$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa File: 28931be6-4e16-34bb-90eb-77f681bd268b.roa (raw, json) Hash identifier: jZiCC/upiTvdwQ+L271wljoh/5ipNyeNqx87OlkZTxA= Subject key identifier: 42:06:44:54:A1:A1:FE:39:31:A3:BF:CC:34:58:92:6E:94:B1:1B:54 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584A41F5D46C9BEE62073F7562C0 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa Signing time: Fri 20 Jun 2025 20:43:37 +0000 ROA not before: Fri 20 Jun 2025 20:43:37 +0000 ROA not after: Thu 18 Sep 2025 20:43:37 +0000 asID: 396952 IP address blocks: 23.140.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:f5:d4:6c:9b:ee:62:07:3f:75:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Jun 20 20:43:37 2025 GMT Not After : Sep 18 20:43:37 2025 GMT Subject: CN=fac83e9e-5d0b-43cd-86df-d5ae0da80f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:55:3c:9c:f6:26:a8:9d:a1:3e:26:70:03: 4e:57:50:8d:20:38:01:6f:dd:a5:d5:b9:dc:06:41: 2d:b6:ab:cf:c2:e2:c7:a8:78:5a:1c:22:e7:2a:b9: 19:f9:29:05:79:79:ee:fe:0f:86:60:df:d6:8e:08: 0f:7f:6d:48:c8:ec:76:7a:8d:59:f1:b8:dc:a0:c7: fc:87:0d:fc:da:cd:8a:21:c9:00:20:b6:88:b1:4e: 6c:55:38:cd:c0:41:8b:c4:b9:96:cb:0c:d6:a8:a5: 24:ce:af:d4:5f:27:b5:ee:01:99:b4:e2:95:bf:f7: a7:88:27:67:c3:42:08:49:11:f4:4d:ed:be:3e:a9: 74:d7:7a:29:be:9f:07:0e:4f:2e:8d:94:2f:45:eb: 06:f8:2d:64:80:a6:b8:51:9f:3b:47:57:24:41:63: 80:3d:2b:7f:10:d4:86:da:2c:a1:3d:fe:b8:44:9d: 82:4a:d1:05:53:2e:0e:f4:b8:1d:0e:50:3d:3a:65: d0:60:71:c4:39:16:32:ac:63:85:ff:04:e2:d7:44: 89:0d:28:e2:62:29:9a:65:d8:ed:1b:ec:bd:26:b8: f3:6d:47:7e:00:13:ad:e7:76:3b:cf:54:ee:e2:83: 1d:eb:93:8e:b4:3f:76:d5:fa:49:6e:ea:57:d5:92: b3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:06:44:54:A1:A1:FE:39:31:A3:BF:CC:34:58:92:6E:94:B1:1B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 23.140.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9f:c5:0e:df:81:de:3d:13:6c:e1:c3:67:61:92:9d:4e:5d: 3f:43:1d:24:96:60:2a:06:56:5d:b2:85:c2:0a:9d:7d:b9:99: b3:f3:61:ca:2f:65:8b:2d:4e:dc:7e:9e:07:26:2b:77:5a:97: 3b:78:22:6b:3a:33:62:39:2d:4f:4b:97:d0:b3:aa:85:12:bf: 3d:d8:41:64:a4:eb:96:44:a8:66:57:0a:f0:a3:c4:ce:39:59: b9:31:fb:e6:63:51:04:c0:3f:be:6b:b9:1a:5a:40:8e:cd:18: 5d:2d:e1:55:f3:27:40:6f:2c:92:1f:4d:d8:c6:4a:53:cf:cd: 6c:a0:cb:3e:ff:e1:c0:a1:01:44:e7:d1:81:42:99:58:15:c9: 32:68:d4:9c:2e:82:01:c7:57:4e:a2:88:df:6e:5c:07:0e:4c: 04:61:fd:b2:d9:c9:e3:9b:71:88:63:d3:72:fd:14:97:44:c4: af:83:7c:c6:5b:44:8d:e5:3f:cf:04:00:23:48:0a:b2:1a:eb: 65:5c:dc:35:f5:1e:50:7c:66:f3:53:dd:50:29:c8:aa:e3:b0: 50:ae:bd:22:86:03:23:1a:44:97:e5:71:cd:aa:e3:bc:bf:cf: da:0b:f8:d2:b4:67:22:0e:2a:ba:81:9a:72:5a:66:c8:cc:cd: e0:64:b9:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpB9dRsm+5iBz91YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MDYyMDIwNDMzN1oXDTI1MDkxODIwNDMzN1owLzEtMCsGA1UEAxMk ZmFjODNlOWUtNWQwYi00M2NkLTg2ZGYtZDVhZTBkYTgwZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogdVPJz2JqidoT4mcANOV1CNIDgBb92l1bnc BkEttqvPwuLHqHhaHCLnKrkZ+SkFeXnu/g+GYN/WjggPf21IyOx2eo1Z8bjcoMf8 hw382s2KIckAILaIsU5sVTjNwEGLxLmWywzWqKUkzq/UXye17gGZtOKVv/eniCdn w0IISRH0Te2+Pql013opvp8HDk8ujZQvResG+C1kgKa4UZ87R1ckQWOAPSt/ENSG 2iyhPf64RJ2CStEFUy4O9LgdDlA9OmXQYHHEORYyrGOF/wTi10SJDSjiYimaZdjt G+y9JrjzbUd+ABOt53Y7z1Tu4oMd65OOtD921fpJbupX1ZKz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIGRFShof45MaO/zDRYkm6UsRtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvMjg5MzFiZTYtNGUxNi0z NGJiLTkwZWItNzdmNjgxYmQyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKfxQ7fgd49E2zhw2dhkp1OXT9DHSSWYCoGVl2yhcIKnX25mbPzYcov ZYstTtx+ngcmK3dalzt4Ims6M2I5LU9Ll9CzqoUSvz3YQWSk65ZEqGZXCvCjxM45 Wbkx++ZjUQTAP75ruRpaQI7NGF0t4VXzJ0BvLJIfTdjGSlPPzWygyz7/4cChAUTn 0YFCmVgVyTJo1JwuggHHV06iiN9uXAcOTARh/bLZyeObcYhj03L9FJdExK+DfMZb RI3lP88EACNICrIa62Vc3DX1HlB8ZvNT3VApyKrjsFCuvSKGAyMaRJflcc2q47y/ z9oL+NK0ZyIOKrqBmnJaZsjMzeBkuQ8= -----END CERTIFICATE-----Generated at Tue Jul 1 12:26:20 2025 by rpki-client