$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/0aa18a53-a661-3e18-ac3e-9afeb7768f50.roa File: 0aa18a53-a661-3e18-ac3e-9afeb7768f50.roa (raw, json) Hash identifier: JL5LYNJ07fkrEgtUnMotRnN1CCI/BFY1gK9EqQC8w+A= Subject key identifier: AE:A0:0B:E1:92:29:E4:1C:EC:74:4A:BC:41:70:BC:AC:D1:50:F7:3E Certificate issuer: /CN=21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43 Certificate serial: 010D0C9F4328584A9A2F899DB38A6CD74F47A8C0 Authority key identifier: 9C:F3:5C:78:76:1F:1C:6F:4B:D4:CC:20:7A:B8:13:45:39:00:62:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/0aa18a53-a661-3e18-ac3e-9afeb7768f50.roa Signing time: Tue 22 Jul 2025 11:11:02 +0000 ROA not before: Tue 22 Jul 2025 11:11:02 +0000 ROA not after: Mon 20 Oct 2025 11:11:02 +0000 asID: 14315 IP address blocks: 23.142.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:2f:89:9d:b3:8a:6c:d7:4f:47:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43 Validity Not Before: Jul 22 11:11:02 2025 GMT Not After : Oct 20 11:11:02 2025 GMT Subject: CN=40e7304f-b0d8-4410-9051-345a1e0e6e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:4a:46:58:97:92:63:48:0f:11:c4:09:e0: 9e:5a:6c:e4:8d:69:dc:81:01:e1:aa:04:25:72:8b: e3:ea:65:75:f9:35:bc:b8:6a:dd:43:f2:b3:5a:3b: b9:17:41:06:47:7d:4b:31:a8:e6:75:15:1f:22:3c: b1:8c:9e:0e:bf:2d:a5:b7:1a:ee:d3:11:5e:61:4b: d8:8a:b5:23:26:95:49:32:e3:c3:17:b5:3a:a8:e5: d1:55:c4:63:86:23:3b:9e:70:90:21:11:84:e0:4e: b5:17:e9:f0:1e:80:80:60:ad:6c:14:35:33:ac:b3: ab:92:1d:32:1f:62:70:c2:6e:0b:81:cd:d6:81:0b: 0e:ca:8e:7d:4e:77:44:c7:2f:3b:ba:0d:e3:fc:6f: 4f:74:7b:31:c0:bf:02:50:14:f8:a1:50:f4:ae:06: 41:16:d3:93:0b:d6:f1:a6:ca:54:ed:ea:04:88:23: 84:65:88:19:36:51:e9:7e:0c:94:dd:86:8b:d0:50: ba:47:6f:5c:55:72:c2:e0:2c:24:c3:4f:b8:fe:d1: 96:9e:bd:26:97:45:72:ba:6d:35:0c:de:78:88:ef: 63:a5:77:3e:ed:0c:1e:15:94:31:29:b8:a9:ff:45: 42:0d:53:21:c2:64:70:cb:36:43:e6:00:8d:29:29: 13:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A0:0B:E1:92:29:E4:1C:EC:74:4A:BC:41:70:BC:AC:D1:50:F7:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/0aa18a53-a661-3e18-ac3e-9afeb7768f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.crl X509v3 Authority Key Identifier: keyid:9C:F3:5C:78:76:1F:1C:6F:4B:D4:CC:20:7A:B8:13:45:39:00:62:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.cer sbgp-ipAddrBlock: critical IPv4: 23.142.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e6:43:7a:2c:52:d1:98:b9:d0:11:31:4d:1a:dd:50:d3:16: 42:e5:8e:4c:7e:65:ff:35:fe:8f:ca:15:f3:7b:57:e5:14:90: 0b:ef:3c:77:b6:9d:95:c8:78:3a:00:e8:33:2a:0b:ee:58:e0: 8f:ce:f3:3e:43:c9:58:4c:29:3a:fc:d4:9a:4c:23:a2:68:e0: 71:8c:15:8a:ea:a6:32:76:05:d7:57:4b:f6:2a:71:cd:7f:cf: be:8f:13:35:90:f6:27:ca:56:6b:bd:9d:cb:f0:c4:d9:80:99: 86:cc:5d:b0:fe:33:6c:44:0d:93:c4:b9:c0:cf:3e:46:13:8b: 15:3a:18:c3:ea:f1:d5:a9:23:56:c8:48:c7:a5:3f:76:bd:49: b4:bb:a9:f8:28:ba:b0:0c:01:a0:64:86:33:1c:c0:43:14:e1: 9b:e2:05:38:10:6a:78:1d:6d:a9:7f:8c:2f:f2:33:ad:8c:ac: 34:9d:77:fb:79:a5:79:11:05:0f:e1:97:a7:a5:e1:9c:11:d6: 5d:0c:3a:a1:e9:9f:37:44:10:01:0f:11:e4:13:f1:0c:79:32: c4:5f:56:6f:ef:89:75:7a:26:30:3f:c2:b7:76:f0:04:20:2e: aa:61:3b:c3:f4:9b:98:4f:4a:cb:1a:1b:0a:4b:87:cb:f4:0e: e2:29:df:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaL4mds4ps109HqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5MDhjZTItOWY5ZS00YjViLWI1ZGQtZTM1MWJkNGEz YTQzMB4XDTI1MDcyMjExMTEwMloXDTI1MTAyMDExMTEwMlowLzEtMCsGA1UEAxMk NDBlNzMwNGYtYjBkOC00NDEwLTkwNTEtMzQ1YTFlMGU2ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6pKRliXkmNIDxHECeCeWmzkjWncgQHhqgQl covj6mV1+TW8uGrdQ/KzWju5F0EGR31LMajmdRUfIjyxjJ4Ovy2ltxru0xFeYUvY irUjJpVJMuPDF7U6qOXRVcRjhiM7nnCQIRGE4E61F+nwHoCAYK1sFDUzrLOrkh0y H2Jwwm4Lgc3WgQsOyo59TndExy87ug3j/G9PdHsxwL8CUBT4oVD0rgZBFtOTC9bx pspU7eoEiCOEZYgZNlHpfgyU3YaL0FC6R29cVXLC4Cwkw0+4/tGWnr0ml0Vyum01 DN54iO9jpXc+7QweFZQxKbip/0VCDVMhwmRwyzZD5gCNKSkT/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6gC+GSKeQc7HRKvEFwvKzRUPc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMTkw OGNlMi05ZjllLTRiNWItYjVkZC1lMzUxYmQ0YTNhNDMvMGFhMThhNTMtYTY2MS0z ZTE4LWFjM2UtOWFmZWI3NzY4ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjE5MDhjZTItOWY5ZS00YjViLWI1 ZGQtZTM1MWJkNGEzYTQzLzIxOTA4Y2UyLTlmOWUtNGI1Yi1iNWRkLWUzNTFiZDRh M2E0My5jcmwwHwYDVR0jBBgwFoAUnPNceHYfHG9L1MwgergTRTkAYpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMTkwOGNlMi05ZjllLTRiNWItYjVkZC1lMzUx YmQ0YTNhNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF45cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7mQ3osUtGYudARMU0a3VDTFkLljkx+Zf81/o/KFfN7V+UUkAvvPHe2 nZXIeDoA6DMqC+5Y4I/O8z5DyVhMKTr81JpMI6Jo4HGMFYrqpjJ2BddXS/Yqcc1/ z76PEzWQ9ifKVmu9ncvwxNmAmYbMXbD+M2xEDZPEucDPPkYTixU6GMPq8dWpI1bI SMelP3a9SbS7qfgourAMAaBkhjMcwEMU4ZviBTgQangdbal/jC/yM62MrDSdd/t5 pXkRBQ/hl6el4ZwR1l0MOqHpnzdEEAEPEeQT8Qx5MsRfVm/viXV6JjA/wrd28AQg LqphO8P0m5hPSssaGwpLh8v0DuIp30I= -----END CERTIFICATE-----Generated at Wed Aug 6 04:13:00 2025 by rpki-client