$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a/c9c4f6fb-b8c4-3980-a01f-e20d6e59fd59.roa File: c9c4f6fb-b8c4-3980-a01f-e20d6e59fd59.roa (raw, json) Hash identifier: qBwUv2NIJgAI7FOVjRRMzLehXqCuo+QMju1jyQBSVbw= Subject key identifier: 81:AE:EF:CE:E9:50:1C:16:0C:2D:A2:77:E0:20:47:C2:D1:92:6B:AB Certificate issuer: /CN=6c0880bd-e226-4c90-9199-824458cfae9a Certificate serial: 010D0C9F4328584AADF10A5101DC664B1FE5B480 Authority key identifier: 92:A6:94:8B:58:DA:D6:69:1A:BF:60:E3:D2:A0:72:CB:1D:FF:3C:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a/c9c4f6fb-b8c4-3980-a01f-e20d6e59fd59.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 394256 IP address blocks: 23.190.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a/6c0880bd-e226-4c90-9199-824458cfae9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a/6c0880bd-e226-4c90-9199-824458cfae9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0a:51:01:dc:66:4b:1f:e5:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c0880bd-e226-4c90-9199-824458cfae9a Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=2cffff0b-917d-4680-911a-90f7eb1c90b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:04:88:f4:1c:1c:e5:70:32:5b:e3:53:e5:14: 4c:b6:b2:f4:31:16:5a:f7:54:5a:fa:15:3b:ba:13: cf:6b:29:57:f8:e9:7b:08:46:b6:e6:6c:7b:8b:ab: 08:a7:2b:34:97:68:f8:64:ef:61:16:a4:09:ee:8c: 15:42:ce:68:33:b5:17:3f:ca:68:b4:8a:ea:c7:a2: 64:12:09:42:b9:1f:9f:70:bc:f9:0a:79:17:ea:64: 13:06:61:67:c4:47:0c:b1:aa:5d:03:61:43:39:71: d7:b1:42:01:6e:a2:af:e7:d7:c9:48:81:10:d5:7a: 15:a9:5a:9c:cf:2f:af:e5:77:e9:71:14:2d:59:2b: fa:17:74:48:aa:c6:37:00:dc:5c:32:1c:bc:91:94: 4b:42:c4:1f:65:9f:5d:b2:d1:0c:14:53:cd:dc:6f: 57:cc:54:45:0e:04:07:ff:b3:ba:38:ff:95:01:fc: 00:f5:7c:22:15:72:df:e1:66:de:4f:ad:0c:4e:80: 2d:a1:20:0a:68:aa:03:15:4d:9f:b2:50:59:7f:4e: fb:e8:b8:0e:15:93:98:52:49:9e:b5:f1:8f:e1:2f: 84:f3:99:51:71:db:e8:62:86:44:cd:5a:bf:fc:7a: 39:71:89:d2:60:ae:5d:d8:1d:b5:8f:74:86:af:4a: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AE:EF:CE:E9:50:1C:16:0C:2D:A2:77:E0:20:47:C2:D1:92:6B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a/c9c4f6fb-b8c4-3980-a01f-e20d6e59fd59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a/6c0880bd-e226-4c90-9199-824458cfae9a.crl X509v3 Authority Key Identifier: keyid:92:A6:94:8B:58:DA:D6:69:1A:BF:60:E3:D2:A0:72:CB:1D:FF:3C:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c0880bd-e226-4c90-9199-824458cfae9a.cer sbgp-ipAddrBlock: critical IPv4: 23.190.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:43:3c:4b:d4:83:7d:85:85:65:74:78:6b:fc:2e:e5:8d:7d: 76:60:3b:46:f8:56:48:18:a9:2e:cd:1b:e0:90:bd:76:c0:cc: 4f:0c:cb:08:89:a9:26:1b:ea:3e:fd:3c:cb:16:24:7f:75:3e: fe:7e:26:f9:5c:ff:cb:c9:5d:3d:2f:4f:b0:da:aa:d9:4c:07: dd:78:71:67:d4:52:b5:5c:01:25:54:3b:22:d9:70:2d:e0:b9: 68:c4:ad:54:e7:c6:b0:1b:50:81:1c:74:b4:ad:3e:86:99:0e: 20:69:ea:3a:e0:0a:1e:f3:f1:c5:1f:1c:65:f3:18:6a:a8:3e: 3e:7b:27:18:76:f4:d2:50:c5:96:02:81:71:3f:fb:dd:3d:67: c6:44:b6:81:61:7a:07:92:83:1e:c6:52:bb:36:77:55:91:b1: 65:40:95:41:be:72:a7:50:b2:83:a8:a3:c9:76:aa:d3:f1:04: a9:9b:40:e4:ef:47:64:56:38:6f:34:b8:3f:c9:00:2d:15:4f: 5a:c9:f0:98:91:17:fb:6b:95:71:34:2d:ef:fe:0c:d1:cd:07: 7a:bb:36:3a:7d:74:7a:00:57:b7:9d:9d:f0:04:9d:a7:9e:81: 14:67:b5:36:83:ac:67:7e:0d:2d:50:2c:af:30:e1:85:2d:b8: 12:3c:53:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QpRAdxmSx/ltIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMwODgwYmQtZTIyNi00YzkwLTkxOTktODI0NDU4Y2Zh ZTlhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MmNmZmZmMGItOTE3ZC00NjgwLTkxMWEtOTBmN2ViMWM5MGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigSI9Bwc5XAyW+NT5RRMtrL0MRZa91Ra+hU7 uhPPaylX+Ol7CEa25mx7i6sIpys0l2j4ZO9hFqQJ7owVQs5oM7UXP8potIrqx6Jk EglCuR+fcLz5CnkX6mQTBmFnxEcMsapdA2FDOXHXsUIBbqKv59fJSIEQ1XoVqVqc zy+v5XfpcRQtWSv6F3RIqsY3ANxcMhy8kZRLQsQfZZ9dstEMFFPN3G9XzFRFDgQH /7O6OP+VAfwA9XwiFXLf4WbeT60MToAtoSAKaKoDFU2fslBZf0776LgOFZOYUkme tfGP4S+E85lRcdvoYoZEzVq//Ho5cYnSYK5d2B21j3SGr0pTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGu787pUBwWDC2id+AgR8LRkmurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YzA4 ODBiZC1lMjI2LTRjOTAtOTE5OS04MjQ0NThjZmFlOWEvYzljNGY2ZmItYjhjNC0z OTgwLWEwMWYtZTIwZDZlNTlmZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmMwODgwYmQtZTIyNi00YzkwLTkx OTktODI0NDU4Y2ZhZTlhLzZjMDg4MGJkLWUyMjYtNGM5MC05MTk5LTgyNDQ1OGNm YWU5YS5jcmwwHwYDVR0jBBgwFoAUkqaUi1ja1mkav2Dj0qByyx3/PP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YzA4ODBiZC1lMjI2LTRjOTAtOTE5OS04MjQ0 NThjZmFlOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF75AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFDPEvUg32FhWV0eGv8LuWNfXZgO0b4VkgYqS7NG+CQvXbAzE8MywiJ qSYb6j79PMsWJH91Pv5+Jvlc/8vJXT0vT7DaqtlMB914cWfUUrVcASVUOyLZcC3g uWjErVTnxrAbUIEcdLStPoaZDiBp6jrgCh7z8cUfHGXzGGqoPj57Jxh29NJQxZYC gXE/+909Z8ZEtoFhegeSgx7GUrs2d1WRsWVAlUG+cqdQsoOoo8l2qtPxBKmbQOTv R2RWOG80uD/JAC0VT1rJ8JiRF/trlXE0Le/+DNHNB3q7Njp9dHoAV7ednfAEnaee gRRntTaDrGd+DS1QLK8w4YUtuBI8UzQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:19 2025 by rpki-client