$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa File: f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa (raw, json) Hash identifier: fC+pEcDjuCe0nmf3QBXP8cVknSURCqvkhmPTbJsHKNA= Subject key identifier: 00:23:47:4B:10:7B:40:48:EB:25:D7:34:A3:08:96:7C:31:DE:7A:44 Certificate issuer: /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be Certificate serial: 010D0C9F4328584A8DD5FB02C7FBA8EDA3169900 Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 7837 IP address blocks: 23.189.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:fb:02:c7:fb:a8:ed:a3:16:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=1d2cfa50-a030-4443-87e4-c660268b8315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:1d:0f:c1:92:1f:98:7a:92:7e:a3:ec:58: 05:72:b6:11:ae:55:80:3e:e1:fa:52:0b:27:26:2a: e8:41:26:3a:03:d9:d8:af:7a:48:36:a6:6f:09:fb: 47:3f:a5:8b:ac:ec:a7:8e:a0:26:4d:eb:8e:e9:b0: 0b:61:42:7e:e2:be:9f:ec:17:ab:1f:d4:5a:6e:78: d7:c8:0c:36:e9:21:50:5d:67:58:db:52:62:65:3e: c5:af:0b:19:42:f0:a7:21:3f:c9:70:40:ad:0c:80: 64:14:ba:e3:2d:16:69:55:44:c8:40:94:3f:17:f7: 97:6e:b9:20:97:cf:5e:6a:b9:b2:82:c4:7f:16:fe: d8:16:dd:cb:5a:c6:ed:11:f1:96:b1:bb:65:d1:98: 67:9e:1c:90:15:7a:ee:95:62:17:3a:d5:b8:80:fd: b9:7b:7a:59:60:a1:ae:38:22:38:e6:13:f9:e1:db: ac:13:5e:02:6c:52:8d:b4:4a:68:ef:95:9c:01:05: fe:bf:1b:68:c5:7d:84:a5:b7:5e:7a:6c:02:40:d9: 77:61:29:83:9a:96:34:9f:d4:0b:69:de:f5:0a:10: ab:87:74:ba:d4:95:87:74:dc:3b:bc:5b:2d:0a:ca: bd:36:d3:08:88:18:ac:76:bc:00:9b:60:15:06:ea: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:23:47:4B:10:7B:40:48:EB:25:D7:34:A3:08:96:7C:31:DE:7A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl X509v3 Authority Key Identifier: keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer sbgp-ipAddrBlock: critical IPv4: 23.189.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:34:bc:4d:d3:c3:bd:95:89:68:88:cc:01:35:f4:79:95:f3: df:c6:9d:e4:69:ae:6d:d4:61:eb:96:ad:4b:56:b3:eb:d1:41: 45:51:a5:32:ee:1b:fc:29:dd:e3:2e:54:fa:8f:79:08:12:9c: d5:ee:30:1f:ec:20:dc:66:3e:92:64:0f:8f:bb:72:51:25:a7: 75:1b:10:1d:23:e4:92:54:62:7e:b7:dd:a5:a1:a1:ab:8f:1f: e8:47:96:21:98:d2:78:2a:8f:e4:ae:c9:9e:a3:48:85:29:95: e6:3b:f3:76:db:87:49:30:55:1f:79:e6:d8:75:b0:1e:e0:26: b3:14:ee:dc:b3:50:98:0e:34:b5:bc:95:80:c7:f7:f8:9d:e8: 58:d9:b5:b7:60:36:ae:ec:ce:fe:d0:24:ca:89:f5:58:46:30: da:9e:41:66:c3:02:37:ec:92:3e:7d:0b:b6:3b:01:a0:ec:50: 67:86:0b:56:98:30:01:a5:e0:5b:e2:2b:60:47:b9:cb:db:7f: a9:18:39:81:78:15:7c:12:bb:db:04:43:f8:fb:c3:3f:c3:5e: 84:fa:6f:68:13:87:55:3d:a3:58:8f:89:f8:94:d6:c0:71:3c: ff:56:ed:5d:71:dd:98:68:8d:c1:a4:23:4c:c3:a4:d9:74:46: d6:70:19:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1fsCx/uo7aMWmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjZTBlNGYtMTkyNy00NTgxLTgyMWYtNjg2ZjRlNWZk NmJlMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk MWQyY2ZhNTAtYTAzMC00NDQzLTg3ZTQtYzY2MDI2OGI4MzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnsdD8GSH5h6kn6j7FgFcrYRrlWAPuH6Ugsn JiroQSY6A9nYr3pINqZvCftHP6WLrOynjqAmTeuO6bALYUJ+4r6f7BerH9RabnjX yAw26SFQXWdY21JiZT7FrwsZQvCnIT/JcECtDIBkFLrjLRZpVUTIQJQ/F/eXbrkg l89earmygsR/Fv7YFt3LWsbtEfGWsbtl0ZhnnhyQFXrulWIXOtW4gP25e3pZYKGu OCI45hP54dusE14CbFKNtEpo75WcAQX+vxtoxX2EpbdeemwCQNl3YSmDmpY0n9QL ad71ChCrh3S61JWHdNw7vFstCsq9NtMIiBisdrwAm2AVBurKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAjR0sQe0BI6yXXNKMIlnwx3npEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Nl MGU0Zi0xOTI3LTQ1ODEtODIxZi02ODZmNGU1ZmQ2YmUvZjFiMzY2ZGEtM2FiZi0z ZjdmLThiMjktNWIwOTliMmU5MzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNjZTBlNGYtMTkyNy00NTgxLTgy MWYtNjg2ZjRlNWZkNmJlLzFjY2UwZTRmLTE5MjctNDU4MS04MjFmLTY4NmY0ZTVm ZDZiZS5jcmwwHwYDVR0jBBgwFoAU6p79cF69oIvTbmffU4WPHK5H1pEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2NlMGU0Zi0xOTI3LTQ1ODEtODIxZi02ODZm NGU1ZmQ2YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY0vE3Tw72ViWiIzAE19HmV89/GneRprm3UYeuWrUtWs+vRQUVRpTLu G/wp3eMuVPqPeQgSnNXuMB/sINxmPpJkD4+7clElp3UbEB0j5JJUYn633aWhoauP H+hHliGY0ngqj+SuyZ6jSIUpleY783bbh0kwVR955th1sB7gJrMU7tyzUJgONLW8 lYDH9/id6FjZtbdgNq7szv7QJMqJ9VhGMNqeQWbDAjfskj59C7Y7AaDsUGeGC1aY MAGl4FviK2BHucvbf6kYOYF4FXwSu9sEQ/j7wz/DXoT6b2gTh1U9o1iPifiU1sBx PP9W7V1x3ZhojcGkI0zDpNl0RtZwGbU= -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:13 2025 by rpki-client