$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/d775b141-6001-32a9-944c-629fbf45ffb0.roa File: d775b141-6001-32a9-944c-629fbf45ffb0.roa (raw, json) Hash identifier: jpl2BPtlyJFYvrlrB4LXJaJ12d0fNUXcYhe/Nc6gz3k= Subject key identifier: 7D:0B:20:65:57:D7:07:E0:49:E8:34:47:5A:17:72:98:A8:B6:35:E7 Certificate issuer: /CN=89278746-5270-4955-a4eb-d96ac3a3dce1 Certificate serial: 010D0C9F4328584AABFE97003A8658958EB17E60 Authority key identifier: A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/d775b141-6001-32a9-944c-629fbf45ffb0.roa Signing time: Mon 28 Jul 2025 20:16:57 +0000 ROA not before: Mon 28 Jul 2025 20:16:57 +0000 ROA not after: Sun 26 Oct 2025 20:16:57 +0000 asID: 401831 IP address blocks: 23.142.236.0/24 maxlen: 24 2604:17e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:fe:97:00:3a:86:58:95:8e:b1:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89278746-5270-4955-a4eb-d96ac3a3dce1 Validity Not Before: Jul 28 20:16:57 2025 GMT Not After : Oct 26 20:16:57 2025 GMT Subject: CN=c9fd8204-0f01-4b7d-bccc-8241cf4102cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:32:7e:c0:1a:7b:86:63:fc:88:62:1d:dd: 15:05:61:45:1d:34:da:0f:50:3a:12:1e:da:be:a2: f7:e3:3e:55:c8:e4:8d:c6:33:70:3a:f5:0b:20:28: 8b:0d:cc:97:89:28:f2:96:58:ab:53:40:66:d4:67: da:9d:ca:61:19:fd:b0:ff:7f:29:05:2d:e2:6c:7a: 92:3a:3f:b0:94:16:27:39:79:5c:2e:8c:af:bd:b7: ac:f9:a9:a1:33:0f:0f:c8:0e:63:47:a0:53:22:97: 2f:1f:fa:2c:0e:90:38:1c:e1:3f:b1:d3:29:78:a1: 70:05:38:ed:1e:97:71:4f:53:3e:96:47:7c:fe:e4: 12:26:b3:72:7f:b3:de:ed:42:28:d7:ac:c2:f3:31: ad:d0:ce:75:7e:d9:c8:f9:72:da:a9:2d:2e:e0:35: d5:b7:bd:0a:e7:6d:26:8b:03:cd:d6:97:ca:12:ab: 60:38:1b:5f:1d:e3:c3:58:8d:ce:43:f4:bb:6a:f2: de:e0:85:72:79:54:83:3d:fe:b3:94:ce:9f:2c:fb: d5:c1:ae:43:26:b6:ae:b8:74:92:7a:8d:51:59:82: a5:3a:cf:bd:f4:96:7e:ce:24:f3:d0:76:94:f9:9b: fb:d7:dd:52:5d:bf:96:c8:0c:91:b0:b6:d3:5b:64: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0B:20:65:57:D7:07:E0:49:E8:34:47:5A:17:72:98:A8:B6:35:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/d775b141-6001-32a9-944c-629fbf45ffb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl X509v3 Authority Key Identifier: keyid:A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer sbgp-ipAddrBlock: critical IPv4: 23.142.236.0/24 IPv6: 2604:17e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:65:af:3c:fe:a6:da:0c:c4:b1:7d:1a:8c:b0:09:96:7a:2f: 6f:8d:50:f0:aa:2c:c9:d3:3c:07:9f:87:90:2a:4e:59:76:db: ca:e0:b1:49:7a:fe:f7:47:f4:e5:0c:ea:ce:c7:1a:33:db:74: 9f:53:88:4d:cc:5c:7c:7d:65:d7:ca:9d:21:a8:86:70:62:5b: e7:e9:4b:01:95:b6:ed:20:d4:31:8c:e4:c7:54:a2:3a:21:cf: 64:83:b3:6c:42:92:7e:56:b8:3f:29:9c:13:66:49:35:b1:17: 24:05:cb:f8:50:0a:5d:ae:bf:e3:65:e8:a4:00:4d:a8:e7:96: 87:0f:14:f4:49:9b:27:fb:6d:72:01:e9:35:ef:3d:0a:e0:5e: c7:9e:3f:cc:40:7a:67:c3:f2:f9:a6:37:6d:13:ce:ff:08:c1: fa:d6:e5:f4:75:d6:bf:86:e5:fb:e0:36:1a:48:03:61:04:22: ae:85:c2:60:30:54:44:06:78:04:8b:43:2f:91:55:8e:86:e4: 9e:65:10:35:81:9f:80:47:1d:cf:1d:bb:8f:c4:48:be:e9:fe: f9:6e:d2:b1:97:6f:e1:2c:f7:0a:dd:5b:e6:bf:e4:bf:6f:2c: 97:c5:3c:94:77:0d:43:ee:4d:bd:fe:f8:6b:93:a4:a4:73:3e: 1d:17:a6:9b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqr/pcAOoZYlY6xfmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkyNzg3NDYtNTI3MC00OTU1LWE0ZWItZDk2YWMzYTNk Y2UxMB4XDTI1MDcyODIwMTY1N1oXDTI1MTAyNjIwMTY1N1owLzEtMCsGA1UEAxMk YzlmZDgyMDQtMGYwMS00YjdkLWJjY2MtODI0MWNmNDEwMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurAyfsAae4Zj/IhiHd0VBWFFHTTaD1A6Eh7a vqL34z5VyOSNxjNwOvULICiLDcyXiSjyllirU0Bm1GfancphGf2w/38pBS3ibHqS Oj+wlBYnOXlcLoyvvbes+amhMw8PyA5jR6BTIpcvH/osDpA4HOE/sdMpeKFwBTjt HpdxT1M+lkd8/uQSJrNyf7Pe7UIo16zC8zGt0M51ftnI+XLaqS0u4DXVt70K520m iwPN1pfKEqtgOBtfHePDWI3OQ/S7avLe4IVyeVSDPf6zlM6fLPvVwa5DJrauuHSS eo1RWYKlOs+99JZ+ziTz0HaU+Zv7191SXb+WyAyRsLbTW2QSfwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFH0LIGVX1wfgSeg0R1oXcpiotjXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84OTI3 ODc0Ni01MjcwLTQ5NTUtYTRlYi1kOTZhYzNhM2RjZTEvZDc3NWIxNDEtNjAwMS0z MmE5LTk0NGMtNjI5ZmJmNDVmZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODkyNzg3NDYtNTI3MC00OTU1LWE0 ZWItZDk2YWMzYTNkY2UxLzg5Mjc4NzQ2LTUyNzAtNDk1NS1hNGViLWQ5NmFjM2Ez ZGNlMS5jcmwwHwYDVR0jBBgwFoAUqert7nmv8bYRdylxsdovFPYCBJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84OTI3ODc0Ni01MjcwLTQ5NTUtYTRlYi1kOTZh YzNhM2RjZTEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF47sMA0E AgACMAcDBQAmBBfgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACdlrzz+ptoMxLF9GoywCZZ6L2+NUPCqLMnT PAefh5AqTll228rgsUl6/vdH9OUM6s7HGjPbdJ9TiE3MXHx9ZdfKnSGohnBiW+fp SwGVtu0g1DGM5MdUojohz2SDs2xCkn5WuD8pnBNmSTWxFyQFy/hQCl2uv+Nl6KQA TajnlocPFPRJmyf7bXIB6TXvPQrgXseeP8xAemfD8vmmN20Tzv8IwfrW5fR11r+G 5fvgNhpIA2EEIq6FwmAwVEQGeASLQy+RVY6G5J5lEDWBn4BHHc8du4/ESL7p/vlu 0rGXb+Es9wrdW+a/5L9vLJfFPJR3DUPuTb3++GuTpKRzPh0Xpps= -----END CERTIFICATE-----Generated at Sun Aug 10 20:59:54 2025 by rpki-client