$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json) Hash identifier: nq6CJKa0t/OdJFyL9XVHzJS2OIJH3FzBVJWBzob0p8s= Subject key identifier: 70:CB:88:B4:5D:DB:98:B0:D5:D6:C2:8E:2B:E3:09:D7:79:BB:88:BB Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F43285849E225210FBC5643339AFDE370 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 16584 IP address blocks: 23.140.98.0/24 maxlen: 24 172.111.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:21:0f:bc:56:43:33:9a:fd:e3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=d0c5ae7b-5fc6-40a3-9c21-586b6b7dfd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:51:46:04:ee:e8:47:92:81:31:3c:bb:45: 4d:d3:45:7c:8d:87:92:c5:a5:d5:e8:48:98:14:f9: 30:77:70:45:75:85:4e:a9:e0:a0:e1:6d:37:c6:12: 77:b6:7d:bd:ec:e2:57:b9:20:df:c0:d3:47:84:dd: 61:cc:12:94:2d:fb:bd:e5:78:64:c0:64:a1:f4:93: 09:8c:96:2d:aa:1c:88:c9:c8:81:61:c6:7f:fd:6b: 5d:83:37:7f:bd:b0:5e:64:cc:05:bb:c5:39:7f:22: 19:f6:1f:26:97:29:fd:44:41:c3:a2:59:ca:8f:56: 77:8c:90:68:16:ba:73:cf:00:4a:9c:f1:f2:37:4e: 78:17:42:af:3f:76:4d:3e:ab:1d:b0:07:76:38:54: 49:8a:06:d8:64:33:af:5e:58:1d:c9:bf:f0:68:a7: 55:29:a9:8d:a1:51:76:9d:7c:85:08:f7:c3:36:2f: 76:ec:87:26:f4:e1:3c:c0:61:10:6f:cd:4d:aa:f7: 54:d2:fd:51:72:c0:6f:5e:58:f6:24:70:68:80:5a: 7e:e6:e6:ec:00:7c:c0:75:e4:51:44:47:1c:37:3c: a9:50:1c:0e:54:1f:68:b4:6d:22:34:7c:43:ef:7f: c9:03:17:de:40:4c:68:81:1f:d9:6e:df:0b:11:fc: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:88:B4:5D:DB:98:B0:D5:D6:C2:8E:2B:E3:09:D7:79:BB:88:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.98.0/24 172.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:11:28:30:6e:21:7c:77:65:87:ad:a5:a9:bd:a3:74:7d:80: bd:3e:11:8c:23:ca:f8:1b:bd:b3:85:7d:3e:fb:98:f9:e0:c2: d7:9b:a5:4d:15:f9:51:b3:d8:b0:03:81:8f:e6:e9:5c:b3:47: da:15:dd:f2:bf:d2:64:aa:1d:18:cf:c0:6b:77:34:6f:c2:d8: c7:25:9a:3a:67:09:df:7e:9f:de:09:f0:bb:7b:fc:ab:87:09: 8b:84:c1:b9:a6:57:d2:0a:8c:6a:2f:72:29:1a:62:3c:44:6a: 0d:5b:8c:a1:41:41:13:62:19:b4:75:17:8d:99:c0:c0:03:03: f1:35:c2:91:43:8a:76:ca:c0:be:3f:cf:b2:17:6f:2e:c9:31: d7:80:84:9b:56:2f:80:1e:08:26:de:a1:ed:61:d2:01:b9:5f: fa:64:4e:70:63:3e:26:81:bd:5f:dc:6c:bd:6a:1e:4a:b4:17: b9:ec:a9:d6:03:8d:fa:fb:20:72:55:4c:f1:ef:29:6d:ca:07: ff:df:32:48:b9:14:42:e6:fe:0b:c0:e7:e4:d2:61:f5:b2:e4: b4:35:d3:f7:bc:45:c2:b8:ec:d6:94:15:66:9a:7f:ae:b2:3d: fb:85:44:04:6e:62:b4:61:63:59:20:c0:32:75:cb:f6:68:b0: b4:c2:87:a6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEniJSEPvFZDM5r943AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZDBjNWFlN2ItNWZjNi00MGEzLTljMjEtNTg2YjZiN2RmZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPRRRgTu6EeSgTE8u0VN00V8jYeSxaXV6EiY FPkwd3BFdYVOqeCg4W03xhJ3tn297OJXuSDfwNNHhN1hzBKULfu95XhkwGSh9JMJ jJYtqhyIyciBYcZ//Wtdgzd/vbBeZMwFu8U5fyIZ9h8mlyn9REHDolnKj1Z3jJBo FrpzzwBKnPHyN054F0KvP3ZNPqsdsAd2OFRJigbYZDOvXlgdyb/waKdVKamNoVF2 nXyFCPfDNi927Icm9OE8wGEQb81NqvdU0v1RcsBvXlj2JHBogFp+5ubsAHzAdeRR REccNzypUBwOVB9otG0iNHxD73/JAxfeQExogR/Zbt8LEfzEHwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHDLiLRd25iw1dbCjivjCdd5u4i7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADURKDBuIXx3ZYetpam9o3R9gL0+EYwjyvgbvbOFfT77mPng wtebpU0V+VGz2LADgY/m6VyzR9oV3fK/0mSqHRjPwGt3NG/C2MclmjpnCd9+n94J 8Lt7/KuHCYuEwbmmV9IKjGovcikaYjxEag1bjKFBQRNiGbR1F42ZwMADA/E1wpFD inbKwL4/z7IXby7JMdeAhJtWL4AeCCbeoe1h0gG5X/pkTnBjPiaBvV/cbL1qHkq0 F7nsqdYDjfr7IHJVTPHvKW3KB//fMki5FELm/gvA5+TSYfWy5LQ10/e8RcK47NaU FWaaf66yPfuFRARuYrRhY1kgwDJ1y/ZosLTCh6Y= -----END CERTIFICATE-----Generated at Sun Jun 15 14:29:12 2025 by rpki-client