$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa File: 1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa (raw, json) Hash identifier: WUiJylnnD3utiZQUhITRDV6V3574goTot4bCigAsbZw= Subject key identifier: 8A:A3:35:6C:28:A8:01:31:F4:CA:00:AA:BA:30:39:E0:AE:C4:BA:13 Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584A64CE2E410B91953C7B9CC680 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa Signing time: Thu 03 Jul 2025 08:17:02 +0000 ROA not before: Thu 03 Jul 2025 08:17:02 +0000 ROA not after: Wed 01 Oct 2025 08:17:02 +0000 asID: 399861 IP address blocks: 23.130.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:64:ce:2e:41:0b:91:95:3c:7b:9c:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Jul 3 08:17:02 2025 GMT Not After : Oct 1 08:17:02 2025 GMT Subject: CN=1a6671d3-8b63-4b5b-8316-d74773b4dbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:17:11:60:3e:1e:c8:36:3f:d0:c2:95:5a: 96:d8:d7:5d:32:b6:a7:b8:50:6c:43:7b:91:98:76: 79:95:00:17:fa:16:38:4f:d7:89:d1:53:44:ea:b5: b4:fe:b7:e3:53:98:fe:0c:17:07:56:41:e1:45:23: 98:d7:71:8e:0c:fd:ff:b0:dc:b2:b1:58:3e:43:cf: 56:28:17:c4:0c:ec:7e:e5:29:8b:bb:0b:eb:0a:aa: 35:1f:b0:24:f6:3f:6c:7c:00:76:09:43:1f:12:75: b5:77:a6:8d:3e:1d:ac:f7:af:46:14:87:e2:60:31: d1:5b:c1:f5:4c:43:5a:5e:9d:b7:06:c8:b9:a7:36: bb:1c:97:b5:95:18:4a:da:41:b7:3f:a0:f2:07:23: 9d:ee:e7:32:65:d9:ed:e7:5c:4a:50:94:04:af:7f: 1a:b5:36:ce:5e:c1:4e:9f:b9:2d:20:7e:b0:ff:d2: f4:df:e5:90:8f:11:7d:ad:0d:47:b2:96:53:b4:47: 82:03:50:12:59:4a:6a:40:33:36:73:e1:88:ad:6a: 44:b6:08:9e:49:f4:10:f2:bd:f8:e6:16:89:cb:6d: 4f:2d:b4:60:d5:53:6f:98:f4:e6:5f:03:f9:58:af: fa:9b:0f:64:00:ef:e9:69:82:ec:9a:e4:7f:24:a3: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A3:35:6C:28:A8:01:31:F4:CA:00:AA:BA:30:39:E0:AE:C4:BA:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0c:ee:98:3b:c0:2a:da:2a:82:cf:30:74:41:1d:3a:d9:cd: 52:2d:00:e1:3a:22:2c:65:26:fe:69:bf:dd:b2:78:6a:5d:a1: 7c:3a:f3:c1:ef:ad:1b:58:b9:db:d2:a6:cf:f1:09:e4:b7:04: 1f:e8:20:d9:bf:5c:71:06:63:3b:56:85:5c:24:6d:2f:e2:60: f7:2a:c5:ad:55:e2:8c:d8:72:3e:17:c5:98:f0:b5:a8:d3:70: 6a:69:2d:61:a1:e3:dd:98:8d:d2:0c:10:24:7f:97:0d:7e:a1: 83:81:22:ce:b1:e0:34:ea:94:9c:4d:1c:cd:60:25:73:f5:37: b3:64:5c:0a:d0:e8:29:ea:16:a8:4e:b9:23:7f:e0:08:44:99: a7:14:14:6e:c9:fa:d7:06:87:3b:82:7b:b7:ba:ab:e9:91:03: f2:ba:16:95:85:db:68:1d:49:80:8c:64:41:0f:ac:ea:2c:07: 87:0a:f5:fd:98:6b:c2:5a:bc:64:98:a4:4a:00:b5:b2:d0:24: b9:b1:18:71:a3:fb:82:98:d2:44:8d:f7:9c:99:28:b9:b8:dc: 1c:bf:cb:c3:cd:8d:f9:f8:10:cb:5d:07:b6:8e:92:8b:95:6c: 5c:79:34:2f:c0:72:57:0d:cf:05:df:64:29:36:4d:29:93:e4: 11:f6:3b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpkzi5BC5GVPHucxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI1MDcwMzA4MTcwMloXDTI1MTAwMTA4MTcwMlowLzEtMCsGA1UEAxMk MWE2NjcxZDMtOGI2My00YjViLTgzMTYtZDc0NzczYjRkYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPEXEWA+Hsg2P9DClVqW2NddMranuFBsQ3uR mHZ5lQAX+hY4T9eJ0VNE6rW0/rfjU5j+DBcHVkHhRSOY13GODP3/sNyysVg+Q89W KBfEDOx+5SmLuwvrCqo1H7Ak9j9sfAB2CUMfEnW1d6aNPh2s969GFIfiYDHRW8H1 TENaXp23Bsi5pza7HJe1lRhK2kG3P6DyByOd7ucyZdnt51xKUJQEr38atTbOXsFO n7ktIH6w/9L03+WQjxF9rQ1HspZTtEeCA1ASWUpqQDM2c+GIrWpEtgieSfQQ8r34 5haJy21PLbRg1VNvmPTmXwP5WK/6mw9kAO/paYLsmuR/JKMzrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqjNWwoqAEx9MoAqrowOeCuxLoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvMWJiMTUyOWYtN2Y0NC0z MDRjLWFmNGUtYjBjM2Q4ZDBlZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4LsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0M7pg7wCraKoLPMHRBHTrZzVItAOE6IixlJv5pv92yeGpdoXw688Hv rRtYudvSps/xCeS3BB/oINm/XHEGYztWhVwkbS/iYPcqxa1V4ozYcj4XxZjwtajT cGppLWGh492YjdIMECR/lw1+oYOBIs6x4DTqlJxNHM1gJXP1N7NkXArQ6CnqFqhO uSN/4AhEmacUFG7J+tcGhzuCe7e6q+mRA/K6FpWF22gdSYCMZEEPrOosB4cK9f2Y a8JavGSYpEoAtbLQJLmxGHGj+4KY0kSN95yZKLm43By/y8PNjfn4EMtdB7aOkouV bFx5NC/AclcNzwXfZCk2TSmT5BH2O98= -----END CERTIFICATE-----Generated at Wed Jul 9 11:49:32 2025 by rpki-client