$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa File: 9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa (raw, json) Hash identifier: bj3TZO/niKH6okeVq+6SrPtxzDSR10M/XyGNMyE6s8I= Subject key identifier: 50:25:17:0B:9B:46:4B:69:85:8E:4A:76:ED:32:B1:8D:3D:AD:33:7E Certificate issuer: /CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306 Certificate serial: 010D0C9F4328584A6AF088AF9CA6A8DC9C66C268 Authority key identifier: 63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 399870 IP address blocks: 23.137.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:88:af:9c:a6:a8:dc:9c:66:c2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=a1765de6-8d99-4509-870f-495431571dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3c:f0:b8:fc:e0:bf:32:69:61:08:f3:b3:e9: 73:fc:f0:ae:f5:66:90:c1:dd:1f:d7:7f:83:8f:44: 19:ff:90:2f:a2:16:04:5c:60:8d:54:28:52:ec:6c: 01:c8:c7:36:6f:b0:20:34:75:3c:af:a2:56:d5:17: 4e:d0:53:12:a2:b2:68:5f:bb:7c:47:e4:e8:18:27: 22:d4:4f:26:bf:17:b8:2c:be:c4:fa:db:8a:5c:1f: 06:e4:22:48:5f:ce:18:70:63:cb:17:4e:e0:49:8e: 1f:cb:ac:18:0b:c6:bc:9e:04:ea:bf:ac:cb:c4:21: d2:21:f5:07:9b:8d:d3:bc:08:3b:79:93:a1:86:d0: 44:20:35:ec:21:1b:5e:e6:43:7c:a5:fb:6f:ea:1e: a9:6a:39:6c:a4:af:5a:dc:13:34:28:a0:77:d9:14: 06:7a:8d:fd:07:93:63:29:7f:ce:85:fa:26:78:36: c3:72:5d:73:0f:98:34:ba:f9:2f:77:38:f9:95:81: c4:aa:3f:78:0c:da:e4:89:97:2c:75:48:e7:ee:12: fd:22:c1:2d:89:57:05:0c:8d:49:5e:84:3e:ef:93: 34:02:9a:7d:61:ed:0d:b6:08:84:06:a3:50:1f:b6: 3e:4a:a9:e6:7d:0c:f2:82:1f:c4:31:07:60:93:df: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:25:17:0B:9B:46:4B:69:85:8E:4A:76:ED:32:B1:8D:3D:AD:33:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl X509v3 Authority Key Identifier: keyid:63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer sbgp-ipAddrBlock: critical IPv4: 23.137.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:48:51:ec:84:c9:5a:3d:0a:bf:20:f3:b6:fc:5c:7f:28:f4: 2c:bc:69:97:43:fa:ab:ab:fe:90:4e:8c:3a:59:eb:d0:96:7f: a5:dd:e6:60:b3:74:5b:11:98:99:e8:d7:89:23:88:43:df:ad: 55:6d:c7:b8:91:66:dd:d3:66:68:eb:b3:21:d2:48:1a:70:b4: e9:b0:eb:48:a5:e1:3f:25:37:06:f5:ca:21:84:00:38:b0:d7: d9:bb:ea:b6:3e:da:92:b1:83:0b:54:99:a5:41:6a:ed:e2:34: 55:4b:16:1e:bf:82:39:f7:1b:3b:a0:d4:4e:cd:e9:5d:8b:45: 98:04:c4:5e:01:91:12:14:46:66:3d:29:41:3d:cb:f0:7b:7b: 86:b9:1b:56:72:e2:3c:0f:cf:3a:02:f3:a1:8e:dc:b9:ea:f8: e3:a0:e4:d9:f7:b4:ee:f0:f3:ac:aa:c4:c4:f8:1a:4b:94:04: 91:1d:4c:71:28:45:8a:26:34:a1:25:38:f5:f8:84:48:da:ca: 25:78:7c:56:6b:5d:e3:af:75:bc:07:06:a8:0d:d5:5b:3d:d3: af:be:09:6d:5c:19:cd:01:c6:76:17:cf:7f:ba:45:15:25:11: 3e:ad:f0:e0:74:15:4a:3a:68:0f:20:af:31:06:84:68:3e:5e: 5d:18:07:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpq8IivnKao3JxmwmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IwYmJkN2UtY2VjZi00ZjEyLTkwMDktMDQ4YzBjZmJm MzA2MB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk YTE3NjVkZTYtOGQ5OS00NTA5LTg3MGYtNDk1NDMxNTcxZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjzwuPzgvzJpYQjzs+lz/PCu9WaQwd0f13+D j0QZ/5AvohYEXGCNVChS7GwByMc2b7AgNHU8r6JW1RdO0FMSorJoX7t8R+ToGCci 1E8mvxe4LL7E+tuKXB8G5CJIX84YcGPLF07gSY4fy6wYC8a8ngTqv6zLxCHSIfUH m43TvAg7eZOhhtBEIDXsIRte5kN8pftv6h6pajlspK9a3BM0KKB32RQGeo39B5Nj KX/OhfomeDbDcl1zD5g0uvkvdzj5lYHEqj94DNrkiZcsdUjn7hL9IsEtiVcFDI1J XoQ+75M0App9Ye0NtgiEBqNQH7Y+SqnmfQzygh/EMQdgk99S3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAlFwubRktphY5Kdu0ysY09rTN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBi YmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhjMGNmYmYzMDYvOWExYTMyNDktNzFkYy0z N2EyLWE3ZWQtNjMzZDJmNmQxYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2IwYmJkN2UtY2VjZi00ZjEyLTkw MDktMDQ4YzBjZmJmMzA2LzNiMGJiZDdlLWNlY2YtNGYxMi05MDA5LTA0OGMwY2Zi ZjMwNi5jcmwwHwYDVR0jBBgwFoAUY9+yo6uZoJShuuid+Uf9EijBrBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBiYmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhj MGNmYmYzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVIUeyEyVo9Cr8g87b8XH8o9Cy8aZdD+qur/pBOjDpZ69CWf6Xd5mCz dFsRmJno14kjiEPfrVVtx7iRZt3TZmjrsyHSSBpwtOmw60il4T8lNwb1yiGEADiw 19m76rY+2pKxgwtUmaVBau3iNFVLFh6/gjn3Gzug1E7N6V2LRZgExF4BkRIURmY9 KUE9y/B7e4a5G1Zy4jwPzzoC86GO3Lnq+OOg5Nn3tO7w86yqxMT4GkuUBJEdTHEo RYomNKElOPX4hEjayiV4fFZrXeOvdbwHBqgN1Vs906++CW1cGc0BxnYXz3+6RRUl ET6t8OB0FUo6aA8grzEGhGg+Xl0YByA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:11 2025 by rpki-client