$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa File: df871159-6ea6-31a7-9d8c-875a3108e463.roa (raw, json) Hash identifier: QKQPxuLG6q/2lyObDJcu4YJaajUWnzirpG8F7W5HYFI= Subject key identifier: BF:A0:F0:70:CB:A4:76:A8:10:C9:FB:EC:5A:C5:34:30:6E:BA:6A:AD Certificate issuer: /CN=9725766d-5d42-4fa1-a253-80bd88dabc8d Certificate serial: 010D0C9F4328584A5FC5E520F17010DEA5CD2518 Authority key identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 25942 IP address blocks: 23.156.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e5:20:f1:70:10:de:a5:cd:25:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9725766d-5d42-4fa1-a253-80bd88dabc8d Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=f7eca705-4e00-451c-9b39-670d9d8d7138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:4c:16:99:b4:2c:12:3a:d4:27:72:cd:7b: a1:99:f1:dc:39:c1:c0:1a:43:2e:bb:4d:61:57:db: c8:2c:1f:d4:1d:ec:45:0e:1e:cd:f8:ab:08:55:ad: a5:d3:24:76:21:aa:04:df:3b:33:26:f7:e3:d7:a0: fb:c5:ad:02:79:ae:cf:3f:3f:8d:19:d5:a9:5c:40: 52:33:3e:1d:6a:b3:fe:22:b3:a4:df:32:b8:ec:40: 90:56:b0:0e:13:74:dd:19:c1:1d:ac:67:ff:b3:8f: bf:65:27:6d:fd:23:df:69:47:1e:e2:3b:56:c5:38: 59:ff:04:ae:55:78:4c:3e:e0:66:29:e3:e7:da:df: 1b:90:78:b2:3e:aa:bd:c8:de:a8:62:5d:89:58:c6: 25:19:ae:60:0f:f1:96:73:f2:62:b0:ef:eb:04:40: 49:9a:ec:eb:22:cf:d4:82:c3:fc:5f:b7:76:a6:5d: 5c:a0:b1:f7:eb:36:aa:97:50:10:53:69:76:88:2b: a3:19:95:b8:66:12:9a:d1:94:7e:a7:e3:5d:74:b8: 28:80:d2:a7:af:4c:49:d6:69:aa:98:ee:0f:95:e9: c7:b5:58:32:87:06:db:44:82:fe:0a:fb:4b:8f:20: 11:d8:02:aa:87:60:47:0e:8b:60:62:3a:85:60:b1: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A0:F0:70:CB:A4:76:A8:10:C9:FB:EC:5A:C5:34:30:6E:BA:6A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl X509v3 Authority Key Identifier: keyid:E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer sbgp-ipAddrBlock: critical IPv4: 23.156.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cf:77:68:56:54:5b:ed:c4:46:d9:76:0e:ad:43:04:8c:27: 65:3c:ad:fc:1e:37:e9:20:56:d8:60:54:d3:ec:68:22:b2:1c: 84:c5:cb:2e:7e:8e:ea:8b:51:9a:75:30:de:a1:dc:bd:00:f8: 0a:b9:8b:81:c6:9d:fa:36:da:7a:39:66:55:a8:56:a3:fd:ef: 26:6b:0a:a6:28:2d:cf:01:73:fb:ea:74:b1:2f:9b:8c:ae:43: a4:d4:bf:ad:73:94:04:b1:bb:1d:a9:6e:cf:5f:0a:d9:6c:a3: 60:c0:3f:1b:b1:41:8a:be:61:c2:8c:81:71:fc:9c:11:66:53: fd:4f:5a:72:6f:45:45:1a:5f:90:ef:f7:20:27:22:b4:f0:2a: 7f:89:66:d3:29:8b:2f:21:56:cd:98:b9:62:bc:18:0c:35:f2: cd:16:46:7f:90:5b:cf:33:9d:a3:5b:e4:9b:b4:02:19:aa:c2: 47:2f:ad:89:58:38:f0:ad:b4:72:fc:94:58:55:07:40:dd:2b: e5:f7:a2:df:ca:72:b7:d1:95:01:56:e3:0c:06:e5:03:82:1d: 66:83:c1:72:b1:4f:8c:fc:57:3b:23:4c:82:a5:9e:51:14:e4: 3b:02:5b:a1:25:d4:56:97:26:ca:26:20:f4:84:c4:d2:61:81: 54:1f:10:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeUg8XAQ3qXNJRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcyNTc2NmQtNWQ0Mi00ZmExLWEyNTMtODBiZDg4ZGFi YzhkMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZjdlY2E3MDUtNGUwMC00NTFjLTliMzktNjcwZDlkOGQ3MTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh69MFpm0LBI61CdyzXuhmfHcOcHAGkMuu01h V9vILB/UHexFDh7N+KsIVa2l0yR2IaoE3zszJvfj16D7xa0Cea7PPz+NGdWpXEBS Mz4darP+IrOk3zK47ECQVrAOE3TdGcEdrGf/s4+/ZSdt/SPfaUce4jtWxThZ/wSu VXhMPuBmKePn2t8bkHiyPqq9yN6oYl2JWMYlGa5gD/GWc/JisO/rBEBJmuzrIs/U gsP8X7d2pl1coLH36zaql1AQU2l2iCujGZW4ZhKa0ZR+p+NddLgogNKnr0xJ1mmq mO4PlenHtVgyhwbbRIL+CvtLjyAR2AKqh2BHDotgYjqFYLHkYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+g8HDLpHaoEMn77FrFNDBuumqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NzI1 NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJkODhkYWJjOGQvZGY4NzExNTktNmVhNi0z MWE3LTlkOGMtODc1YTMxMDhlNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTcyNTc2NmQtNWQ0Mi00ZmExLWEy NTMtODBiZDg4ZGFiYzhkLzk3MjU3NjZkLTVkNDItNGZhMS1hMjUzLTgwYmQ4OGRh YmM4ZC5jcmwwHwYDVR0jBBgwFoAU4V2JhHBvD8fCC3IWTsDbmgxg5RUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NzI1NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJk ODhkYWJjOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzPd2hWVFvtxEbZdg6tQwSMJ2U8rfweN+kgVthgVNPsaCKyHITFyy5+ juqLUZp1MN6h3L0A+Aq5i4HGnfo22no5ZlWoVqP97yZrCqYoLc8Bc/vqdLEvm4yu Q6TUv61zlASxux2pbs9fCtlso2DAPxuxQYq+YcKMgXH8nBFmU/1PWnJvRUUaX5Dv 9yAnIrTwKn+JZtMpiy8hVs2YuWK8GAw18s0WRn+QW88znaNb5Ju0AhmqwkcvrYlY OPCttHL8lFhVB0DdK+X3ot/KcrfRlQFW4wwG5QOCHWaDwXKxT4z8VzsjTIKlnlEU 5DsCW6El1FaXJsomIPSExNJhgVQfEIU= -----END CERTIFICATE-----Generated at Wed Jul 9 16:15:47 2025 by rpki-client