$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa File: f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa (raw, json) Hash identifier: bw3wpZ4fNO+ypw1em5DgdNC+23p1orVwaiKPzwnhrJE= Subject key identifier: D6:A8:AC:8C:4E:5E:F2:72:79:06:89:1C:FF:77:4D:15:1A:4B:C4:EE Certificate issuer: /CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Certificate serial: 010D0C9F4328584AB650F958C74265C963617800 Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 401474 IP address blocks: 23.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f9:58:c7:42:65:c9:63:61:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=f45c8d9f-de14-40eb-bf5b-669181e3e272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:07:06:8b:31:26:d8:34:23:27:d9:f1:6e: 3e:2a:f3:91:6e:cd:68:a3:fe:4d:4d:d4:2d:40:02: 39:80:a2:86:31:8e:e0:3f:84:0c:c3:92:db:15:8e: e2:d1:1c:24:e2:9a:77:8d:37:55:97:fb:61:cd:60: ee:4b:cc:d6:39:98:4d:6d:cd:3e:04:a8:4c:18:e5: 68:ae:dc:c1:8e:93:5a:18:10:9a:f0:a5:60:21:b4: 2e:98:bb:97:98:68:da:cb:2a:f8:1f:e4:a2:9c:36: e8:06:69:e0:6c:9b:29:86:8e:a7:34:1d:99:bd:51: 92:9c:be:cd:aa:f1:ec:cf:35:01:78:f4:1e:c5:13: 12:57:92:aa:6a:20:49:9a:7f:96:88:9e:c0:c2:cb: 1a:17:63:a1:a0:b8:fb:14:3d:67:70:8f:cf:0f:2a: a8:ea:7f:81:8f:0f:21:26:1f:fd:d2:3f:c6:1a:d7: f3:f6:ce:c5:59:56:a1:fb:63:2f:16:bb:4a:f0:13: 74:dc:04:eb:ac:dc:0f:c5:d3:e6:bb:a4:ae:ed:89: 7c:09:d8:43:52:d0:8d:92:24:71:5c:30:f7:e3:f9: 3c:4d:ba:e3:73:ac:4b:60:83:cc:a9:40:5a:a6:02: 28:9c:be:bb:7b:a6:f2:96:19:76:24:41:bf:d1:85: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A8:AC:8C:4E:5E:F2:72:79:06:89:1C:FF:77:4D:15:1A:4B:C4:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl X509v3 Authority Key Identifier: keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer sbgp-ipAddrBlock: critical IPv4: 23.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:12:dd:8d:e5:44:0b:b3:da:7b:ac:ee:45:3a:93:51:3a:32: da:b4:fe:66:7e:73:f2:34:20:ba:d8:d8:9a:93:29:05:3c:4a: 18:a2:fc:44:ff:3f:57:ce:de:33:d6:9b:a9:f1:16:6c:98:dd: 3b:d6:45:50:c9:60:67:68:d8:3a:0a:a2:d9:d7:28:45:0a:eb: fd:50:61:71:57:50:a5:e9:5c:ca:1b:72:eb:cd:04:b1:95:4b: f2:51:07:eb:d4:8a:85:77:22:e8:c6:7d:f2:3a:39:8f:72:e5: fa:e9:cf:a3:54:f5:02:6e:57:38:36:ad:75:6c:14:d1:bd:60: fb:2a:d3:84:ea:07:17:95:d4:ae:9b:38:f0:2b:76:d5:c3:01: f4:ec:a3:6a:13:9b:2e:19:80:cc:56:a5:22:c0:10:2a:4d:cc: b4:e3:24:af:2f:79:60:87:7c:eb:c6:c9:12:10:9d:cf:17:6a: 40:da:1f:9d:ae:33:8b:5e:61:46:87:f8:a9:45:2b:67:c5:63: 83:95:31:1d:79:81:6e:cc:b6:3f:cc:d3:f0:b5:9b:d4:db:ad: c9:88:76:a2:3a:55:6e:13:9b:61:75:15:8c:ee:67:a9:ea:7c: f6:c9:aa:dc:43:21:ed:fe:48:c9:ec:87:10:26:18:36:79:89: 39:14:2b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPlYx0JlyWNheAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJlZWU1M2MtZjM3My00ZWZlLWFlZDMtNGM1MDFjOWRk ZTc4MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZjQ1YzhkOWYtZGUxNC00MGViLWJmNWItNjY5MTgxZTNlMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEsHBosxJtg0IyfZ8W4+KvORbs1oo/5NTdQt QAI5gKKGMY7gP4QMw5LbFY7i0Rwk4pp3jTdVl/thzWDuS8zWOZhNbc0+BKhMGOVo rtzBjpNaGBCa8KVgIbQumLuXmGjayyr4H+SinDboBmngbJspho6nNB2ZvVGSnL7N qvHszzUBePQexRMSV5KqaiBJmn+WiJ7AwssaF2OhoLj7FD1ncI/PDyqo6n+Bjw8h Jh/90j/GGtfz9s7FWVah+2MvFrtK8BN03ATrrNwPxdPmu6Su7Yl8CdhDUtCNkiRx XDD34/k8Tbrjc6xLYIPMqUBapgIonL67e6bylhl2JEG/0YUN5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaorIxOXvJyeQaJHP93TRUaS8TuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmVl ZTUzYy1mMzczLTRlZmUtYWVkMy00YzUwMWM5ZGRlNzgvZjJiMmVmNWUtZTE5Ny0z MjczLTk3MjEtYjlhNTc1ZTFhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJlZWU1M2MtZjM3My00ZWZlLWFl ZDMtNGM1MDFjOWRkZTc4LzQyZWVlNTNjLWYzNzMtNGVmZS1hZWQzLTRjNTAxYzlk ZGU3OC5jcmwwHwYDVR0jBBgwFoAUoDUsuAu0cqvuuZwbSmjtCLih/ccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmVlZTUzYy1mMzczLTRlZmUtYWVkMy00YzUw MWM5ZGRlNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwS3Y3lRAuz2nus7kU6k1E6Mtq0/mZ+c/I0ILrY2JqTKQU8Shii/ET/ P1fO3jPWm6nxFmyY3TvWRVDJYGdo2DoKotnXKEUK6/1QYXFXUKXpXMobcuvNBLGV S/JRB+vUioV3IujGffI6OY9y5frpz6NU9QJuVzg2rXVsFNG9YPsq04TqBxeV1K6b OPArdtXDAfTso2oTmy4ZgMxWpSLAECpNzLTjJK8veWCHfOvGyRIQnc8XakDaH52u M4teYUaH+KlFK2fFY4OVMR15gW7Mtj/M0/C1m9TbrcmIdqI6VW4Tm2F1FYzuZ6nq fPbJqtxDIe3+SMnshxAmGDZ5iTkUK1I= -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:40 2025 by rpki-client