$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa File: 6f593c08-3653-34e9-8e4d-e176f1d87536.roa (raw, json) Hash identifier: aFZQKwj4ILpe0Ni4NX+5+3nDnrRM9IrFWh+o+LTyj9Q= Subject key identifier: 21:11:CC:F9:B1:43:AB:B3:18:C0:30:B3:5A:1E:C5:8F:01:D0:17:50 Certificate issuer: /CN=b673aad8-2248-407c-90e8-0781473d6616 Certificate serial: 010D0C9F4328584A71EB27D14253ECAB49F77980 Authority key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 16509 IP address blocks: 23.138.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:27:d1:42:53:ec:ab:49:f7:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b673aad8-2248-407c-90e8-0781473d6616 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=043d55d9-96ce-49c4-8d6b-355cf7b7e589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:15:ef:06:85:57:3e:84:df:f9:c0:a3:c4: ac:19:32:2a:14:b7:b3:11:b2:95:bc:1a:0e:97:8f: a4:bb:9e:34:32:09:dc:c6:89:99:7a:4d:a1:7c:5a: db:c3:86:bb:51:05:49:bd:18:5b:d5:a0:06:39:c8: 06:c7:96:b8:1e:7a:bf:d0:b2:eb:c2:d0:76:78:e8: 2e:bc:f7:1c:fd:4d:93:03:3b:01:37:5c:72:4b:b2: 58:64:3c:b5:16:73:c4:76:be:6d:c5:5b:01:db:20: 06:af:76:ee:43:22:c4:7a:2f:e1:d8:a8:30:ee:29: 7e:b9:15:7d:45:73:fa:79:8c:c9:85:9b:0a:a1:ff: ba:45:8f:a4:e8:53:e8:84:f8:3c:fe:f1:99:ff:fb: 64:a5:64:c3:5f:18:91:29:fb:a1:cf:f3:bc:e7:16: bf:bf:e7:4a:31:1a:12:3d:d8:57:b0:32:60:b2:7e: bb:25:6b:21:87:5c:da:90:52:c6:41:06:17:46:ba: 86:5e:c8:78:a6:7d:6f:18:61:bb:90:9f:24:7d:0b: ed:b4:a7:47:ac:17:eb:c5:ca:8c:f8:a6:1b:83:7f: f7:6b:a4:7a:7b:62:c3:d2:91:32:fa:4c:30:9a:6c: 22:c4:cc:d7:2f:f9:05:9c:34:dd:0b:90:3c:a3:28: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:CC:F9:B1:43:AB:B3:18:C0:30:B3:5A:1E:C5:8F:01:D0:17:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl X509v3 Authority Key Identifier: keyid:F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer sbgp-ipAddrBlock: critical IPv4: 23.138.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9a:9b:5f:15:b0:9d:a4:e1:05:7f:ca:0d:23:68:97:52:24: 5f:db:e5:d2:83:e4:f6:fd:5e:58:da:82:1f:58:d5:ee:10:14: 3f:19:9c:3b:af:b5:be:b5:11:59:cf:9c:f6:28:bb:97:6a:f9: 6e:48:ab:ec:fd:8e:74:62:0b:9f:53:90:38:a6:07:b3:9e:d5: 0f:09:9c:e8:5a:9a:41:0a:f4:49:fc:f3:63:04:ad:3c:70:a7: e3:47:51:83:28:56:5a:a2:31:2d:01:46:ba:a5:c9:56:70:31: 99:61:0b:1e:e2:56:26:05:1b:4e:90:73:a1:a9:64:d6:30:7f: 7a:2d:ca:7a:83:54:7f:59:f2:19:a4:d6:65:18:fe:6d:49:9d: 9e:b0:ac:6b:f2:f2:bc:66:dc:70:9d:fb:9f:29:c1:27:c9:0f: 44:50:6d:8a:ba:38:fa:b6:39:88:b8:33:ef:16:05:d0:6f:cf: f8:42:1e:ad:9b:f9:37:58:8f:0d:64:ba:ca:63:5d:0c:76:a1: c2:f1:3c:66:c0:84:08:0d:77:f0:ab:5a:fb:89:3c:4a:76:7e: f1:4a:97:75:74:99:96:bd:48:fd:0f:5f:81:ae:12:f0:c1:05: 7b:32:83:25:ae:7a:68:d4:78:68:93:7f:9c:c3:fa:b2:35:24: 05:03:ea:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6yfRQlPsq0n3eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY3M2FhZDgtMjI0OC00MDdjLTkwZTgtMDc4MTQ3M2Q2 NjE2MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MDQzZDU1ZDktOTZjZS00OWM0LThkNmItMzU1Y2Y3YjdlNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WwV7waFVz6E3/nAo8SsGTIqFLezEbKVvBoO l4+ku540MgncxomZek2hfFrbw4a7UQVJvRhb1aAGOcgGx5a4Hnq/0LLrwtB2eOgu vPcc/U2TAzsBN1xyS7JYZDy1FnPEdr5txVsB2yAGr3buQyLEei/h2Kgw7il+uRV9 RXP6eYzJhZsKof+6RY+k6FPohPg8/vGZ//tkpWTDXxiRKfuhz/O85xa/v+dKMRoS PdhXsDJgsn67JWshh1zakFLGQQYXRrqGXsh4pn1vGGG7kJ8kfQvttKdHrBfrxcqM +KYbg3/3a6R6e2LD0pEy+kwwmmwixMzXL/kFnDTdC5A8oyhBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCERzPmxQ6uzGMAws1oexY8B0BdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iNjcz YWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgxNDczZDY2MTYvNmY1OTNjMDgtMzY1My0z NGU5LThlNGQtZTE3NmYxZDg3NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjY3M2FhZDgtMjI0OC00MDdjLTkw ZTgtMDc4MTQ3M2Q2NjE2L2I2NzNhYWQ4LTIyNDgtNDA3Yy05MGU4LTA3ODE0NzNk NjYxNi5jcmwwHwYDVR0jBBgwFoAU+f39vaYd7kfsQ5VBQQC2fQpoVKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iNjczYWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgx NDczZDY2MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKam18VsJ2k4QV/yg0jaJdSJF/b5dKD5Pb9Xljagh9Y1e4QFD8ZnDuv tb61EVnPnPYou5dq+W5Iq+z9jnRiC59TkDimB7Oe1Q8JnOhamkEK9En882MErTxw p+NHUYMoVlqiMS0BRrqlyVZwMZlhCx7iViYFG06Qc6GpZNYwf3otynqDVH9Z8hmk 1mUY/m1JnZ6wrGvy8rxm3HCd+58pwSfJD0RQbYq6OPq2OYi4M+8WBdBvz/hCHq2b +TdYjw1kuspjXQx2ocLxPGbAhAgNd/CrWvuJPEp2fvFKl3V0mZa9SP0PX4GuEvDB BXsygyWuemjUeGiTf5zD+rI1JAUD6ks= -----END CERTIFICATE-----Generated at Wed Jul 9 16:47:26 2025 by rpki-client