$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa File: ba711ba1-3e0a-374c-a397-d36ec265248d.roa (raw, json) Hash identifier: BRNMJ50xd5AqDgA0gwiNZhmWhaj6VyaUIoblCRdwHGM= Subject key identifier: 09:0A:00:E4:CB:57:B8:56:8E:FC:CA:EE:F4:A5:E2:56:8A:FB:D3:57 Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Certificate serial: 010D0C9F4328584AB4EB770ECB787705C4B1BC00 Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 32159 IP address blocks: 23.153.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:77:0e:cb:78:77:05:c4:b1:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=11ffc930-95d5-488b-9b36-e7b80a7045f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:a5:62:7a:88:19:93:d6:b0:00:97:ca:8a: df:8a:91:5e:b2:4c:44:02:1d:d1:d4:1d:38:cf:91: f9:c3:08:6d:58:66:a4:5a:0f:53:a3:77:80:0e:2f: 14:80:d1:8f:03:59:dc:9c:bd:a5:7a:cb:ef:4b:c4: 51:42:f4:ab:30:2c:b0:6e:97:0a:d6:7c:ac:6f:a3: 1a:0b:75:70:2e:a8:79:aa:e2:a1:31:41:4a:c2:e8: ab:9a:12:86:4e:74:14:44:4b:fb:e8:44:ba:d7:d6: e8:e7:90:29:91:23:f9:ef:83:52:0b:90:7d:ec:ce: e4:59:72:3f:e5:be:f9:9d:c8:c5:02:32:92:15:55: cf:ee:4e:75:7b:07:96:eb:55:09:bf:97:08:50:92: 43:8c:e3:0a:29:a8:df:ca:0e:be:83:d6:75:ea:19: e2:57:45:e7:77:72:a8:e5:bd:61:5a:6d:bb:9e:c0: 84:79:46:9a:eb:88:61:a4:52:a5:aa:13:02:36:56: bb:d8:f7:3a:b6:69:ba:db:d7:b2:fa:bc:7d:d1:5e: f0:03:8b:02:be:85:22:77:1e:0a:52:ef:38:4d:0f: 58:42:76:ef:78:8a:6a:b8:e5:bc:4c:22:07:76:f3: 1d:ae:37:a9:c4:dd:ad:43:77:d5:39:bb:f6:5f:f8: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0A:00:E4:CB:57:B8:56:8E:FC:CA:EE:F4:A5:E2:56:8A:FB:D3:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl X509v3 Authority Key Identifier: keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:55:e9:2b:6c:c8:72:ab:86:9c:15:a9:dc:96:db:0d:52:e7: 53:4f:3b:50:d8:05:85:bc:f8:7e:9a:32:d9:c9:cb:78:2c:0e: 65:55:36:99:4e:88:64:56:52:59:91:bf:f3:cb:69:8d:ce:dd: ff:16:d8:98:5c:81:7c:4f:04:a4:de:1f:ab:9a:58:71:8c:70: 4e:9f:ba:89:ed:c9:a9:5a:3c:20:69:2e:1b:fd:b7:98:c9:10: fe:cc:e3:60:d9:a8:19:a0:fc:26:2d:c4:fb:33:ed:c0:01:04: c5:3d:a9:df:d1:85:86:da:b6:f9:f9:72:51:c2:0d:33:c4:95: 79:1d:8e:75:cd:ff:08:31:e5:4d:30:e2:13:67:49:4e:b1:60: 2b:d4:7b:21:60:eb:9a:ae:1d:0e:df:e9:83:65:6a:af:60:90: 8a:3d:7d:40:4b:58:2d:90:f6:fa:d8:f4:2d:c0:4c:b7:77:7d: 86:ee:f2:98:1c:5f:22:90:6b:cf:b3:66:6b:a8:ac:12:5d:59: 7b:24:ad:b7:ee:1e:eb:c2:ca:78:df:ca:1a:6d:34:79:88:d2: 05:b8:e1:58:de:ed:db:1f:19:78:3a:cf:a1:6e:c4:ac:e4:f7: 5e:0f:64:46:12:1e:6b:73:b2:3b:09:78:eb:62:ba:60:e0:0b: 21:75:90:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063cOy3h3BcSxvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5 ZWIxMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MTFmZmM5MzAtOTVkNS00ODhiLTliMzYtZTdiODBhNzA0NWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7+lYnqIGZPWsACXyorfipFeskxEAh3R1B04 z5H5wwhtWGakWg9To3eADi8UgNGPA1ncnL2lesvvS8RRQvSrMCywbpcK1nysb6Ma C3VwLqh5quKhMUFKwuirmhKGTnQUREv76ES619bo55ApkSP574NSC5B97M7kWXI/ 5b75ncjFAjKSFVXP7k51eweW61UJv5cIUJJDjOMKKajfyg6+g9Z16hniV0Xnd3Ko 5b1hWm27nsCEeUaa64hhpFKlqhMCNla72Pc6tmm629ey+rx90V7wA4sCvoUidx4K Uu84TQ9YQnbveIpquOW8TCIHdvMdrjepxN2tQ3fVObv2X/jOeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkKAOTLV7hWjvzK7vSl4laK+9NXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvYmE3MTFiYTEtM2UwYS0z NzRjLWEzOTctZDM2ZWMyNjUyNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4 OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz MGMyODllYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhV6StsyHKrhpwVqdyW2w1S51NPO1DYBYW8+H6aMtnJy3gsDmVVNplO iGRWUlmRv/PLaY3O3f8W2JhcgXxPBKTeH6uaWHGMcE6fuontyalaPCBpLhv9t5jJ EP7M42DZqBmg/CYtxPsz7cABBMU9qd/RhYbatvn5clHCDTPElXkdjnXN/wgx5U0w 4hNnSU6xYCvUeyFg65quHQ7f6YNlaq9gkIo9fUBLWC2Q9vrY9C3ATLd3fYbu8pgc XyKQa8+zZmuorBJdWXskrbfuHuvCynjfyhptNHmI0gW44Vje7dsfGXg6z6FuxKzk 914PZEYSHmtzsjsJeOtiumDgCyF1kLc= -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:09 2025 by rpki-client