$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4b4873a3-9480-3406-97d8-0a03d91367db.roa File: 4b4873a3-9480-3406-97d8-0a03d91367db.roa (raw, json) Hash identifier: OfSGTuGCLpUGBo8oby0AJEZxYSeM76fQfw7TUL7yeCw= Subject key identifier: 84:BA:08:F6:A9:8C:34:11:ED:D7:CA:BD:54:F3:0B:4C:29:DE:81:D5 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A14EC15BE475BC505B24B0D40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4b4873a3-9480-3406-97d8-0a03d91367db.roa Signing time: Wed 04 Jun 2025 17:32:37 +0000 ROA not before: Wed 04 Jun 2025 17:32:37 +0000 ROA not after: Tue 02 Sep 2025 17:32:37 +0000 asID: 3257 IP address blocks: 23.231.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:ec:15:be:47:5b:c5:05:b2:4b:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jun 4 17:32:37 2025 GMT Not After : Sep 2 17:32:37 2025 GMT Subject: CN=e75cef7f-9423-436b-a81e-8fdfccec4382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:5a:b7:a8:4a:cc:4a:00:ef:a9:e9:d9:0d: b7:e8:0f:ba:c1:08:04:53:46:ae:e9:95:0b:50:c3: 85:4c:c0:09:8e:07:58:e4:6b:ee:6d:8d:33:64:1a: da:24:bc:3a:17:e3:82:41:37:c4:40:7e:62:72:90: a1:6d:a7:8e:ee:72:2d:dc:95:90:c1:3c:88:80:12: 1f:e6:c8:be:89:41:94:a1:07:a6:46:86:5d:c4:7d: 29:f0:c3:e3:c9:18:66:81:23:53:dc:56:3c:b2:83: d1:d1:46:c4:4d:d8:21:da:95:5f:e4:d3:36:5a:de: 40:b1:86:3b:72:7a:b6:34:bc:47:c5:0b:3e:6b:c4: f9:9d:f6:51:13:14:83:22:6d:73:e0:c9:0c:a4:90: 4c:32:6a:ce:25:26:94:d9:d6:b0:61:da:aa:10:7f: 28:b5:21:2a:25:a6:3d:21:6b:87:f9:23:66:a3:03: 32:0f:29:0a:91:fa:50:f6:04:6e:0b:50:9a:ec:73: 3f:00:71:08:05:65:53:c9:fe:58:50:49:bf:13:c5: ac:f5:e7:d5:a0:5e:f5:3d:dd:9a:60:cb:63:e8:43: df:af:7e:f5:fe:a2:af:94:c5:36:07:6d:5b:18:1a: 38:c9:a8:cb:33:23:25:21:d6:b8:73:25:d4:6b:8d: e9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:08:F6:A9:8C:34:11:ED:D7:CA:BD:54:F3:0B:4C:29:DE:81:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4b4873a3-9480-3406-97d8-0a03d91367db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:68:70:e3:96:85:f0:e9:f8:06:f9:22:00:cb:c2:0d:40:7a: d7:23:cc:97:0e:fd:9f:a8:cc:e7:26:9a:ff:91:5b:c6:3d:72: d5:f9:24:99:59:f4:11:c5:52:6f:cc:33:b0:6a:99:4d:fa:8c: 8f:63:de:76:88:51:0e:a5:d5:37:c7:62:b1:73:bc:a2:23:43: 40:74:28:43:e9:08:d1:77:b9:76:87:c5:0e:05:7c:44:dd:0e: 54:41:5b:68:29:a4:0f:bc:1d:83:91:37:a3:06:b7:0d:9f:b1: de:18:be:8b:72:77:86:4e:71:8d:ef:55:d7:93:7c:04:3c:e9: 0e:65:92:1e:51:5d:31:b4:ea:f6:cf:59:8c:15:9d:0d:a9:3d: 4e:bc:24:80:47:f4:8a:1e:9f:13:3b:43:f9:11:d4:28:32:94: 3e:3b:eb:ad:d7:c6:0b:1b:66:36:ca:cc:89:b7:1d:9f:5b:e2: ba:59:b4:ae:0d:df:84:64:6f:b6:c2:6f:e0:0d:97:fb:72:01: fa:4e:18:ff:a5:4e:07:c5:db:ae:5a:4e:09:60:12:af:1c:f3: cc:b6:60:83:3c:b7:11:d4:55:97:ce:94:36:6d:07:08:72:25: 7b:cd:1a:b7:8c:61:0d:a6:1f:7c:f9:85:8f:97:81:5d:40:3c: df:90:97:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoU7BW+R1vFBbJLDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDYwNDE3MzIzN1oXDTI1MDkwMjE3MzIzN1owLzEtMCsGA1UEAxMk ZTc1Y2VmN2YtOTQyMy00MzZiLWE4MWUtOGZkZmNjZWM0MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrRat6hKzEoA76np2Q236A+6wQgEU0au6ZUL UMOFTMAJjgdY5GvubY0zZBraJLw6F+OCQTfEQH5icpChbaeO7nIt3JWQwTyIgBIf 5si+iUGUoQemRoZdxH0p8MPjyRhmgSNT3FY8soPR0UbETdgh2pVf5NM2Wt5AsYY7 cnq2NLxHxQs+a8T5nfZRExSDIm1z4MkMpJBMMmrOJSaU2dawYdqqEH8otSEqJaY9 IWuH+SNmowMyDykKkfpQ9gRuC1Ca7HM/AHEIBWVTyf5YUEm/E8Ws9efVoF71Pd2a YMtj6EPfr371/qKvlMU2B21bGBo4yajLMyMlIda4cyXUa43p1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS6CPapjDQR7dfKvVTzC0wp3oHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNGI0ODczYTMtOTQ4MC0z NDA2LTk3ZDgtMGEwM2Q5MTM2N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ciMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9ocOOWhfDp+Ab5IgDLwg1AetcjzJcO/Z+ozOcmmv+RW8Y9ctX5JJlZ 9BHFUm/MM7BqmU36jI9j3naIUQ6l1TfHYrFzvKIjQ0B0KEPpCNF3uXaHxQ4FfETd DlRBW2gppA+8HYORN6MGtw2fsd4Yvotyd4ZOcY3vVdeTfAQ86Q5lkh5RXTG06vbP WYwVnQ2pPU68JIBH9IoenxM7Q/kR1CgylD47663XxgsbZjbKzIm3HZ9b4rpZtK4N 34Rkb7bCb+ANl/tyAfpOGP+lTgfF265aTglgEq8c88y2YIM8txHUVZfOlDZtBwhy JXvNGreMYQ2mH3z5hY+XgV1APN+Ql9U= -----END CERTIFICATE-----Generated at Fri Jun 6 14:22:29 2025 by rpki-client