$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa File: b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa (raw, json) Hash identifier: hBk/812HWPgHxKLfWp0qIuxdDi0+riMUwHQ2rI3VxmY= Subject key identifier: 44:2E:01:86:2E:56:2F:6E:F5:08:CD:08:19:EB:B7:CF:52:70:96:33 Certificate issuer: /CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc Certificate serial: 010D0C9F4328584A480AE4D6EC7800CD211AD000 Authority key identifier: 8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 401581 IP address blocks: 23.132.60.0/24 maxlen: 24 2602:f741::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e4:d6:ec:78:00:cd:21:1a:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=3e8dfae7-6916-412e-9644-5fc77b349f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c9:48:67:45:66:be:8c:5d:94:cc:2c:43:f0: 08:cc:e9:bb:04:31:cf:35:57:7c:53:99:41:7e:8d: 66:93:24:c0:bc:b0:19:fe:5c:19:82:d7:b8:fc:06: 8f:e6:a9:4d:f0:8c:e3:ee:c8:3c:3c:b2:e9:5d:1e: da:d2:b1:42:38:24:5a:dd:30:2a:4c:5f:6e:4c:39: 19:f4:33:3d:90:e7:48:4e:91:8e:fe:df:ae:bc:ff: be:08:49:0b:27:3f:5e:80:90:05:cd:18:84:e3:9e: d7:a5:4c:c5:a4:b3:eb:a0:2d:9d:f0:22:02:3c:81: 4e:5c:af:3c:e0:7d:52:d7:98:99:87:70:6a:a5:48: d7:f3:cc:67:6b:cb:26:a8:df:e7:43:d6:ca:8f:f7: 0e:e5:83:dc:25:47:35:a5:cf:f3:21:01:90:1b:eb: d1:19:a0:80:1f:9d:da:b6:46:1d:de:3d:96:6d:df: a1:3d:19:c8:57:2b:42:10:3e:e7:40:af:b7:f8:81: 17:ae:40:5c:02:f7:c9:44:56:66:5b:4f:d3:40:c7: fb:7c:40:42:bd:25:d4:b4:b6:ea:84:9f:71:55:45: 72:23:a0:5b:1f:ef:0d:8b:f1:7e:b0:e1:53:97:6d: 3e:db:f6:94:e3:a3:36:48:51:1b:7a:90:3f:39:71: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2E:01:86:2E:56:2F:6E:F5:08:CD:08:19:EB:B7:CF:52:70:96:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl X509v3 Authority Key Identifier: keyid:8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer sbgp-ipAddrBlock: critical IPv4: 23.132.60.0/24 IPv6: 2602:f741::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:4c:4c:cf:03:59:8d:86:46:a6:14:8c:3d:55:98:3c:37:08: 20:43:30:cc:e0:e4:49:e4:91:df:c2:fe:5d:4e:3d:61:fc:8a: 86:6e:53:eb:d3:ba:86:7d:c4:96:55:1b:4c:1c:14:e8:a2:c7: ac:c4:e9:e5:95:67:9a:52:a8:fd:19:ec:46:20:b6:14:56:e5: 38:bc:78:10:cc:dc:1e:0d:2b:24:c8:f6:0a:f6:c5:66:ad:79: c2:90:0f:a5:70:72:bd:ba:51:c2:17:da:41:58:22:b0:5a:8b: 68:69:64:f0:9d:fe:2d:49:84:b1:73:3d:ab:dd:a9:ed:10:11: 45:7e:77:2d:62:48:ea:5d:ca:e4:da:2d:b1:54:90:5e:43:c4: 9c:1c:d9:8d:6e:56:3e:fb:28:56:9a:85:6b:90:05:15:29:6f: e2:c4:2b:56:56:e1:a6:3a:6d:6f:b2:56:a4:03:da:c9:8b:37: 4c:cc:dc:14:df:7f:1a:cf:eb:1c:f4:69:74:2b:b4:49:e2:1d: 4e:ce:d2:39:da:80:a3:fb:43:f6:3c:34:ed:7d:16:26:0a:97: ee:91:14:6f:49:d6:b6:78:4f:29:38:da:ac:99:05:0d:46:37: 33:15:3f:31:79:4b:98:fb:a6:fc:0f:a5:5a:8d:02:46:57:a0: 2f:53:eb:9e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpICuTW7HgAzSEa0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI5ZGY4YmQtNDFjNS00ZjIyLWE0YmMtZjg0ZjFiYzA0 YmZjMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk M2U4ZGZhZTctNjkxNi00MTJlLTk2NDQtNWZjNzdiMzQ5ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9slIZ0VmvoxdlMwsQ/AIzOm7BDHPNVd8U5lB fo1mkyTAvLAZ/lwZgte4/AaP5qlN8Izj7sg8PLLpXR7a0rFCOCRa3TAqTF9uTDkZ 9DM9kOdITpGO/t+uvP++CEkLJz9egJAFzRiE457XpUzFpLProC2d8CICPIFOXK88 4H1S15iZh3BqpUjX88xna8smqN/nQ9bKj/cO5YPcJUc1pc/zIQGQG+vRGaCAH53a tkYd3j2Wbd+hPRnIVytCED7nQK+3+IEXrkBcAvfJRFZmW0/TQMf7fEBCvSXUtLbq hJ9xVUVyI6BbH+8Ni/F+sOFTl20+2/aU46M2SFEbepA/OXGXLwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEQuAYYuVi9u9QjNCBnrt89ScJYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMjlk ZjhiZC00MWM1LTRmMjItYTRiYy1mODRmMWJjMDRiZmMvYjdlYWMyM2QtYTljZi0z MjQyLWEwMWQtYmM4ZjUyYjU3YjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDI5ZGY4YmQtNDFjNS00ZjIyLWE0 YmMtZjg0ZjFiYzA0YmZjLzAyOWRmOGJkLTQxYzUtNGYyMi1hNGJjLWY4NGYxYmMw NGJmYy5jcmwwHwYDVR0jBBgwFoAUiu0rJxfUa0HGaiYjCIeo2I+RbXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMjlkZjhiZC00MWM1LTRmMjItYTRiYy1mODRm MWJjMDRiZmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Q8MA4E AgACMAgDBgQmAvdBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDYTEzPA1mNhkamFIw9VZg8NwggQzDM4ORJ 5JHfwv5dTj1h/IqGblPr07qGfcSWVRtMHBToosesxOnllWeaUqj9GexGILYUVuU4 vHgQzNweDSskyPYK9sVmrXnCkA+lcHK9ulHCF9pBWCKwWotoaWTwnf4tSYSxcz2r 3antEBFFfnctYkjqXcrk2i2xVJBeQ8ScHNmNblY++yhWmoVrkAUVKW/ixCtWVuGm Om1vslakA9rJizdMzNwU338az+sc9Gl0K7RJ4h1OztI52oCj+0P2PDTtfRYmCpfu kRRvSda2eE8pONqsmQUNRjczFT8xeUuY+6b8D6VajQJGV6AvU+ue -----END CERTIFICATE-----Generated at Wed Jul 9 12:03:13 2025 by rpki-client