$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa File: e7592285-1d81-39f4-b9ef-2e69e22050f1.roa (raw, json) Hash identifier: bksQXgX5sK+rU1qKygwdY0dFCj1mQDjnXFlx8DlIhSY= Subject key identifier: E8:D9:00:6A:EE:1B:91:64:06:08:4E:83:DC:2B:64:67:E0:B5:B5:09 Certificate issuer: /CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325 Certificate serial: 010D0C9F4328584A7E7B57315D30739CC6FBAF80 Authority key identifier: 09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 19710 IP address blocks: 23.138.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:57:31:5d:30:73:9c:c6:fb:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=a6f5367f-9bf2-497f-9762-d8d9b2f93994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:27:6e:ac:49:2c:b7:a3:42:1d:59:0c:29: e6:84:cc:2d:7e:c6:8d:e5:c8:c8:b3:c0:31:81:d3: f2:56:3f:6a:d2:3f:a4:4b:bd:7b:25:72:0b:5b:c8: 3c:b4:0f:a7:27:3c:6c:06:7f:2d:c6:42:6d:d6:7b: 9a:2d:c6:e9:01:56:39:53:91:78:c6:83:b2:2a:1b: 71:04:36:82:95:b6:8e:46:53:b1:94:be:4c:72:8e: 9a:12:b5:ff:9b:c1:ad:4a:f9:36:5e:06:cc:42:9c: 6c:46:71:ef:fa:2f:72:8b:23:36:c5:92:bf:a8:f9: 9d:b1:4a:37:6b:9d:35:a9:61:33:72:16:ae:de:1e: b0:5c:5b:01:23:fd:89:79:06:11:88:a7:84:e3:bc: ff:18:b5:60:11:f3:b7:7e:3b:b6:e1:f6:b8:4d:5b: 1d:27:c5:8c:3d:12:eb:96:06:ce:92:71:c9:58:08: b1:16:52:de:7f:14:d3:7a:c8:a4:0a:a4:7c:3d:5a: 86:4c:f0:ed:32:21:f1:c3:86:ee:57:5c:6f:5b:1f: e0:d0:2e:1d:8f:a4:b7:90:1c:9c:ca:28:5c:05:6d: c6:3e:d0:43:fa:78:fc:4e:2d:cf:a1:e5:c9:c7:68: cb:02:7d:ea:a0:ac:a7:a8:89:0c:8d:db:da:6a:29: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D9:00:6A:EE:1B:91:64:06:08:4E:83:DC:2B:64:67:E0:B5:B5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl X509v3 Authority Key Identifier: keyid:09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer sbgp-ipAddrBlock: critical IPv4: 23.138.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:63:29:c6:2f:b7:3c:fe:dd:3c:be:5f:2d:34:37:37:6d:22: fc:8f:40:a3:83:8a:70:06:35:fa:fe:3a:df:9d:a8:66:0d:7c: 0a:ea:63:14:b9:a8:d5:e2:09:8a:f8:e6:ee:d6:40:a6:04:c5: 30:8c:19:d0:9f:0c:9c:bf:6b:82:35:92:c0:83:95:d1:55:4c: f7:f7:d5:70:69:d2:dd:4c:d1:c8:19:5b:da:9a:5e:f6:d2:7d: 8b:ff:08:c8:ee:24:4c:94:bc:29:44:e1:72:ac:70:ae:ea:cc: d7:e9:96:3d:ad:23:82:f1:45:85:63:f0:16:af:ba:c0:9a:d7: 0c:63:6e:3a:ac:fa:0d:c5:7d:05:b7:96:78:12:53:64:0d:ad: 56:18:bb:a8:fc:25:49:58:1d:ab:df:75:83:65:4c:46:5c:19: d1:ea:ce:ee:0b:bb:e8:71:3d:03:86:84:1f:ab:44:93:3e:7b: 7c:0b:fd:45:5f:36:52:19:3d:be:3e:01:81:04:ed:37:5a:d2: 86:88:77:75:57:bf:99:ea:e7:78:66:09:d4:4e:29:ef:09:9c: 76:2a:4f:85:42:44:71:de:fe:47:45:96:48:79:6c:97:e7:12: 8b:b2:f9:ed:0f:b6:bc:3f:8f:b5:d1:f0:9c:4f:f6:ff:d7:a6: 36:b4:3e:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1cxXTBznMb7r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTEyZTJmMmYtYzAzMS00YWEzLWIwZDQtNTQwMGFhNWE0 MzI1MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YTZmNTM2N2YtOWJmMi00OTdmLTk3NjItZDhkOWIyZjkzOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueUnbqxJLLejQh1ZDCnmhMwtfsaN5cjIs8Ax gdPyVj9q0j+kS717JXILW8g8tA+nJzxsBn8txkJt1nuaLcbpAVY5U5F4xoOyKhtx BDaClbaORlOxlL5Mco6aErX/m8GtSvk2XgbMQpxsRnHv+i9yiyM2xZK/qPmdsUo3 a501qWEzchau3h6wXFsBI/2JeQYRiKeE47z/GLVgEfO3fju24fa4TVsdJ8WMPRLr lgbOknHJWAixFlLefxTTesikCqR8PVqGTPDtMiHxw4buV1xvWx/g0C4dj6S3kByc yihcBW3GPtBD+nj8Ti3PoeXJx2jLAn3qoKynqIkMjdvaaimxtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjZAGruG5FkBghOg9wrZGfgtbUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81MTJl MmYyZi1jMDMxLTRhYTMtYjBkNC01NDAwYWE1YTQzMjUvZTc1OTIyODUtMWQ4MS0z OWY0LWI5ZWYtMmU2OWUyMjA1MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTEyZTJmMmYtYzAzMS00YWEzLWIw ZDQtNTQwMGFhNWE0MzI1LzUxMmUyZjJmLWMwMzEtNGFhMy1iMGQ0LTU0MDBhYTVh NDMyNS5jcmwwHwYDVR0jBBgwFoAUCYh2sRsVtPpVDOhe3gUh8CV1kswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81MTJlMmYyZi1jMDMxLTRhYTMtYjBkNC01NDAw YWE1YTQzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4o0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9jKcYvtzz+3Ty+Xy00NzdtIvyPQKODinAGNfr+Ot+dqGYNfArqYxS5 qNXiCYr45u7WQKYExTCMGdCfDJy/a4I1ksCDldFVTPf31XBp0t1M0cgZW9qaXvbS fYv/CMjuJEyUvClE4XKscK7qzNfplj2tI4LxRYVj8BavusCa1wxjbjqs+g3FfQW3 lngSU2QNrVYYu6j8JUlYHavfdYNlTEZcGdHqzu4Lu+hxPQOGhB+rRJM+e3wL/UVf NlIZPb4+AYEE7Tda0oaId3VXv5nq53hmCdROKe8JnHYqT4VCRHHe/kdFlkh5bJfn Eouy+e0Ptrw/j7XR8JxP9v/Xpja0Pug= -----END CERTIFICATE-----Generated at Sun Aug 10 21:00:33 2025 by rpki-client