$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa File: 5fd12087-5523-3229-876f-88f686d794a9.roa (raw, json) Hash identifier: gIfbrbhFd3NZS380Whuzl1jpobGx5Ic5MMUP9hezbSg= Subject key identifier: A7:FC:9A:8B:6B:47:0B:EE:94:78:06:E8:38:11:9D:84:3F:7F:8B:4E Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F4328584A58CB0A02BE96DD4505A31F00 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 32507 IP address blocks: 23.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:0a:02:be:96:dd:45:05:a3:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=bb786dc4-65ef-4404-a54e-5ac1db1b7a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:ee:a7:21:4d:f1:f6:ac:c5:b6:5e:c5:26: 5d:4a:10:44:9e:03:e8:8f:f9:1f:40:71:d3:7a:81: 21:fa:57:0b:c3:3c:da:cc:4e:8a:9b:be:03:a6:53: 56:99:1f:01:f5:99:71:1d:d9:f0:38:66:03:a4:a2: aa:95:84:6f:0c:31:5a:d2:11:27:ec:de:2c:82:98: 26:3d:9f:d4:4b:7d:65:0f:70:2a:1f:24:eb:0f:55: 6c:29:e0:90:da:13:4a:92:44:3c:a1:ad:b9:50:6f: b5:cc:eb:a7:25:c3:85:e4:43:0e:b1:9b:d8:8d:fd: 29:85:58:07:11:14:da:19:12:17:df:1e:9b:5a:36: 27:cf:9b:81:c0:ad:58:44:14:da:1d:aa:28:ef:e7: e2:f9:cc:0e:9d:f5:e1:a2:a6:03:b3:c9:60:55:d4: 67:ce:b6:c3:21:61:1c:42:3a:5e:bd:2c:f9:39:81: da:24:02:60:91:c5:5f:fe:38:20:8e:47:3c:79:09: d4:68:e9:af:eb:f0:4a:26:ca:d4:05:54:ee:ec:d6: e5:39:05:7a:d6:63:8e:be:b5:b5:4c:99:5f:11:c6: fa:ca:a2:a4:35:1a:67:ba:8f:f0:f0:b4:69:84:a1: 04:2d:24:4c:95:b2:0b:e4:6d:4f:70:7c:23:d0:1b: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FC:9A:8B:6B:47:0B:EE:94:78:06:E8:38:11:9D:84:3F:7F:8B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv4: 23.186.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fb:94:91:c1:c8:7b:ca:5c:8d:a7:6f:24:db:9a:cc:c1:5b: 52:ff:d8:2d:f0:18:90:3e:12:3e:07:cc:06:21:a2:05:34:b9: 51:e0:cb:06:12:bb:4b:e6:b2:e0:67:ce:47:5a:e8:1b:5e:ca: 0a:bc:88:cf:22:64:60:93:d2:8f:3c:3a:e7:4d:63:1f:29:aa: 7f:28:02:63:65:a5:5b:c2:4b:fd:b5:91:a3:15:2c:b0:95:2b: 0d:84:d5:55:43:38:95:7e:6d:e7:b8:51:9d:d7:9d:da:ca:26: be:14:91:fe:99:94:27:6d:80:4c:e9:20:8f:eb:9d:a7:c4:d9: 40:13:17:8a:e0:95:65:9d:3c:31:60:6e:74:a2:36:17:5f:ae: 0f:04:f9:05:cf:9d:52:be:ed:bf:fb:81:2d:57:d4:fa:1c:51: bf:a2:56:5a:09:54:f7:71:bf:49:33:c8:f0:cd:96:15:c1:f9: 41:18:7b:e3:38:18:39:5a:1d:89:04:f3:8d:76:a1:d9:55:01: ef:f3:7f:b7:f5:c3:79:fa:65:00:e3:34:7b:83:98:85:48:0c: 05:0d:58:bb:7e:96:53:35:19:30:93:ac:e5:33:95:e1:59:5f: ba:30:1b:e5:f9:17:f4:94:1f:73:99:e0:1f:30:cc:56:41:65: 0b:22:77:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywoCvpbdRQWjHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk YmI3ODZkYzQtNjVlZi00NDA0LWE1NGUtNWFjMWRiMWI3YTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC7upyFN8fasxbZexSZdShBEngPoj/kfQHHT eoEh+lcLwzzazE6Km74DplNWmR8B9ZlxHdnwOGYDpKKqlYRvDDFa0hEn7N4sgpgm PZ/US31lD3AqHyTrD1VsKeCQ2hNKkkQ8oa25UG+1zOunJcOF5EMOsZvYjf0phVgH ERTaGRIX3x6bWjYnz5uBwK1YRBTaHaoo7+fi+cwOnfXhoqYDs8lgVdRnzrbDIWEc QjpevSz5OYHaJAJgkcVf/jggjkc8eQnUaOmv6/BKJsrUBVTu7NblOQV61mOOvrW1 TJlfEcb6yqKkNRpnuo/w8LRphKEELSRMlbIL5G1PcHwj0BuEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf8motrRwvulHgG6DgRnYQ/f4tOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvNWZkMTIwODctNTUyMy0z MjI5LTg3NmYtODhmNjg2ZDc5NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD7lJHByHvKXI2nbyTbmszBW1L/2C3wGJA+Ej4HzAYhogU0uVHgywYS u0vmsuBnzkda6Bteygq8iM8iZGCT0o88OudNYx8pqn8oAmNlpVvCS/21kaMVLLCV Kw2E1VVDOJV+bee4UZ3XndrKJr4Ukf6ZlCdtgEzpII/rnafE2UATF4rglWWdPDFg bnSiNhdfrg8E+QXPnVK+7b/7gS1X1PocUb+iVloJVPdxv0kzyPDNlhXB+UEYe+M4 GDlaHYkE8412odlVAe/zf7f1w3n6ZQDjNHuDmIVIDAUNWLt+llM1GTCTrOUzleFZ X7owG+X5F/SUH3OZ4B8wzFZBZQsid7o= -----END CERTIFICATE-----Generated at Wed Jul 9 04:01:09 2025 by rpki-client