$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ca58ae86-92af-3c91-a119-999c42288b23.roa File: ca58ae86-92af-3c91-a119-999c42288b23.roa (raw, json) Hash identifier: eFNuL+c8X9NVdiPvhEEDLiYnkNAT+dEPtGCJUJPC5eU= Subject key identifier: 68:64:32:56:5F:CE:68:EC:96:FC:25:F8:87:AB:D2:70:2F:40:CB:6F Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584A655B2BBAD74269CC0DA4D100 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ca58ae86-92af-3c91-a119-999c42288b23.roa Signing time: Thu 03 Jul 2025 13:01:04 +0000 ROA not before: Thu 03 Jul 2025 13:01:04 +0000 ROA not after: Wed 01 Oct 2025 13:01:04 +0000 asID: 11385 IP address blocks: 23.128.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:5b:2b:ba:d7:42:69:cc:0d:a4:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Jul 3 13:01:04 2025 GMT Not After : Oct 1 13:01:04 2025 GMT Subject: CN=38c7fb21-64cf-4742-a932-fd9f60ad3ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:86:b7:9f:92:a0:38:3c:41:69:e5:6b:d1: a1:bc:31:12:c5:eb:22:2a:92:43:43:aa:98:e6:42: d5:2c:b7:59:f8:a4:19:02:a1:5b:57:0a:0f:54:8f: ea:be:fe:24:89:cd:64:40:c3:ad:12:c3:44:ca:d7: 29:84:48:29:4f:cb:d7:a7:dc:39:f3:e1:e0:3c:e2: 19:c9:0a:db:7e:22:aa:67:ef:5e:2c:61:7e:37:99: b5:e4:9b:43:39:b4:a2:1d:c6:e4:48:43:79:c7:76: b8:2a:a1:b9:9f:05:c7:43:93:6b:18:2f:d8:f7:2a: 76:fb:cb:21:17:00:64:f3:c4:75:6d:f3:8b:9b:9e: a6:1c:d1:d1:27:ce:e5:18:7c:e8:7f:ad:34:4b:b9: d3:ba:66:7f:63:0b:5b:36:7b:89:93:3c:8f:d9:57: c2:d2:a1:db:c0:0d:ce:a3:53:89:30:72:fe:07:4e: d4:64:ed:57:b7:c8:a8:b6:64:dd:8a:ef:87:62:37: 22:03:61:d0:65:92:d3:9a:dd:ac:94:fa:91:ca:03: bb:5a:9f:3a:2c:10:0c:c6:a4:37:cc:48:19:ab:b3: fb:11:62:b0:34:89:cc:a6:83:76:ad:de:e5:36:7b: 4a:79:1e:83:ae:1e:a0:40:d1:64:6a:77:a4:6b:24: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:32:56:5F:CE:68:EC:96:FC:25:F8:87:AB:D2:70:2F:40:CB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ca58ae86-92af-3c91-a119-999c42288b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 23.128.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6e:d0:45:4a:2f:4e:fb:57:ed:3a:78:c2:6c:1b:a6:d4:c4: a5:3c:3b:59:d0:a8:e9:23:cd:25:a4:a5:3e:9a:6d:3a:95:63: 06:ec:10:7a:78:ed:ac:f2:88:f3:09:71:4a:02:74:cf:d7:62: ba:c1:8c:45:88:f4:26:ca:97:4f:c0:99:42:2d:85:76:ad:5f: 23:16:e4:d1:51:a1:d6:4f:1d:43:d5:91:8d:ae:32:60:3f:82: b2:8f:0f:ac:9e:47:0d:c7:fa:6e:12:ee:50:84:ca:e5:80:24: 2b:7e:78:a5:de:5b:9a:09:65:8b:6e:34:78:26:c7:10:02:fc: f8:18:31:6f:cc:3a:22:16:11:b3:00:9d:f5:8a:d7:ba:ae:e8: 01:c7:23:2d:0b:1b:7d:31:21:68:9f:79:57:df:98:d2:ec:cb: 8d:c4:23:e0:02:2c:b1:d4:98:6d:93:0b:62:b5:8a:28:52:c2: bd:cf:91:4b:15:c3:f8:f2:9d:90:42:ea:77:79:6f:be:93:aa: 3c:07:dc:bc:dc:1d:69:40:e4:d8:83:4f:1c:8d:76:c2:d0:4f: 91:66:5b:81:00:29:70:42:19:2e:1a:4d:34:d5:0f:db:dd:79: 9e:ad:b8:52:44:1a:0c:7a:95:25:c8:ea:50:9c:63:c9:49:dc: f0:b6:fa:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplWyu610JpzA2k0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk MzhjN2ZiMjEtNjRjZi00NzQyLWE5MzItZmQ5ZjYwYWQzYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUGGt5+SoDg8QWnla9GhvDESxesiKpJDQ6qY 5kLVLLdZ+KQZAqFbVwoPVI/qvv4kic1kQMOtEsNEytcphEgpT8vXp9w58+HgPOIZ yQrbfiKqZ+9eLGF+N5m15JtDObSiHcbkSEN5x3a4KqG5nwXHQ5NrGC/Y9yp2+8sh FwBk88R1bfOLm56mHNHRJ87lGHzof600S7nTumZ/YwtbNnuJkzyP2VfC0qHbwA3O o1OJMHL+B07UZO1Xt8iotmTdiu+HYjciA2HQZZLTmt2slPqRygO7Wp86LBAMxqQ3 zEgZq7P7EWKwNInMpoN2rd7lNntKeR6Drh6gQNFkanekayQvqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhkMlZfzmjslvwl+Ier0nAvQMtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvY2E1OGFlODYtOTJhZi0z YzkxLWExMTktOTk5YzQyMjg4YjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZu0EVKL077V+06eMJsG6bUxKU8O1nQqOkjzSWkpT6abTqVYwbsEHp4 7azyiPMJcUoCdM/XYrrBjEWI9CbKl0/AmUIthXatXyMW5NFRodZPHUPVkY2uMmA/ grKPD6yeRw3H+m4S7lCEyuWAJCt+eKXeW5oJZYtuNHgmxxAC/PgYMW/MOiIWEbMA nfWK17qu6AHHIy0LG30xIWifeVffmNLsy43EI+ACLLHUmG2TC2K1iihSwr3PkUsV w/jynZBC6nd5b76TqjwH3LzcHWlA5NiDTxyNdsLQT5FmW4EAKXBCGS4aTTTVD9vd eZ6tuFJEGgx6lSXI6lCcY8lJ3PC2+k4= -----END CERTIFICATE-----Generated at Wed Jul 9 01:44:57 2025 by rpki-client