$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa File: 0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa (raw, json) Hash identifier: /6KG+Z9LfeVteUYUgGMT+kLx/X1ks+c5eM4+lCJOzdw= Subject key identifier: DF:41:46:56:14:95:61:B4:31:84:F1:CB:DE:3B:7D:A8:58:4C:D7:06 Certificate issuer: /CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Certificate serial: 010D0C9F4328584A64D257EC547D8F3460A3D680 Authority key identifier: AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa Signing time: Thu 03 Jul 2025 08:25:25 +0000 ROA not before: Thu 03 Jul 2025 08:25:25 +0000 ROA not after: Wed 01 Oct 2025 08:25:25 +0000 asID: 399861 IP address blocks: 23.130.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:64:d2:57:ec:54:7d:8f:34:60:a3:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Validity Not Before: Jul 3 08:25:25 2025 GMT Not After : Oct 1 08:25:25 2025 GMT Subject: CN=d120d8ab-0771-45dc-8287-568c669c7525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:be:e9:55:41:32:55:46:e0:64:0a:40:45: 6c:6f:6f:09:80:46:7c:4d:a6:33:9c:08:59:d5:2e: 2d:5b:d1:c7:d3:84:b0:cc:42:6d:1e:2a:cf:33:8f: 0b:eb:d3:97:5b:09:cc:cd:62:76:af:d3:7c:6a:61: bd:86:9f:d6:cb:64:4b:4f:5a:03:e4:79:20:fe:8f: 08:87:37:16:fa:08:27:d3:67:da:32:c4:a4:97:ea: b5:cf:41:b4:db:a3:83:8c:8e:84:19:2f:67:e5:18: 04:c9:38:2e:b8:6b:7a:f1:37:81:9c:d6:5d:e2:13: 2f:bf:d1:36:ae:7d:c3:98:10:52:93:c6:67:63:d7: 9c:9b:54:e9:57:99:fb:87:c7:bb:71:58:54:ea:fc: c5:1c:b6:65:f6:1a:56:30:7b:05:3a:1b:bc:d3:c0: 96:98:9d:fc:ba:b1:85:ec:5d:9c:f8:61:bc:2f:ea: f0:39:30:a2:34:11:ff:bb:17:51:4d:4e:26:83:92: 41:7f:ff:ff:00:fc:35:36:8e:2c:08:d3:50:ba:6d: 80:6a:cc:84:a9:84:d6:41:b5:2d:b6:3c:95:d7:94: fc:84:84:78:49:6b:22:f8:2f:87:b7:43:71:f9:20: 17:89:7c:7f:28:da:af:06:8b:36:83:08:5d:16:e9: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:41:46:56:14:95:61:B4:31:84:F1:CB:DE:3B:7D:A8:58:4C:D7:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl X509v3 Authority Key Identifier: keyid:AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:79:20:1b:07:56:d7:89:e1:b8:c6:2c:3e:7f:88:79:76:80: db:b8:f0:56:98:5a:47:66:1c:40:25:7f:25:a1:66:e9:39:1b: aa:24:2f:90:da:9b:35:44:de:c1:1d:48:7f:7a:36:2e:e1:97: 7a:40:61:16:2f:87:4d:df:14:8b:06:b4:30:1a:27:79:23:5c: 8a:e3:6b:10:88:27:c4:f5:4e:5d:d9:64:e5:c9:06:9c:83:3e: 2c:4d:15:0a:1c:35:07:9d:18:48:d4:58:c4:41:8d:dc:06:f3: 3f:0d:4a:44:8f:7f:8b:dd:3e:05:10:02:4f:10:0d:45:6d:19: 62:08:58:06:3d:55:f0:75:14:6a:a7:8d:44:dd:4b:92:27:38: b0:f7:55:6b:05:f3:2e:b1:0d:9d:72:2b:86:b9:89:ef:48:25: 82:6d:c8:5b:ce:0d:3f:86:d0:76:bd:90:5d:e6:77:11:84:e6: 10:54:4b:5a:c8:71:9c:35:03:1b:ae:3c:9f:ca:92:88:13:8e: db:85:16:67:d0:9b:e7:0a:cf:2c:f3:98:7d:16:e6:74:5c:84: fb:c3:2d:5c:24:9c:1b:5d:95:22:6e:37:c1:55:ac:5a:42:6c: ea:9a:a6:f1:8d:f2:e6:33:0c:88:4c:8d:5f:4f:52:47:03:fd: ba:e2:29:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpk0lfsVH2PNGCj1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjczNTk5ZWYtNWIwYi00Nzk4LTlmNDctODExZDRjMTIw Y2IwMB4XDTI1MDcwMzA4MjUyNVoXDTI1MTAwMTA4MjUyNVowLzEtMCsGA1UEAxMk ZDEyMGQ4YWItMDc3MS00NWRjLTgyODctNTY4YzY2OWM3NTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ++6VVBMlVG4GQKQEVsb28JgEZ8TaYznAhZ 1S4tW9HH04SwzEJtHirPM48L69OXWwnMzWJ2r9N8amG9hp/Wy2RLT1oD5Hkg/o8I hzcW+ggn02faMsSkl+q1z0G026ODjI6EGS9n5RgEyTguuGt68TeBnNZd4hMvv9E2 rn3DmBBSk8ZnY9ecm1TpV5n7h8e7cVhU6vzFHLZl9hpWMHsFOhu808CWmJ38urGF 7F2c+GG8L+rwOTCiNBH/uxdRTU4mg5JBf///APw1No4sCNNQum2AasyEqYTWQbUt tjyV15T8hIR4SWsi+C+Ht0Nx+SAXiXx/KNqvBos2gwhdFulAQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9BRlYUlWG0MYTxy947fahYTNcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNzM1 OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFkNGMxMjBjYjAvMGQyYzY3MjYtYjZhZS0z N2FhLTlhODktMzIyM2Y3ZTM2NDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjczNTk5ZWYtNWIwYi00Nzk4LTlm NDctODExZDRjMTIwY2IwLzI3MzU5OWVmLTViMGItNDc5OC05ZjQ3LTgxMWQ0YzEy MGNiMC5jcmwwHwYDVR0jBBgwFoAUrNfVqNLwYnXQNaiSrEGS3xM0YYMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNzM1OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFk NGMxMjBjYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4LkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ5IBsHVteJ4bjGLD5/iHl2gNu48FaYWkdmHEAlfyWhZuk5G6okL5Da mzVE3sEdSH96Ni7hl3pAYRYvh03fFIsGtDAaJ3kjXIrjaxCIJ8T1Tl3ZZOXJBpyD PixNFQocNQedGEjUWMRBjdwG8z8NSkSPf4vdPgUQAk8QDUVtGWIIWAY9VfB1FGqn jUTdS5InOLD3VWsF8y6xDZ1yK4a5ie9IJYJtyFvODT+G0Ha9kF3mdxGE5hBUS1rI cZw1AxuuPJ/KkogTjtuFFmfQm+cKzyzzmH0W5nRchPvDLVwknBtdlSJuN8FVrFpC bOqapvGN8uYzDIhMjV9PUkcD/briKRo= -----END CERTIFICATE-----Generated at Tue Jul 8 20:35:06 2025 by rpki-client