$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa File: 696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa (raw, json) Hash identifier: Y70+G0RSQlr5/sr2DSZMRrw2UI3p9QshXrK3smZYbx8= Subject key identifier: B7:68:89:67:AA:67:25:3F:2C:A7:F2:C3:E5:D2:EC:D6:AB:85:9E:E9 Certificate issuer: /CN=10fa2500-375d-430f-932e-9e2080243439 Certificate serial: 010D0C9F4328584AA160E1FC7B1C7E0E42923600 Authority key identifier: EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 23261 IP address blocks: 23.131.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e1:fc:7b:1c:7e:0e:42:92:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fa2500-375d-430f-932e-9e2080243439 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=7f64d0f4-ae1a-4720-aa82-bf31b3ae615d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:6c:1a:4a:53:fc:e0:4d:cc:97:41:6d:e7: eb:07:4a:b8:c8:aa:16:2f:ff:ac:85:58:ff:50:10: 92:67:47:cb:09:72:75:14:b2:0d:37:f8:0c:59:59: e4:e6:5b:a5:2b:3a:57:77:c8:20:bd:c8:30:ac:b1: 22:37:42:12:21:7c:66:a6:8c:d1:98:ee:72:be:8a: 06:81:a0:14:f6:fa:13:d4:25:47:7c:47:92:ee:ab: 08:af:40:9f:6a:6f:bc:4c:ae:64:9c:fd:7c:7d:b7: f9:8f:32:35:fa:63:4c:eb:16:34:84:4d:6c:30:5e: bc:a9:5f:10:c1:09:ad:c1:7e:4c:6f:50:98:f1:50: d3:f6:4f:31:16:4a:64:ed:f0:a6:54:ea:49:3e:69: 0a:67:bf:5d:48:c1:15:b4:ed:b0:32:7d:01:45:c4: 47:d1:99:c7:1c:73:eb:86:43:c4:2e:ed:f5:41:1e: ca:3c:1b:fb:01:46:2c:4d:f3:b2:d3:e9:94:65:2f: 25:f3:2f:97:74:77:11:99:4d:b9:b4:e8:5c:63:1b: 2f:63:ff:72:f8:6d:56:f1:fe:92:f9:42:8c:4a:a0: fa:77:3f:4a:e5:0b:97:9d:aa:39:be:30:8f:69:62: 93:c9:63:7b:5d:ee:6a:6d:bf:fd:52:ef:56:30:f7: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:68:89:67:AA:67:25:3F:2C:A7:F2:C3:E5:D2:EC:D6:AB:85:9E:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl X509v3 Authority Key Identifier: keyid:EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer sbgp-ipAddrBlock: critical IPv4: 23.131.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f8:24:b1:c9:4a:56:22:e7:c8:42:0b:7b:2f:f0:4f:1f:79: 8e:0b:3d:49:b6:48:39:99:7c:bf:af:fd:65:c5:03:a8:c4:26: d0:b0:16:fc:42:9c:0b:f3:30:e0:f2:cb:17:04:9d:af:69:1d: 62:ed:1c:56:58:9b:9b:30:bb:c5:ba:11:c8:de:4b:74:ac:f7: cc:e3:d0:f4:29:68:5c:58:1d:f2:3a:00:f2:d4:f3:62:da:82: 37:f3:47:72:c1:d8:a1:8c:23:90:03:9f:9a:38:50:f8:93:7b: 0f:df:1d:0f:12:dd:a2:07:94:a6:01:58:06:6d:25:7b:57:7f: 83:6b:e2:7d:4d:42:ae:22:52:c6:e9:f8:96:a8:e0:89:60:65: 6a:11:0d:4d:e2:18:00:18:14:74:03:8f:42:b0:25:8b:86:4b: 0a:b1:e7:90:c1:a5:50:b8:7f:3e:27:af:08:c0:ff:3d:66:10: 23:fe:60:61:92:84:ec:f1:21:a9:4d:ee:c7:d9:2e:4c:2f:50: 48:d5:37:17:cb:ab:16:c4:dd:b0:34:45:8d:d8:d1:7e:d1:63: 9b:d5:c0:12:c4:d9:49:01:46:3b:d9:ba:d9:6e:af:80:2d:a5: 85:54:74:32:c2:41:0f:c7:e9:88:33:f9:5b:6b:ee:6f:32:69: 4a:77:47:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOH8exx+DkKSNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBmYTI1MDAtMzc1ZC00MzBmLTkzMmUtOWUyMDgwMjQz NDM5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk N2Y2NGQwZjQtYWUxYS00NzIwLWFhODItYmYzMWIzYWU2MTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKRsGkpT/OBNzJdBbefrB0q4yKoWL/+shVj/ UBCSZ0fLCXJ1FLINN/gMWVnk5lulKzpXd8ggvcgwrLEiN0ISIXxmpozRmO5yvooG gaAU9voT1CVHfEeS7qsIr0Cfam+8TK5knP18fbf5jzI1+mNM6xY0hE1sMF68qV8Q wQmtwX5Mb1CY8VDT9k8xFkpk7fCmVOpJPmkKZ79dSMEVtO2wMn0BRcRH0ZnHHHPr hkPELu31QR7KPBv7AUYsTfOy0+mUZS8l8y+XdHcRmU25tOhcYxsvY/9y+G1W8f6S +UKMSqD6dz9K5QuXnao5vjCPaWKTyWN7Xe5qbb/9Uu9WMPfG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdoiWeqZyU/LKfyw+XS7NarhZ7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGZh MjUwMC0zNzVkLTQzMGYtOTMyZS05ZTIwODAyNDM0MzkvNjk2ZWJkNmEtMWM2NS0z NzU3LThiMmMtM2M0N2RjNGVjODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTBmYTI1MDAtMzc1ZC00MzBmLTkz MmUtOWUyMDgwMjQzNDM5LzEwZmEyNTAwLTM3NWQtNDMwZi05MzJlLTllMjA4MDI0 MzQzOS5jcmwwHwYDVR0jBBgwFoAU7C7hDidv3q0s+C3xpxhJjMvs25AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGZhMjUwMC0zNzVkLTQzMGYtOTMyZS05ZTIw ODAyNDM0MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4NwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr4JLHJSlYi58hCC3sv8E8feY4LPUm2SDmZfL+v/WXFA6jEJtCwFvxC nAvzMODyyxcEna9pHWLtHFZYm5swu8W6EcjeS3Ss98zj0PQpaFxYHfI6APLU82La gjfzR3LB2KGMI5ADn5o4UPiTew/fHQ8S3aIHlKYBWAZtJXtXf4Nr4n1NQq4iUsbp +Jao4IlgZWoRDU3iGAAYFHQDj0KwJYuGSwqx55DBpVC4fz4nrwjA/z1mECP+YGGS hOzxIalN7sfZLkwvUEjVNxfLqxbE3bA0RY3Y0X7RY5vVwBLE2UkBRjvZutlur4At pYVUdDLCQQ/H6Ygz+Vtr7m8yaUp3Rwo= -----END CERTIFICATE-----Generated at Tue Aug 12 22:52:35 2025 by rpki-client