$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fac1cc-235d-3048-a035-3524e5892f03.roa File: 20fac1cc-235d-3048-a035-3524e5892f03.roa (raw, json) Hash identifier: ZjdU8+T1kXOHsN99BUTYAYD74IW8/r84JNt9BSyJIUo= Subject key identifier: C8:A1:94:70:2E:28:79:6A:A4:B2:D8:8C:1B:D9:19:CA:31:C5:7A:FE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A90A10FC2C54C4E77E82C1700 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fac1cc-235d-3048-a035-3524e5892f03.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 44477 IP address blocks: 23.230.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:0f:c2:c5:4c:4e:77:e8:2c:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=68cea484-7357-4205-938d-7bd5fbb4cde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:25:01:95:03:79:71:2c:2c:b4:1c:5a:37:de: b2:42:81:a7:6a:0f:fd:d4:4a:51:49:ef:c5:fa:b4: d4:04:f3:53:f5:49:80:2d:56:42:34:a1:01:c6:b0: c1:05:ea:63:00:7e:24:02:19:e8:36:24:ef:1b:66: 3b:ef:52:ab:19:b8:ee:07:50:e5:b4:1e:3e:3d:83: 68:1a:99:10:1b:45:ea:80:2f:6c:e6:bf:1a:39:51: e6:a9:97:2b:ea:af:56:08:cc:5f:bd:8b:b6:a2:41: f5:66:ac:4e:63:c5:e0:85:b5:63:c6:5d:48:dc:3b: bf:1e:87:3e:d3:7e:27:58:07:c2:83:bf:d5:ee:7d: 1b:f1:6c:92:6b:91:04:76:74:48:7d:e9:38:35:10: 37:fd:af:01:2f:eb:8a:5e:f4:c2:8c:8f:25:13:b9: 97:52:92:a1:6b:b4:88:aa:c8:32:ca:67:66:b8:51: 9b:b5:55:42:e1:67:a0:fa:9b:94:fc:2b:5f:94:92: 22:a9:64:50:10:cc:da:74:82:f8:1b:d8:14:15:10: 7d:93:0f:b2:da:93:9c:58:c6:01:10:7b:92:38:b0: 65:81:a8:39:cd:b5:9a:76:2b:ad:62:0d:10:8e:4e: b6:77:b9:24:38:38:c6:95:7e:66:83:06:9d:c3:af: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A1:94:70:2E:28:79:6A:A4:B2:D8:8C:1B:D9:19:CA:31:C5:7A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fac1cc-235d-3048-a035-3524e5892f03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:17:08:69:a5:0e:3f:27:34:55:b0:56:e4:68:6a:f5:bf:ad: 59:3e:43:f8:2b:b0:df:29:60:10:d2:ed:27:4d:47:98:70:66: 8d:a0:fc:34:e4:f9:75:18:71:ca:50:27:7f:8f:ff:45:68:71: 2d:07:3e:28:bd:dc:cc:7e:1c:2b:b2:4a:c0:57:d8:b2:62:36: 42:c6:21:66:98:6c:cd:d2:4f:7d:6d:ab:d1:96:9e:40:63:4a: 0c:4d:0b:09:81:86:1f:82:ea:f2:e9:a8:66:37:d0:a9:bc:93: e2:cb:f3:3e:85:7a:46:f7:20:d8:a1:26:e2:cb:0c:17:ed:e7: ac:c5:79:21:db:f6:21:f5:2f:21:e2:dc:0d:49:39:4f:06:51: 58:b4:f9:2f:8a:88:33:07:44:40:ee:10:6b:08:fe:65:a5:3d: d5:a6:25:3b:91:1c:58:e9:8f:93:0e:b1:f5:ac:74:15:72:f3: 52:f2:ca:65:20:e3:16:44:ae:c4:55:9c:b7:e8:71:f7:f5:12: db:a4:18:af:0a:de:d8:2f:46:62:55:58:93:fc:fe:32:c3:f9: 26:0b:7a:55:e4:9d:d5:2d:cf:a2:5b:4b:6a:60:4b:a0:f7:56: 74:11:48:d3:d6:aa:9b:c9:45:85:fe:09:1a:44:5d:0e:57:68: 6f:41:45:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQ/CxUxOd+gsFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NjhjZWE0ODQtNzM1Ny00MjA1LTkzOGQtN2JkNWZiYjRjZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSUBlQN5cSwstBxaN96yQoGnag/91EpRSe/F +rTUBPNT9UmALVZCNKEBxrDBBepjAH4kAhnoNiTvG2Y771KrGbjuB1DltB4+PYNo GpkQG0XqgC9s5r8aOVHmqZcr6q9WCMxfvYu2okH1ZqxOY8XghbVjxl1I3Du/Hoc+ 034nWAfCg7/V7n0b8WySa5EEdnRIfek4NRA3/a8BL+uKXvTCjI8lE7mXUpKha7SI qsgyymdmuFGbtVVC4Weg+puU/CtflJIiqWRQEMzadIL4G9gUFRB9kw+y2pOcWMYB EHuSOLBlgag5zbWadiutYg0Qjk62d7kkODjGlX5mgwadw6+vYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMihlHAuKHlqpLLYjBvZGcoxxXr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjBmYWMxY2MtMjM1ZC0z MDQ4LWEwMzUtMzUyNGU1ODkyZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+aoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0XCGmlDj8nNFWwVuRoavW/rVk+Q/grsN8pYBDS7SdNR5hwZo2g/DTk +XUYccpQJ3+P/0VocS0HPii93Mx+HCuySsBX2LJiNkLGIWaYbM3ST31tq9GWnkBj SgxNCwmBhh+C6vLpqGY30Km8k+LL8z6Fekb3INihJuLLDBft56zFeSHb9iH1LyHi 3A1JOU8GUVi0+S+KiDMHREDuEGsI/mWlPdWmJTuRHFjpj5MOsfWsdBVy81LyymUg 4xZErsRVnLfocff1EtukGK8K3tgvRmJVWJP8/jLD+SYLelXkndUtz6JbS2pgS6D3 VnQRSNPWqpvJRYX+CRpEXQ5XaG9BRfM= -----END CERTIFICATE-----Generated at Wed Aug 6 07:55:16 2025 by rpki-client