$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa File: c00ef155-85c4-36fa-98b1-e12fe962553e.roa (raw, json) Hash identifier: ghuN+FNdS4qJA16S3S1ZXHKSTrSNKDqvBiZzey3G0cc= Subject key identifier: 41:99:26:97:0C:F5:93:6A:CD:39:89:2F:16:17:E8:FE:86:50:04:D2 Certificate issuer: /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569 Certificate serial: 010D0C9F4328584A63F5B1CAE632D9D631670D80 Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 11611 IP address blocks: 23.158.112.0/24 maxlen: 24 2602:fd61::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:b1:ca:e6:32:d9:d6:31:67:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569 Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=1c437996-a786-4cc7-a67a-65cebfcc0cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:ee:06:39:6d:d7:bd:57:11:6d:b5:2d:6d: 20:9f:f1:ab:d9:0f:cd:4d:82:6b:eb:be:48:16:9f: be:14:3a:8f:50:37:17:5e:14:36:6d:29:ab:60:87: ee:96:74:97:40:15:00:b2:1b:e7:e5:2c:31:dc:b4: 61:e8:fb:d1:81:66:b4:b0:9a:ff:19:02:c5:55:45: 8a:e3:06:d8:b8:73:03:ce:b9:e9:99:69:9a:70:67: f0:b9:6c:d6:38:57:86:57:cc:cd:53:df:95:d7:26: 10:48:ed:8d:39:33:33:ee:13:2a:7d:44:c3:e0:40: 4c:fd:39:0d:0d:58:d7:0c:71:1f:eb:f2:ef:50:6d: 8e:b0:a7:e5:cc:6a:9e:04:96:3c:e6:2d:92:fd:f1: 10:f2:01:16:5f:1d:d9:e6:98:d6:d2:ad:c7:d3:2a: 64:cb:c6:4a:30:23:24:a9:d2:e0:fc:56:cc:3f:b6: af:2b:0a:1b:3a:0a:e7:90:e3:97:dc:65:f4:5b:3c: eb:ae:0e:0a:07:6c:c5:1a:f3:a7:02:97:80:9d:97: ec:33:a5:25:7b:90:82:26:83:71:4e:84:0a:d6:99: 9f:74:fd:9e:3d:59:de:d2:26:d4:0a:ca:59:ee:63: eb:a1:2f:06:fb:7d:37:b0:00:f6:d1:26:28:41:f8: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:99:26:97:0C:F5:93:6A:CD:39:89:2F:16:17:E8:FE:86:50:04:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl X509v3 Authority Key Identifier: keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer sbgp-ipAddrBlock: critical IPv4: 23.158.112.0/24 IPv6: 2602:fd61::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6d:32:d2:48:24:e0:75:9e:22:b1:77:95:6f:14:18:5d:cd: d4:2f:f0:55:f3:f2:0d:84:ad:66:32:fe:b8:91:fe:01:bd:7a: d3:66:ac:a2:6f:ba:b2:29:1b:5a:c9:33:d2:70:04:8d:a3:a2: b1:50:98:96:c0:12:a4:f2:12:1d:46:f0:6d:8b:4c:e6:d1:aa: 08:c7:c5:11:20:1b:aa:ce:32:9c:ed:4e:c8:22:ba:48:b4:45: df:16:01:97:4e:bc:a7:3e:3e:a1:d5:b8:8c:30:6b:ad:6b:5f: 8f:f7:4b:18:bd:37:6a:42:80:72:5c:c9:cd:1b:a6:b3:92:be: 3c:42:29:8c:16:e1:53:ab:10:ea:c0:4b:1d:7a:1a:49:8f:2a: ca:cf:c5:3a:0b:09:95:93:bc:56:e5:3a:ed:47:bf:4e:fe:74: 80:fc:36:dd:9c:b2:bc:77:d6:58:59:24:b2:b2:39:6a:8d:ea: 64:93:5c:ca:6c:63:b5:f2:e1:3e:7d:c9:f0:8d:c7:27:42:62: 7f:27:a5:25:12:d3:e1:8c:73:9c:75:2a:1a:87:4e:08:6f:94: e6:02:ff:29:fd:dd:f6:02:e6:bd:e9:9d:c5:b8:85:20:28:a9: 58:02:5b:80:9e:c1:c2:55:89:e9:92:9d:07:c3:ae:4e:15:03: 71:b2:5f:f8 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEpj9bHK5jLZ1jFnDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBiMWI2MmUtOWFiYS00NzMzLTlkOTYtOWI3YzU5ZGQ5 NTY5MB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk MWM0Mzc5OTYtYTc4Ni00Y2M3LWE2N2EtNjVjZWJmY2MwY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsHuBjlt171XEW21LW0gn/Gr2Q/NTYJr675I Fp++FDqPUDcXXhQ2bSmrYIfulnSXQBUAshvn5Swx3LRh6PvRgWa0sJr/GQLFVUWK 4wbYuHMDzrnpmWmacGfwuWzWOFeGV8zNU9+V1yYQSO2NOTMz7hMqfUTD4EBM/TkN DVjXDHEf6/LvUG2OsKflzGqeBJY85i2S/fEQ8gEWXx3Z5pjW0q3H0ypky8ZKMCMk qdLg/FbMP7avKwobOgrnkOOX3GX0Wzzrrg4KB2zFGvOnApeAnZfsM6Ule5CCJoNx ToQK1pmfdP2ePVne0ibUCspZ7mProS8G+303sAD20SYoQfi9QQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEGZJpcM9ZNqzTmJLxYX6P6GUATSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMGIx YjYyZS05YWJhLTQ3MzMtOWQ5Ni05YjdjNTlkZDk1NjkvYzAwZWYxNTUtODVjNC0z NmZhLTk4YjEtZTEyZmU5NjI1NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzBiMWI2MmUtOWFiYS00NzMzLTlk OTYtOWI3YzU5ZGQ5NTY5L2MwYjFiNjJlLTlhYmEtNDczMy05ZDk2LTliN2M1OWRk OTU2OS5jcmwwHwYDVR0jBBgwFoAU2IOrpvrW+CVSJ/cFIGamIHys7YMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMGIxYjYyZS05YWJhLTQ3MzMtOWQ5Ni05Yjdj NTlkZDk1NjkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF55wMA0E AgACMAcDBQAmAv1hMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADBtMtJIJOB1niKxd5VvFBhdzdQv8FXz8g2E rWYy/riR/gG9etNmrKJvurIpG1rJM9JwBI2jorFQmJbAEqTyEh1G8G2LTObRqgjH xREgG6rOMpztTsgiuki0Rd8WAZdOvKc+PqHVuIwwa61rX4/3Sxi9N2pCgHJcyc0b prOSvjxCKYwW4VOrEOrASx16GkmPKsrPxToLCZWTvFblOu1Hv07+dID8Nt2csrx3 1lhZJLKyOWqN6mSTXMpsY7Xy4T59yfCNxydCYn8npSUS0+GMc5x1KhqHTghvlOYC /yn93fYC5r3pncW4hSAoqVgCW4CewcJViemSnQfDrk4VA3GyX/g= -----END CERTIFICATE-----Generated at Thu Jul 10 17:04:12 2025 by rpki-client