$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa File: c3ce66bf-4cb7-36f4-a357-e0e778927525.roa (raw, json) Hash identifier: TG5NLcZECMsNxIpxZoWTKHdAgX2lgQpBK/gRJHlJaPY= Subject key identifier: 09:28:99:DE:FB:1A:54:E2:AC:7E:57:CF:14:B4:F6:34:37:3F:9B:E7 Certificate issuer: /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Certificate serial: 010D0C9F4328584AC01632B00CA0EEF72BCA3200 Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 1239 IP address blocks: 23.239.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:32:b0:0c:a0:ee:f7:2b:ca:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=fc5a1893-f274-4189-b858-0320fdc1652d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:76:db:18:8b:5b:78:99:59:d4:99:85:d7: a8:88:4d:0d:24:b0:68:3b:d1:26:e4:4d:ce:53:f7: ca:e7:0f:cb:f2:8c:a3:3f:4b:ed:63:86:5d:f7:04: 1a:21:93:75:2c:ef:a5:ba:ce:f9:30:41:01:35:16: 8b:54:6f:9b:5d:50:a0:5a:2e:95:6d:d6:ce:1a:40: a3:04:b8:5a:fb:81:f2:bf:8c:b7:0c:79:ed:f5:5a: 39:43:12:29:0f:3b:3b:d3:f6:e1:18:0a:ae:56:cb: d0:f0:8c:70:d1:7d:09:d6:4b:1f:cb:ed:05:7e:0d: 7b:7c:ea:d0:17:06:c7:9e:dc:97:6e:c0:79:59:b1: b1:5b:d2:13:4b:b9:9d:e1:15:e7:93:f8:d0:f3:87: ca:79:e4:ad:02:5d:7c:56:c8:c2:cb:04:1d:7d:c1: a9:e5:f4:00:16:04:d7:97:fc:7b:33:53:23:41:0a: d4:b5:ed:5c:a3:03:3e:bc:23:32:d1:95:a4:44:b9: 8b:e0:a1:ed:42:87:13:fb:ff:3b:40:cb:ed:23:2d: e0:a3:f7:a7:95:86:20:0f:c2:a3:ca:ed:46:09:11: 97:e9:e2:40:35:5d:b0:b1:fc:77:53:a1:06:19:de: 95:47:59:b4:b4:92:ca:23:fc:0f:ab:ad:57:1e:ee: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:28:99:DE:FB:1A:54:E2:AC:7E:57:CF:14:B4:F6:34:37:3F:9B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl X509v3 Authority Key Identifier: keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer sbgp-ipAddrBlock: critical IPv4: 23.239.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4e:65:60:e4:bb:51:cd:90:ad:5f:49:52:99:09:48:3d:df: 11:68:aa:c9:24:b2:de:f0:66:ee:62:9b:39:50:22:a4:5e:80: aa:e7:36:dd:19:b5:c3:d3:40:35:22:e0:7e:f3:46:2d:5a:8d: 6c:98:f7:7c:a4:30:fb:ef:f6:d8:e2:cc:e9:cb:ad:cd:9e:83: e5:57:68:6e:38:f4:32:74:80:4a:9d:c5:0c:d5:a5:21:5e:69: 87:e1:41:b5:8b:78:8b:b9:76:fc:39:e7:29:16:be:96:e3:ac: a3:a6:cc:4d:05:55:01:4a:61:85:88:06:c0:08:1d:43:29:e0: 51:62:6c:94:7d:03:5f:7b:53:6c:6f:e1:f0:87:15:fd:e3:c3: 0d:40:97:5d:04:71:4b:e2:85:dc:a4:cf:26:e7:5c:c6:63:2b: 3a:bd:7e:99:4f:37:be:ce:f5:b0:64:e1:04:01:6d:34:3e:d4: b9:13:d3:ca:c1:07:fe:bb:38:c1:62:7c:b0:2a:e9:47:1d:10: d3:1e:85:6b:08:b9:2f:06:9c:d3:7d:71:e5:46:fd:06:67:c3: cb:df:cd:3e:63:87:1f:0d:65:15:9a:be:5c:3e:d4:c2:03:08: 33:90:dc:a2:d0:72:ba:44:c5:fa:07:2a:02:96:82:4d:7f:9d: e6:4d:63:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjKwDKDu9yvKMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0 Mjg3MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZmM1YTE4OTMtZjI3NC00MTg5LWI4NTgtMDMyMGZkYzE2NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIt22xiLW3iZWdSZhdeoiE0NJLBoO9Em5E3O U/fK5w/L8oyjP0vtY4Zd9wQaIZN1LO+lus75MEEBNRaLVG+bXVCgWi6VbdbOGkCj BLha+4Hyv4y3DHnt9Vo5QxIpDzs70/bhGAquVsvQ8Ixw0X0J1ksfy+0Ffg17fOrQ FwbHntyXbsB5WbGxW9ITS7md4RXnk/jQ84fKeeStAl18VsjCywQdfcGp5fQAFgTX l/x7M1MjQQrUte1cowM+vCMy0ZWkRLmL4KHtQocT+/87QMvtIy3go/enlYYgD8Kj yu1GCRGX6eJANV2wsfx3U6EGGd6VR1m0tJLKI/wPq61XHu5bnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkomd77GlTirH5XzxS09jQ3P5vnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4 NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvYzNjZTY2YmYtNGNiNy0z NmY0LWEzNTctZTBlNzc4OTI3NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF++gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1OZWDku1HNkK1fSVKZCUg93xFoqskkst7wZu5imzlQIqRegKrnNt0Z tcPTQDUi4H7zRi1ajWyY93ykMPvv9tjizOnLrc2eg+VXaG449DJ0gEqdxQzVpSFe aYfhQbWLeIu5dvw55ykWvpbjrKOmzE0FVQFKYYWIBsAIHUMp4FFibJR9A197U2xv 4fCHFf3jww1Al10EcUvihdykzybnXMZjKzq9fplPN77O9bBk4QQBbTQ+1LkT08rB B/67OMFifLAq6UcdENMehWsIuS8GnNN9ceVG/QZnw8vfzT5jhx8NZRWavlw+1MID CDOQ3KLQcrpExfoHKgKWgk1/neZNY+g= -----END CERTIFICATE-----Generated at Thu Aug 21 07:54:46 2025 by rpki-client