$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa File: 4611c568-faa4-3083-94c1-062a9876a795.roa (raw, json) Hash identifier: j3VA5o8T8bYfNV9nA9/xKxbHY530s4TeqHR748mtdtg= Subject key identifier: 75:0E:9A:18:C8:33:18:54:69:F6:2A:5B:AA:85:02:78:7C:F2:5A:2B Certificate issuer: /CN=268f6692-999f-4dd3-86b7-32b134a18d56 Certificate serial: 010D0C9F4328584ABD4B9BE5DA55A5DA58A6FE00 Authority key identifier: 99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 401459 IP address blocks: 23.130.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:9b:e5:da:55:a5:da:58:a6:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f6692-999f-4dd3-86b7-32b134a18d56 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=69a7403d-2505-4c09-9798-85f233ac7bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7e:6d:62:61:24:15:0a:f8:08:7a:87:77:c2: c9:74:f8:f5:1c:ab:fa:a9:5e:8d:91:21:5d:93:d7: c7:35:16:0e:ea:39:e5:fd:11:f2:8e:a9:13:a2:1c: e0:06:98:8a:21:04:af:63:65:7c:44:79:46:fd:6a: 5e:df:00:3b:e9:b9:d6:5e:be:97:3e:f8:a4:0e:95: 30:77:fa:ec:8b:77:41:af:da:60:dc:81:84:d8:10: 9b:94:2c:2f:97:3a:d3:a1:15:79:23:37:a9:e3:1a: 5a:ea:48:7e:06:e0:5f:5d:d4:3f:6f:a2:09:3b:55: 1a:dd:2a:40:0f:d4:4b:9f:07:1a:57:f0:03:88:a5: fd:e2:e0:f9:bc:9e:00:08:32:39:24:51:52:e8:0b: aa:26:74:17:3d:36:56:fa:57:47:00:5c:1b:a0:84: ab:26:c8:c1:c3:45:92:08:13:81:9b:84:5c:39:57: 67:3c:65:28:57:39:f6:f3:b8:c9:fb:31:49:ea:cf: 0b:80:3a:2b:31:96:04:07:e1:7b:2a:e7:a7:b3:d3: 44:e8:f1:b7:f8:2c:13:79:f3:d9:6f:25:46:70:85: f5:fc:a1:49:77:68:79:87:76:82:72:6e:76:36:b7: d8:29:66:4a:44:ef:04:7c:62:fa:2e:95:08:44:b3: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:9A:18:C8:33:18:54:69:F6:2A:5B:AA:85:02:78:7C:F2:5A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/4611c568-faa4-3083-94c1-062a9876a795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl X509v3 Authority Key Identifier: keyid:99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer sbgp-ipAddrBlock: critical IPv4: 23.130.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a1:f5:05:05:f3:87:f0:56:ae:68:cb:89:2a:d8:ed:66:15: 53:da:45:83:32:f9:c9:c2:ac:0b:f3:11:c4:cb:6d:48:ec:3f: 08:e5:ca:af:52:bc:c0:76:5b:bf:16:a0:98:41:83:cd:8a:6c: 2a:6f:21:93:94:3c:cb:89:5c:a5:34:e6:38:92:5f:9c:44:03: f0:b5:2b:ca:c0:0b:5b:01:18:b0:60:53:7e:a5:8a:1e:af:6f: 2e:14:cd:91:2a:8c:d2:ac:ea:fc:ea:bd:a8:bc:14:43:7c:06: 3b:41:2d:4e:34:00:d9:9b:d3:b9:3b:b7:28:cc:f5:e7:33:6a: 75:2d:7f:f4:ac:24:0e:89:74:d6:36:35:c7:fe:5f:f2:db:da: ba:25:c7:46:49:fc:c6:1b:27:c3:23:67:c3:10:f8:ac:40:9c: e9:17:89:7c:8e:1a:29:f1:f7:aa:7c:d5:a5:90:8a:4d:b2:5f: 24:81:9b:ae:8e:9d:f5:69:05:71:08:cc:d2:b7:7f:93:d3:52: e7:7f:60:e5:64:63:77:b1:40:99:c7:ee:2e:ce:6c:cb:11:47: 92:05:7f:65:da:90:4f:06:5f:4e:99:9a:02:2f:c7:39:af:ae: ba:4e:0c:4f:32:53:35:03:25:52:a7:e4:31:ca:bc:b0:a3:8d: b6:7a:a2:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5vl2lWl2lim/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY4ZjY2OTItOTk5Zi00ZGQzLTg2YjctMzJiMTM0YTE4 ZDU2MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjlhNzQwM2QtMjUwNS00YzA5LTk3OTgtODVmMjMzYWM3YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn5tYmEkFQr4CHqHd8LJdPj1HKv6qV6NkSFd k9fHNRYO6jnl/RHyjqkTohzgBpiKIQSvY2V8RHlG/Wpe3wA76bnWXr6XPvikDpUw d/rsi3dBr9pg3IGE2BCblCwvlzrToRV5Izep4xpa6kh+BuBfXdQ/b6IJO1Ua3SpA D9RLnwcaV/ADiKX94uD5vJ4ACDI5JFFS6AuqJnQXPTZW+ldHAFwboISrJsjBw0WS CBOBm4RcOVdnPGUoVzn287jJ+zFJ6s8LgDorMZYEB+F7Kuens9NE6PG3+CwTefPZ byVGcIX1/KFJd2h5h3aCcm52NrfYKWZKRO8EfGL6LpUIRLP8FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUOmhjIMxhUafYqW6qFAnh88lorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNjhm NjY5Mi05OTlmLTRkZDMtODZiNy0zMmIxMzRhMThkNTYvNDYxMWM1NjgtZmFhNC0z MDgzLTk0YzEtMDYyYTk4NzZhNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjY4ZjY2OTItOTk5Zi00ZGQzLTg2 YjctMzJiMTM0YTE4ZDU2LzI2OGY2NjkyLTk5OWYtNGRkMy04NmI3LTMyYjEzNGEx OGQ1Ni5jcmwwHwYDVR0jBBgwFoAUmYEPro6tS74cKMer2/z6JV3uR7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNjhmNjY5Mi05OTlmLTRkZDMtODZiNy0zMmIx MzRhMThkNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABah9QUF84fwVq5oy4kq2O1mFVPaRYMy+cnCrAvzEcTLbUjsPwjlyq9S vMB2W78WoJhBg82KbCpvIZOUPMuJXKU05jiSX5xEA/C1K8rAC1sBGLBgU36lih6v by4UzZEqjNKs6vzqvai8FEN8BjtBLU40ANmb07k7tyjM9eczanUtf/SsJA6JdNY2 Ncf+X/Lb2rolx0ZJ/MYbJ8MjZ8MQ+KxAnOkXiXyOGinx96p81aWQik2yXySBm66O nfVpBXEIzNK3f5PTUud/YOVkY3exQJnH7i7ObMsRR5IFf2XakE8GX06ZmgIvxzmv rrpODE8yUzUDJVKn5DHKvLCjjbZ6ovA= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:59 2025 by rpki-client