$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/8871c695-9bce-373e-b1bc-b6755c409e3a.roa File: 8871c695-9bce-373e-b1bc-b6755c409e3a.roa (raw, json) Hash identifier: w1J+khor8Sh6HcrIrjcpnBjYgBvCdMHRvU07AV5s29g= Subject key identifier: 41:32:C1:DF:FB:A4:30:F8:79:9E:BA:79:C6:83:9B:1A:55:BF:35:B9 Certificate issuer: /CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b Certificate serial: 010D0C9F4328584A4C0E5F3F3B7C9D3565007F10 Authority key identifier: 6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/8871c695-9bce-373e-b1bc-b6755c409e3a.roa Signing time: Tue 24 Jun 2025 11:31:09 +0000 ROA not before: Tue 24 Jun 2025 11:31:09 +0000 ROA not after: Mon 22 Sep 2025 11:31:09 +0000 asID: 399861 IP address blocks: 23.132.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:0e:5f:3f:3b:7c:9d:35:65:00:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b Validity Not Before: Jun 24 11:31:09 2025 GMT Not After : Sep 22 11:31:09 2025 GMT Subject: CN=8f9c38ec-96b6-40b0-a272-f5a578d9ff74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:40:db:d4:aa:7a:69:e0:4c:5e:44:64:e9: 5b:24:7d:4f:8d:4b:af:7c:7d:5f:c1:b9:30:b9:5a: 90:85:05:d7:f9:e4:5c:9c:38:18:0f:a7:8e:68:cc: 51:07:ee:41:54:3b:52:79:fe:45:73:30:a5:3b:53: 61:cc:be:da:c0:94:7c:c0:80:6f:b6:0c:6e:39:b6: 7b:2e:8b:d1:75:a2:9f:ae:a7:44:20:ab:1f:44:05: d5:cf:58:7a:75:df:03:05:0d:a6:60:71:5e:08:f3: 33:5f:96:43:42:51:3c:0c:36:14:b4:c4:59:6a:c4: 20:69:a9:d1:df:5e:ce:39:67:f1:b5:50:18:b7:e2: 09:c3:f0:f8:5f:f0:3b:b7:56:08:18:28:27:a6:d4: 65:f9:71:58:33:17:e5:a4:0c:af:15:33:fb:db:20: a5:b6:27:22:da:e3:2d:a5:6c:74:bd:15:ce:e5:2c: ba:48:68:de:a4:e6:fa:9d:f0:40:14:30:88:d3:a7: f6:a7:a5:cd:06:4f:36:4d:26:df:36:e0:5c:6b:a6: f3:29:5d:2e:74:f5:dd:cf:dc:a9:b4:dc:4d:1e:40: a7:65:81:7b:5a:40:b5:e3:39:3b:40:55:5e:bc:50: ba:02:ea:49:ff:ac:09:df:40:1b:cd:9f:17:85:0d: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:32:C1:DF:FB:A4:30:F8:79:9E:BA:79:C6:83:9B:1A:55:BF:35:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/8871c695-9bce-373e-b1bc-b6755c409e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl X509v3 Authority Key Identifier: keyid:6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer sbgp-ipAddrBlock: critical IPv4: 23.132.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:55:77:44:2b:45:60:eb:9f:cc:b6:da:ab:45:76:5f:49:91: ec:36:8b:b9:23:41:b0:36:61:de:aa:9b:15:45:73:e6:3c:88: 5b:e9:a7:47:5d:fe:c7:dd:08:27:86:4d:cc:31:4c:22:da:53: 85:0d:82:1b:93:3d:48:e4:aa:0f:e4:a9:06:33:7d:61:51:ed: c2:54:b6:82:41:e8:ed:aa:31:84:15:f9:5f:39:1e:2e:6d:96: 64:c5:f9:6e:00:d9:a7:91:e8:1d:76:13:0c:cb:0b:1a:96:fd: cb:a2:88:8c:0e:07:b0:ad:cd:c3:a1:91:fb:19:ab:0f:98:c1: 73:0b:ec:d1:c7:af:02:0d:23:63:8b:22:4d:c9:81:2e:4b:75: eb:f1:5e:ab:2e:37:ab:77:52:46:6e:e6:e7:f4:fa:92:e9:3d: a0:92:ac:5b:ba:81:1b:3d:00:a3:cf:bb:1f:83:75:8c:b7:45: 7c:b0:2c:a3:41:ed:2f:ea:e3:5f:a5:39:ec:53:31:97:72:a2: df:4d:99:4a:e8:ca:8f:12:f2:7d:26:f0:8d:df:86:c0:cb:d3: fc:37:8e:04:a7:d9:b9:4b:93:80:d3:21:d2:10:1c:ab:6b:8d: f0:cc:f4:f8:6e:ac:2c:08:f3:f4:86:34:3b:c5:2b:2c:7a:70: 9e:2d:d8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMDl8/O3ydNWUAfxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhYzcyY2EtMzA2ZS00YjEwLTkxZmQtZjRmZDU2ZTUx MjRiMB4XDTI1MDYyNDExMzEwOVoXDTI1MDkyMjExMzEwOVowLzEtMCsGA1UEAxMk OGY5YzM4ZWMtOTZiNi00MGIwLWEyNzItZjVhNTc4ZDlmZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ZA29SqemngTF5EZOlbJH1PjUuvfH1fwbkw uVqQhQXX+eRcnDgYD6eOaMxRB+5BVDtSef5FczClO1NhzL7awJR8wIBvtgxuObZ7 LovRdaKfrqdEIKsfRAXVz1h6dd8DBQ2mYHFeCPMzX5ZDQlE8DDYUtMRZasQgaanR 317OOWfxtVAYt+IJw/D4X/A7t1YIGCgnptRl+XFYMxflpAyvFTP72yCltici2uMt pWx0vRXO5Sy6SGjepOb6nfBAFDCI06f2p6XNBk82TSbfNuBca6bzKV0udPXdz9yp tNxNHkCnZYF7WkC14zk7QFVevFC6AupJ/6wJ30AbzZ8XhQ0uHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEywd/7pDD4eZ66ecaDmxpVvzW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82OWFj NzJjYS0zMDZlLTRiMTAtOTFmZC1mNGZkNTZlNTEyNGIvODg3MWM2OTUtOWJjZS0z NzNlLWIxYmMtYjY3NTVjNDA5ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjlhYzcyY2EtMzA2ZS00YjEwLTkx ZmQtZjRmZDU2ZTUxMjRiLzY5YWM3MmNhLTMwNmUtNGIxMC05MWZkLWY0ZmQ1NmU1 MTI0Yi5jcmwwHwYDVR0jBBgwFoAUavDcZmKBhPfyY8ilzXNr6ls8yr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82OWFjNzJjYS0zMDZlLTRiMTAtOTFmZC1mNGZk NTZlNTEyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4S8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBVd0QrRWDrn8y22qtFdl9Jkew2i7kjQbA2Yd6qmxVFc+Y8iFvpp0dd /sfdCCeGTcwxTCLaU4UNghuTPUjkqg/kqQYzfWFR7cJUtoJB6O2qMYQV+V85Hi5t lmTF+W4A2aeR6B12EwzLCxqW/cuiiIwOB7CtzcOhkfsZqw+YwXML7NHHrwINI2OL Ik3JgS5LdevxXqsuN6t3UkZu5uf0+pLpPaCSrFu6gRs9AKPPux+DdYy3RXywLKNB 7S/q41+lOexTMZdyot9NmUroyo8S8n0m8I3fhsDL0/w3jgSn2blLk4DTIdIQHKtr jfDM9PhurCwI8/SGNDvFKyx6cJ4t2BE= -----END CERTIFICATE-----Generated at Thu Jul 3 09:50:34 2025 by rpki-client