$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa File: db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa (raw, json) Hash identifier: IS/gJF8cczDZwWa85goxwdOHhfYcC3VEISPnXs2niAE= Subject key identifier: 84:32:D6:8E:97:0B:90:05:A5:4C:8C:16:D6:9D:5A:BB:08:29:83:7E Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F4328584A03A5432BF7A96D7476832B20 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 23.247.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:43:2b:f7:a9:6d:74:76:83:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=a1df24db-7b52-4498-88cf-d058501bab32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:9c:41:24:9d:6d:8e:09:e0:94:a9:ea:05: 43:af:69:bd:2c:ec:e8:6c:ff:7c:0a:b5:71:bd:e5: b7:f0:4f:1f:02:fb:77:0a:aa:b0:79:f9:cc:54:4a: 41:b5:6d:e3:b3:ca:39:b5:18:01:3a:71:0e:f2:ac: 4b:47:7d:28:ca:ab:87:75:6b:63:78:c3:41:9c:50: 63:3b:06:e0:8a:9d:96:07:3d:d0:e0:2f:05:cd:b2: 22:23:d1:11:8a:cc:df:3e:db:cd:4a:f0:8a:13:1f: 8b:7a:75:73:a9:8d:dc:2f:e9:b9:ec:f8:95:30:d0: ec:2d:45:a3:98:ac:51:e4:ee:95:89:1a:9f:0d:70: 58:d4:ed:ea:d7:d5:ce:0e:1a:9f:1d:5d:0b:9b:b9: 82:7a:18:87:85:5d:eb:9f:f4:8b:19:87:0b:47:58: e3:46:30:4a:0b:ad:31:15:24:27:e2:46:70:86:f2: 09:6a:68:d4:2f:71:0d:90:f4:e0:a2:bc:f7:d4:a4: e3:87:7c:f0:c9:2e:e9:7c:ca:37:bf:f7:a4:2c:5a: d5:c4:c8:c0:55:09:7c:4a:a2:d4:39:24:1d:7e:f8: d1:43:d3:ba:de:1c:3b:98:f2:77:97:62:e8:87:37: e6:b6:a7:bc:cd:1e:54:12:9a:c6:39:9d:d8:b9:84: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:D6:8E:97:0B:90:05:A5:4C:8C:16:D6:9D:5A:BB:08:29:83:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: 23.247.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:18:4f:41:02:a3:05:a6:20:d9:a4:5b:7b:aa:b3:a2:23:d0: 88:dc:fa:41:f2:c7:01:92:43:17:06:4d:7c:75:47:29:fd:8c: d5:51:c5:b4:ae:09:83:47:a1:3b:71:2f:ab:86:d9:ad:b6:5a: ed:e1:92:04:ec:52:e9:72:24:99:da:e2:fa:e6:b5:6d:67:92: 96:28:39:a2:89:39:5b:04:45:65:fe:32:e5:7b:fb:bb:e0:8d: bc:25:0e:28:a6:25:dd:d9:97:93:a7:0c:1d:1b:7b:6c:51:d9: 47:15:9d:6c:d0:27:c7:7e:9e:b3:30:ad:11:0c:25:a6:c1:44: 70:18:d5:06:5e:71:a7:85:bd:73:18:2a:5d:c9:3b:5c:8c:2a: 73:70:82:a0:63:6e:d5:61:60:77:47:ce:89:b7:ad:34:8d:f5: e1:3c:d3:af:ee:4e:87:fb:4d:04:6f:43:85:1a:45:36:47:90: a9:db:4d:96:e3:2c:3a:c3:cb:21:b5:11:07:43:22:28:19:a8: 40:48:57:36:9d:ed:ab:0b:55:a1:58:93:55:68:a1:6a:72:c8: 4e:d7:62:01:ef:f6:dc:06:4d:93:ad:38:b4:05:cc:24:72:f2: 96:45:12:a0:bc:2e:ac:73:a8:76:b1:bc:e9:08:4d:4b:c6:e8: 65:56:da:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUMr96ltdHaDKyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YTFkZjI0ZGItN2I1Mi00NDk4LTg4Y2YtZDA1ODUwMWJhYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA+cQSSdbY4J4JSp6gVDr2m9LOzobP98CrVx veW38E8fAvt3CqqwefnMVEpBtW3js8o5tRgBOnEO8qxLR30oyquHdWtjeMNBnFBj Owbgip2WBz3Q4C8FzbIiI9ERiszfPtvNSvCKEx+LenVzqY3cL+m57PiVMNDsLUWj mKxR5O6ViRqfDXBY1O3q19XODhqfHV0Lm7mCehiHhV3rn/SLGYcLR1jjRjBKC60x FSQn4kZwhvIJamjUL3ENkPTgorz31KTjh3zwyS7pfMo3v/ekLFrVxMjAVQl8SqLU OSQdfvjRQ9O63hw7mPJ3l2Lohzfmtqe8zR5UEprGOZ3YuYQC+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQy1o6XC5AFpUyMFtadWrsIKYN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvZGI2OGVmODYtOTQ3NS0z Y2IwLWI1NGUtZGU2N2M1MWExZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMYT0ECowWmINmkW3uqs6Ij0Ijc+kHyxwGSQxcGTXx1Ryn9jNVRxbSu CYNHoTtxL6uG2a22Wu3hkgTsUulyJJna4vrmtW1nkpYoOaKJOVsERWX+MuV7+7vg jbwlDiimJd3Zl5OnDB0be2xR2UcVnWzQJ8d+nrMwrREMJabBRHAY1QZecaeFvXMY Kl3JO1yMKnNwgqBjbtVhYHdHzom3rTSN9eE806/uTof7TQRvQ4UaRTZHkKnbTZbj LDrDyyG1EQdDIigZqEBIVzad7asLVaFYk1VooWpyyE7XYgHv9twGTZOtOLQFzCRy 8pZFEqC8LqxzqHaxvOkITUvG6GVW2tE= -----END CERTIFICATE-----Generated at Sun Jun 15 22:02:30 2025 by rpki-client