$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa File: a9d6e5c9-bec2-395f-af08-83ce47190965.roa (raw, json) Hash identifier: WJbO+NfLgHQRUv0yFAzuee5AtBIPhIKC/khqyhWeVP4= Subject key identifier: 41:5E:2B:2D:98:4E:B4:84:94:D2:0E:0A:1F:E1:5D:DB:74:4D:2D:A4 Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa Certificate serial: 010D0C9F4328584A5E6064057A4975789665D740 Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 398759 IP address blocks: 23.165.120.0/24 maxlen: 24 2602:f9eb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:64:05:7a:49:75:78:96:65:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=7a38690f-7e16-4f7d-83f8-7a696d6bd332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:6c:d7:14:e8:44:b5:6c:90:ac:a6:fe:58: b5:e7:01:2f:cb:76:c9:76:a9:b2:52:1d:1a:f1:bc: ab:70:4d:ff:56:98:6c:2e:ea:47:1e:7f:21:c4:53: 2d:31:8a:2f:89:9a:b6:58:1f:f5:0d:d2:87:1e:2b: ff:13:e5:92:ed:18:ca:c2:e3:3e:01:b3:67:86:72: c0:dc:f8:3b:dd:aa:d0:16:f9:59:0d:a9:0c:eb:08: a6:fc:2b:86:49:b9:48:d4:db:c0:5a:a2:92:f2:9d: 26:0c:1a:61:ed:8a:28:29:dc:43:e4:3c:22:8b:86: 54:4b:58:ce:7d:dc:7a:a9:db:46:93:74:35:68:fc: e4:58:39:48:15:f3:3c:44:a2:a2:00:9b:ae:69:79: 18:33:0a:43:df:06:67:0d:7a:89:00:13:9d:04:0e: 1c:35:8d:81:27:34:e8:b9:9d:e4:e2:75:a8:b3:e3: 04:91:f9:ae:b8:03:9c:19:78:0d:1a:bb:7d:e7:bc: 44:5d:a2:97:78:84:f7:3a:a2:2e:3b:82:be:c9:e3: b0:67:ef:f7:52:a7:e9:14:85:17:2e:39:7b:9f:7f: ce:c9:88:f8:c0:34:1b:0e:5e:ba:60:a5:37:78:c9: 51:85:7f:06:67:22:17:dd:b1:47:0a:0b:5f:19:64: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:2B:2D:98:4E:B4:84:94:D2:0E:0A:1F:E1:5D:DB:74:4D:2D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl X509v3 Authority Key Identifier: keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer sbgp-ipAddrBlock: critical IPv4: 23.165.120.0/24 IPv6: 2602:f9eb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1e:fe:a9:52:4a:9f:93:2e:2a:54:5f:5a:be:f1:03:3d:0a: ab:a4:d2:10:e3:75:e9:ed:ac:a2:45:15:13:8b:d4:4e:06:bf: e8:f4:95:91:0f:62:ae:05:29:7e:af:bd:66:52:60:04:8c:8d: 8d:6b:fb:b2:cb:11:a4:17:d4:4c:d2:2f:c3:3a:9e:84:e6:85: ca:1c:89:8a:c8:76:5b:a5:d9:4f:9f:5d:7e:4c:cf:b0:c7:53: 1a:a5:22:18:16:2a:5b:7b:21:11:83:4c:04:2c:48:da:55:5a: 63:bf:ae:3e:ae:d2:f2:ab:3d:86:b4:df:58:3b:f8:6e:7f:94: 66:4d:fd:2a:35:d5:e6:60:99:5e:00:0d:e6:8e:c1:f7:04:cd: b5:25:a0:76:ca:d8:89:b4:ee:34:1b:a7:c1:ac:c5:72:40:f0: 3b:6e:9b:57:a6:dc:04:7d:4a:98:b6:c4:6b:84:93:52:c9:91: 4d:60:bb:80:32:a3:59:84:5b:43:d8:8a:b1:e1:bb:5b:37:44: cc:f5:12:eb:79:02:aa:03:5b:3a:8a:1f:25:44:56:d7:48:a8: c6:8b:55:c4:e0:b7:7e:69:ad:da:3f:02:80:d8:ae:65:9c:c4: d9:a6:6a:a7:91:6c:fd:bf:ef:1d:fa:67:9e:3c:44:d0:cd:2f: 3a:c7:ac:b4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpeYGQFekl1eJZl10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0 Y2ZhMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk N2EzODY5MGYtN2UxNi00ZjdkLTgzZjgtN2E2OTZkNmJkMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuZs1xToRLVskKym/li15wEvy3bJdqmyUh0a 8byrcE3/VphsLupHHn8hxFMtMYoviZq2WB/1DdKHHiv/E+WS7RjKwuM+AbNnhnLA 3Pg73arQFvlZDakM6wim/CuGSblI1NvAWqKS8p0mDBph7YooKdxD5Dwii4ZUS1jO fdx6qdtGk3Q1aPzkWDlIFfM8RKKiAJuuaXkYMwpD3wZnDXqJABOdBA4cNY2BJzTo uZ3k4nWos+MEkfmuuAOcGXgNGrt957xEXaKXeIT3OqIuO4K+yeOwZ+/3UqfpFIUX Ljl7n3/OyYj4wDQbDl66YKU3eMlRhX8GZyIX3bFHCgtfGWSHqwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEFeKy2YTrSElNIOCh/hXdt0TS2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3 NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvYTlkNmU1YzktYmVjMi0z OTVmLWFmMDgtODNjZTQ3MTkwOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDAzNzY0MWQtYWE5MC00ZWFiLTg2 NGUtYTczZTAzZTI0Y2ZhL2QwMzc2NDFkLWFhOTAtNGVhYi04NjRlLWE3M2UwM2Uy NGNmYS5jcmwwHwYDVR0jBBgwFoAUt7tDftH++/QIZeum6I89OeWGSBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNl MDNlMjRjZmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6V4MA4E AgACMAgDBgQmAvnrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASHv6pUkqfky4qVF9avvEDPQqrpNIQ43Xp 7ayiRRUTi9ROBr/o9JWRD2KuBSl+r71mUmAEjI2Na/uyyxGkF9RM0i/DOp6E5oXK HImKyHZbpdlPn11+TM+wx1MapSIYFipbeyERg0wELEjaVVpjv64+rtLyqz2GtN9Y O/huf5RmTf0qNdXmYJleAA3mjsH3BM21JaB2ytiJtO40G6fBrMVyQPA7bptXptwE fUqYtsRrhJNSyZFNYLuAMqNZhFtD2Iqx4btbN0TM9RLreQKqA1s6ih8lRFbXSKjG i1XE4Ld+aa3aPwKA2K5lnMTZpmqnkWz9v+8d+meePETQzS86x6y0 -----END CERTIFICATE-----Generated at Wed Jul 9 20:12:10 2025 by rpki-client