$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa File: d1a16e87-19b9-34cb-80f5-b2cd02650049.roa (raw, json) Hash identifier: ogzJeydqDfbRlbSGS7JIyZZt/aVkyXLFPco9t4bg8Xk= Subject key identifier: AB:93:26:A7:4B:49:88:BD:37:A1:4D:A5:AF:71:0E:1E:18:B1:0B:C5 Certificate issuer: /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Certificate serial: 010D0C9F4328584AB91B90074DFFF0B68CDCC900 Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 398960 IP address blocks: 23.168.145.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:90:07:4d:ff:f0:b6:8c:dc:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=2383b58d-f5d7-4586-8764-679796017661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:d0:0c:c2:1b:98:69:78:2c:0a:2d:22:7f: 70:10:73:c4:e1:2e:cb:58:13:a2:6e:01:f9:83:a5: 45:e0:6a:c4:3f:fe:06:fb:37:28:ee:34:d0:9d:b2: 09:77:db:b8:a4:aa:dd:f7:02:93:4f:7c:8c:26:f5: ef:b6:94:96:f4:33:f5:a5:f4:5d:af:b9:d6:87:e1: eb:b8:7f:d6:dd:31:4e:27:3a:e7:55:1e:56:7d:49: 9a:a7:73:3d:60:c8:23:43:24:e5:fa:8d:1f:c1:b8: c7:3d:2d:7c:7d:32:1a:9d:c5:87:65:3d:75:7d:73: a4:ac:f2:a5:e6:94:b8:e9:81:68:4e:9b:d8:c0:bc: 9b:25:b4:7d:37:2e:a3:86:74:2c:42:aa:e7:7d:e1: f8:20:1f:ce:6f:99:27:a0:fc:81:ee:77:47:15:3f: 42:8e:8e:9b:cc:90:43:0a:d6:96:e3:34:35:b3:97: d1:b8:e1:76:e6:2b:56:68:8e:bc:8f:81:d4:44:42: 5b:84:93:79:c3:81:2c:2c:d0:d0:12:c6:2a:4f:d0: aa:2f:f4:b8:50:48:54:51:29:a7:de:f4:19:8a:e4: 1d:49:56:16:f6:80:a5:9f:22:63:13:59:49:4d:20: 49:69:41:5a:7a:f7:4d:aa:2d:c2:80:87:06:44:68: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:93:26:A7:4B:49:88:BD:37:A1:4D:A5:AF:71:0E:1E:18:B1:0B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl X509v3 Authority Key Identifier: keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer sbgp-ipAddrBlock: critical IPv4: 23.168.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c5:7d:71:ca:ea:14:ba:81:5f:ec:73:9b:db:5f:a1:c0:97: 22:c5:a5:7e:80:49:26:ba:ba:43:18:4d:6c:3d:4d:e2:f6:3b: 89:e7:d4:74:75:a9:83:84:af:6f:57:12:46:a2:01:a7:b9:04: 21:9b:70:00:15:df:03:7e:e1:bf:87:6c:75:b7:2d:65:b9:43: e9:e7:fa:87:14:60:01:06:90:4a:76:f1:11:9a:12:cc:8a:a5: 5c:40:d9:52:24:d6:2b:83:80:bd:7a:c7:c4:6d:95:e0:e8:e6: 8c:c9:52:fb:f5:68:5b:71:16:c4:f7:71:d2:d9:d5:39:86:e6: aa:5c:9d:0b:e4:ac:ab:e7:62:b5:7f:a9:0c:34:33:0e:8d:59: 59:ae:ce:fa:4a:6b:ef:6f:e8:29:9f:43:0b:0e:d9:98:2b:83: 6c:40:d0:ef:60:94:96:4c:2f:80:3c:a3:b2:97:30:31:b4:f2: cb:a8:83:62:77:91:f5:b0:1c:99:8d:20:23:72:a3:59:2b:e5: 81:fb:d7:d7:e8:a1:46:7b:67:10:3c:ac:4c:f6:de:57:02:38: 01:94:b3:84:91:5d:70:eb:89:f7:ad:ee:c8:fa:1a:7d:4d:ba: 9e:de:de:49:50:da:79:ec:0b:70:1b:82:03:77:f3:7b:b9:b8: a4:f3:23:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5AHTf/wtozcyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThlMjY0OGUtODg2OS00YWZkLWEwYmQtYTFhYzdjMWYy M2RiMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjM4M2I1OGQtZjVkNy00NTg2LTg3NjQtNjc5Nzk2MDE3NjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtTQDMIbmGl4LAotIn9wEHPE4S7LWBOibgH5 g6VF4GrEP/4G+zco7jTQnbIJd9u4pKrd9wKTT3yMJvXvtpSW9DP1pfRdr7nWh+Hr uH/W3TFOJzrnVR5WfUmap3M9YMgjQyTl+o0fwbjHPS18fTIancWHZT11fXOkrPKl 5pS46YFoTpvYwLybJbR9Ny6jhnQsQqrnfeH4IB/Ob5knoPyB7ndHFT9Cjo6bzJBD CtaW4zQ1s5fRuOF25itWaI68j4HUREJbhJN5w4EsLNDQEsYqT9CqL/S4UEhUUSmn 3vQZiuQdSVYW9oClnyJjE1lJTSBJaUFaevdNqi3CgIcGRGh18wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuTJqdLSYi9N6FNpa9xDh4YsQvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUy NjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2MxZjIzZGIvZDFhMTZlODctMTliOS0z NGNiLTgwZjUtYjJjZDAyNjUwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMThlMjY0OGUtODg2OS00YWZkLWEw YmQtYTFhYzdjMWYyM2RiLzE4ZTI2NDhlLTg4NjktNGFmZC1hMGJkLWExYWM3YzFm MjNkYi5jcmwwHwYDVR0jBBgwFoAUA9CNha/VYO1h+yq5qYqSTv68/rAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFj N2MxZjIzZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6iRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnFfXHK6hS6gV/sc5vbX6HAlyLFpX6ASSa6ukMYTWw9TeL2O4nn1HR1 qYOEr29XEkaiAae5BCGbcAAV3wN+4b+HbHW3LWW5Q+nn+ocUYAEGkEp28RGaEsyK pVxA2VIk1iuDgL16x8RtleDo5ozJUvv1aFtxFsT3cdLZ1TmG5qpcnQvkrKvnYrV/ qQw0Mw6NWVmuzvpKa+9v6CmfQwsO2Zgrg2xA0O9glJZML4A8o7KXMDG08suog2J3 kfWwHJmNICNyo1kr5YH719fooUZ7ZxA8rEz23lcCOAGUs4SRXXDrifet7sj6Gn1N up7e3klQ2nnsC3AbggN383u5uKTzI9M= -----END CERTIFICATE-----Generated at Mon Aug 4 19:09:44 2025 by rpki-client