d8:78:f4:94:1f:4e:92:b8:a0: 4f:df:8b:3a:56:b0:f7:ab:1e:3d:63:18:f1:48:b8:11:17:de: 25:ec:b6:f3:09:38:4f:4e:25:4c:e4:8e:61:6a:a8:36:43:a9: 9e:2b:ea:9d:d7:b7:c6:ed:60:41:e9:21:20:cf:82:72:a9:11: 79:a1:5c:12:ef:25:3a:0e:ed:38:d2:42:9a:13:c4:e3:8a:7f: 12:f0:67:aa:75:a2:72:87:5d:e9:c3:ec:01:dc:63:06:d0:5e: 73:19:73:84:31:01:f1:e8:ee:61:c4:4d:eb:78:af:b9:f4:ad: fd:10:75:0d:c0:29:0f:d2:d0:aa:dd:02:41:fc:5d:1b:24:89: c1:ec:53:33:f6:18:13:9c:5e:e1:80:7b:d4:6c:31:4c:16:a0: 71:52:c0:82:ca:0d:08:5e:5d:d4:e4:55:ea:97:7c:9a:a3:47: 99:b6:67:ef:f5:6f:e8:c4:5f:6f:d4:7f:41:73:c5:9a:c8:db: 2f:a3:87:d8:00:7f:19:1c:67:90:83:dd:84:64:44:18:32:c3: c0:31:7e:97:df:a6:93:8d:d8:62:4c:5e:11:cd:82:a0:f6:88: 05:b4:9c:49:54:bd:fb:57:18:83:ab:0b:00:65:23:72:fd:18: a8:33:d3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKwIw4eouwQE7VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVkMTNhZjQtZmIyMi00NzgyLTkzYzMtNjI5NzJiY2Nk YjEyMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NDJjZjM3NjQtOTVjYi00NTQ5LTg3YzMtYmJlOWJmNGEzYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUCjCa1DZ6NXiNqzL6r1aW9vI/BwtncduTJn cEA9GPmSO1GEdfrarWvWbG5N4Iv5L8vciuRHxXwvqi6ljeK3Q5EGn1iJK82zaQOC bX0XErXgiDCnvOpUUoUzq2YL18xdPsOsXLF0jGdJOyhbfu+ARGUy8LQ4Vzmn6ma7 p1b13UEAtviWW03Q+2yEzVZIA1NwQ3G0aNXQXv66uX8xYVgVPFSP2UjLYkEk6V9I oG1T2wm8KNs73377KXkkaoYyF1Nxiw7fPBFrAoKy20RSISa12l73WZwbKTSc7KZG cLqdsjuMbNbCL3MKHO33msrmVV4SA4Tcsyulc3e5ose7f3RS3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeLap2lXNvrh8EIl82XWBHsyetUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZWQx M2FmNC1mYjIyLTQ3ODItOTNjMy02Mjk3MmJjY2RiMTIvY2NmNWRlMjQtZjBkNC0z ZDk1LWE0OGYtZWRiOTQ5MmE0ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWVkMTNhZjQtZmIyMi00NzgyLTkz YzMtNjI5NzJiY2NkYjEyL2FlZDEzYWY0LWZiMjItNDc4Mi05M2MzLTYyOTcyYmNj ZGIxMi5jcmwwHwYDVR0jBBgwFoAUUdT5lo5ZAqVOT6WOan4UM0UR/wAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZWQxM2FmNC1mYjIyLTQ3ODItOTNjMy02Mjk3 MmJjY2RiMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF65oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8llVjVqCUUudh49JQfTpK4oE/fizpWsPerHj1jGPFIuBEX3iXstvMJ OE9OJUzkjmFqqDZDqZ4r6p3Xt8btYEHpISDPgnKpEXmhXBLvJToO7TjSQpoTxOOK fxLwZ6p1onKHXenD7AHcYwbQXnMZc4QxAfHo7mHETet4r7n0rf0QdQ3AKQ/S0Krd AkH8XRskicHsUzP2GBOcXuGAe9RsMUwWoHFSwILKDQheXdTkVeqXfJqjR5m2Z+/1 b+jEX2/Uf0FzxZrI2y+jh9gAfxkcZ5CD3YRkRBgyw8AxfpffppON2GJMXhHNgqD2 iAW0nElUvftXGIOrCwBlI3L9GKgz000= -----END CERTIFICATE-----Generated at Tue Jul 8 23:46:23 2025 by rpki-client