$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa File: 2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json) Hash identifier: veQQ//P3VaTg+qMJ42TOCjerbCtxvB+bySy+X+TDQmo= Subject key identifier: 13:AE:5E:9E:0A:4E:94:6B:A8:06:E1:DA:AB:A4:48:1D:E0:4B:8A:16 Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Certificate serial: 010D0C9F4328584A66C077A3164FBD6E9F5FFBC0 Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 401468 IP address blocks: 23.128.124.0/24 maxlen: 24 2602:f9a0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:77:a3:16:4f:bd:6e:9f:5f:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=cc5e423b-4a8d-4d51-99e8-c38a68890160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e3:ba:3d:9b:5b:fb:d5:36:1e:aa:92:22:01: dc:c4:e1:89:e4:6e:b1:f5:60:9a:ac:80:7d:3d:3e: e3:0e:1b:cf:0c:9d:3e:80:42:0c:0a:2e:0f:49:c2: f3:51:92:af:aa:ce:74:72:0d:71:a7:a6:f9:8e:08: 4b:f2:1b:db:c4:14:a5:68:c2:e6:f0:37:a7:5f:89: c6:0b:62:5c:50:f4:ca:7d:a6:79:5a:6e:d0:2d:58: 92:ba:bd:7f:d6:74:fc:da:c2:67:b6:b3:96:02:5a: 01:5a:ee:3f:3c:34:61:6d:4f:5c:ae:b3:59:03:bc: 1c:c9:ad:46:c6:8c:74:ce:63:6b:3c:5b:f1:67:bf: 3b:c1:f8:3f:24:32:15:61:95:02:24:f1:00:a8:d0: 7a:23:29:d6:05:22:6b:d8:8e:7b:c6:6e:9f:8f:c8: cb:f6:bf:44:a2:8d:81:51:b2:e7:ee:5e:48:b4:41: 6e:1f:c2:df:19:7e:e1:40:d2:41:9d:0a:9d:95:c2: 8d:f7:cd:43:a4:f7:85:c6:08:0e:d5:31:96:8b:78: 2d:61:a6:3f:79:fd:61:28:aa:be:6d:71:dd:96:4f: 9a:ec:6f:9e:f4:88:78:b4:83:2f:cf:59:38:c4:87: a9:20:20:9a:d7:7d:a4:57:87:d3:99:3b:4f:1f:85: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AE:5E:9E:0A:4E:94:6B:A8:06:E1:DA:AB:A4:48:1D:E0:4B:8A:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl X509v3 Authority Key Identifier: keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer sbgp-ipAddrBlock: critical IPv4: 23.128.124.0/24 IPv6: 2602:f9a0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:65:bc:61:b9:9f:8f:65:ed:37:e9:79:57:32:51:b0:c2:f6: 26:b2:5e:f9:4d:29:36:46:fa:d0:29:54:71:3d:45:dd:02:d2: 00:38:27:5e:0f:e5:a6:36:fe:ae:9c:f7:fb:22:a1:f1:80:2f: 13:df:0e:07:be:2f:3b:d4:c0:c7:96:9b:33:f9:7e:12:b1:1d: 5a:93:42:e9:f3:74:67:f7:aa:48:8d:ef:05:34:fc:76:52:0e: 02:70:04:96:57:e7:1b:aa:67:fa:05:4d:19:03:94:88:f6:fe: a5:49:8f:79:09:5c:3c:3c:45:3e:c7:2e:69:85:5f:e1:6c:b6: 9b:63:e2:27:ba:67:7d:3f:db:e3:e7:26:c2:f8:70:9d:6c:d8: 70:9f:67:7f:bf:a0:24:31:4f:66:46:d6:d8:2c:1a:fb:18:6e: a4:84:a2:2a:fe:39:e2:8d:69:08:08:5a:66:8f:9a:2c:01:f1: 00:2e:9e:6a:bb:f1:b3:bb:00:fb:fb:f6:8a:12:10:77:c7:6b: a6:b4:9f:09:14:a1:e1:bc:c8:11:16:d1:59:a6:05:0d:37:0d: 78:c6:fc:db:75:74:d4:7e:3f:48:cf:04:96:8b:8d:77:2f:18: d4:41:ca:e1:b4:a7:16:c4:38:3a:f6:80:75:7d:85:71:bb:c4: 9d:1a:2d:24 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpmwHejFk+9bp9f+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRi Njk3MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk Y2M1ZTQyM2ItNGE4ZC00ZDUxLTk5ZTgtYzM4YTY4ODkwMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOO6PZtb+9U2HqqSIgHcxOGJ5G6x9WCarIB9 PT7jDhvPDJ0+gEIMCi4PScLzUZKvqs50cg1xp6b5jghL8hvbxBSlaMLm8DenX4nG C2JcUPTKfaZ5Wm7QLViSur1/1nT82sJntrOWAloBWu4/PDRhbU9crrNZA7wcya1G xox0zmNrPFvxZ787wfg/JDIVYZUCJPEAqNB6IynWBSJr2I57xm6fj8jL9r9Eoo2B UbLn7l5ItEFuH8LfGX7hQNJBnQqdlcKN981DpPeFxggO1TGWi3gtYaY/ef1hKKq+ bXHdlk+a7G+e9Ih4tIMvz1k4xIepICCa132kV4fTmTtPH4XOHQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBOuXp4KTpRrqAbh2qukSB3gS4oWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAz NTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvMmY0ZWU4N2UtMGU4Mi0z MWU5LTgzNjQtYzg4OTMwZTdkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmMwMzUwNjMtYmMwYi00MWMwLTlm NTAtOWNmYTBmOWRiNjk3L2ZjMDM1MDYzLWJjMGItNDFjMC05ZjUwLTljZmEwZjlk YjY5Ny5jcmwwHwYDVR0jBBgwFoAUiUAtol04ogGn/UcxVCqNgd9OaiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2Zh MGY5ZGI2OTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4B8MA4E AgACMAgDBgAmAvmgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1ZbxhuZ+PZe036XlXMlGwwvYmsl75TSk2 RvrQKVRxPUXdAtIAOCdeD+WmNv6unPf7IqHxgC8T3w4Hvi871MDHlpsz+X4SsR1a k0Lp83Rn96pIje8FNPx2Ug4CcASWV+cbqmf6BU0ZA5SI9v6lSY95CVw8PEU+xy5p hV/hbLabY+Inumd9P9vj5ybC+HCdbNhwn2d/v6AkMU9mRtbYLBr7GG6khKIq/jni jWkICFpmj5osAfEALp5qu/GzuwD7+/aKEhB3x2umtJ8JFKHhvMgRFtFZpgUNNw14 xvzbdXTUfj9IzwSWi413LxjUQcrhtKcWxDg69oB1fYVxu8SdGi0k -----END CERTIFICATE-----Generated at Wed Aug 6 00:34:25 2025 by rpki-client