$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa File: 1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa (raw, json) Hash identifier: As5ZxldM/X4Qzxk3b297J3MtzE2T6AI3FdGib2BKqCg= Subject key identifier: 73:4A:94:1C:11:C6:32:46:43:AA:EA:65:F9:A7:86:10:8C:01:B0:A7 Certificate issuer: /CN=258880f7-56fa-4c7c-a7e7-6d113eda383d Certificate serial: 010D0C9F4328584A8575FFC1FEC499F72869F970 Authority key identifier: E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 151338 IP address blocks: 23.142.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:ff:c1:fe:c4:99:f7:28:69:f9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258880f7-56fa-4c7c-a7e7-6d113eda383d Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=fd61ef1b-c657-4aa1-93bd-1602411864df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:2f:03:db:e6:36:66:66:d8:ac:95:9d:dd: 4d:87:97:f2:5a:45:30:8c:4a:be:34:f8:7b:b9:b9: 80:76:4d:2e:cd:86:25:a5:5c:b9:64:fb:5f:1c:7d: 21:3a:41:70:4e:34:d6:6e:82:de:00:fb:02:17:79: 67:8d:b4:07:c2:6a:10:1c:34:45:9c:03:d1:03:96: 4b:0c:e8:6c:b2:8a:32:fd:05:32:94:77:3d:79:8c: f5:d6:3b:fe:7f:8b:ca:8e:ed:0d:2f:1f:6a:37:4f: 5a:a4:61:f8:b4:e5:e0:15:d5:53:f0:1d:f3:be:ba: f9:1f:02:38:4a:15:fd:01:37:d7:fd:17:29:11:63: c4:a9:11:a8:b6:70:06:39:6c:ae:63:44:99:1a:97: d1:ee:26:2b:d1:08:5e:b5:70:a1:bd:e0:a5:eb:ca: cf:c1:11:f5:73:fa:4c:db:b8:97:f4:d1:b5:1c:7a: a1:b9:05:ba:45:19:95:bf:23:f3:61:13:00:c3:ec: 92:29:63:fc:9d:4e:3f:29:78:18:60:ff:89:cf:70: 14:7c:7d:7f:33:d8:68:b0:3c:97:83:b7:f2:7b:d8: ac:c9:7f:bb:de:c4:b7:3e:8d:07:fd:2e:88:3e:a2: bc:b7:5f:ef:1d:7a:f6:06:7e:35:68:83:aa:d7:76: 58:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4A:94:1C:11:C6:32:46:43:AA:EA:65:F9:A7:86:10:8C:01:B0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl X509v3 Authority Key Identifier: keyid:E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer sbgp-ipAddrBlock: critical IPv4: 23.142.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:42:44:27:8c:6b:fb:9e:52:fb:b4:2d:64:c1:36:7e:bd:5e: 15:52:18:0a:e8:a7:86:2c:e0:ff:55:f5:77:f3:c6:a7:17:93: 08:45:46:c9:97:d4:10:51:36:18:0f:18:1e:f3:fc:70:86:0a: 95:5d:18:52:69:3c:04:c9:8a:cb:fd:db:40:de:d1:b6:f5:ef: fa:e6:9a:8f:6e:5a:d6:bf:52:1b:d8:8d:69:21:a8:a7:92:6b: ce:de:92:b7:80:de:51:3a:c3:38:a0:9a:8d:0e:d4:25:aa:63: e3:b4:b7:8f:f6:88:86:d6:62:f0:af:e0:20:36:3a:0c:9a:86: fa:32:6c:35:a8:dd:e7:3c:29:71:50:9a:d7:d4:54:9a:3f:58: b0:23:de:d8:47:b1:20:6a:ab:89:6c:3a:f8:33:85:c2:a6:57: 6a:38:3a:c5:21:83:01:02:b7:71:c7:08:ac:76:7b:8a:35:3b: f8:50:4e:d3:c7:8e:5c:80:ed:f4:67:b2:83:18:eb:e5:e1:55: bc:01:58:36:a5:0c:73:10:1b:96:3a:b4:81:b2:25:65:93:b3: 87:a8:a7:aa:b1:95:8a:9f:b2:be:bb:90:50:92:60:8f:bd:83: 72:ae:60:44:a3:3c:41:39:70:92:51:47:63:15:4e:b1:11:9a: 54:ea:85:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdf/B/sSZ9yhp+XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU4ODgwZjctNTZmYS00YzdjLWE3ZTctNmQxMTNlZGEz ODNkMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ZmQ2MWVmMWItYzY1Ny00YWExLTkzYmQtMTYwMjQxMTg2NGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2kvA9vmNmZm2KyVnd1Nh5fyWkUwjEq+NPh7 ubmAdk0uzYYlpVy5ZPtfHH0hOkFwTjTWboLeAPsCF3lnjbQHwmoQHDRFnAPRA5ZL DOhssooy/QUylHc9eYz11jv+f4vKju0NLx9qN09apGH4tOXgFdVT8B3zvrr5HwI4 ShX9ATfX/RcpEWPEqRGotnAGOWyuY0SZGpfR7iYr0QhetXChveCl68rPwRH1c/pM 27iX9NG1HHqhuQW6RRmVvyPzYRMAw+ySKWP8nU4/KXgYYP+Jz3AUfH1/M9hosDyX g7fye9isyX+73sS3Po0H/S6IPqK8t1/vHXr2Bn41aIOq13ZYTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNKlBwRxjJGQ6rqZfmnhhCMAbCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNTg4 ODBmNy01NmZhLTRjN2MtYTdlNy02ZDExM2VkYTM4M2QvMWY5MWY4ZjYtOWY0Ny0z Nzg5LTg5NjQtYTgyMWY1YTdkNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjU4ODgwZjctNTZmYS00YzdjLWE3 ZTctNmQxMTNlZGEzODNkLzI1ODg4MGY3LTU2ZmEtNGM3Yy1hN2U3LTZkMTEzZWRh MzgzZC5jcmwwHwYDVR0jBBgwFoAU4HeZDeDtMJxFcQwusHMU3fxVvoowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNTg4ODBmNy01NmZhLTRjN2MtYTdlNy02ZDEx M2VkYTM4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBCRCeMa/ueUvu0LWTBNn69XhVSGArop4Ys4P9V9XfzxqcXkwhFRsmX 1BBRNhgPGB7z/HCGCpVdGFJpPATJisv920De0bb17/rmmo9uWta/UhvYjWkhqKeS a87ekreA3lE6wzigmo0O1CWqY+O0t4/2iIbWYvCv4CA2OgyahvoybDWo3ec8KXFQ mtfUVJo/WLAj3thHsSBqq4lsOvgzhcKmV2o4OsUhgwECt3HHCKx2e4o1O/hQTtPH jlyA7fRnsoMY6+XhVbwBWDalDHMQG5Y6tIGyJWWTs4eop6qxlYqfsr67kFCSYI+9 g3KuYESjPEE5cJJRR2MVTrERmlTqhcQ= -----END CERTIFICATE-----Generated at Mon Aug 4 21:50:06 2025 by rpki-client