$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/9a06a01f-898f-3d8b-8e52-5e8c1628c1a0.roa File: 9a06a01f-898f-3d8b-8e52-5e8c1628c1a0.roa (raw, json) Hash identifier: 4ST0yFcCiPsnBD4bvIsoRUT0nx+cT7ZNZafmYXcPnrs= Subject key identifier: 73:CE:0A:32:D1:7B:61:E8:5A:AE:98:95:B1:60:A0:16:BA:74:F7:30 Certificate issuer: /CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Certificate serial: 010D0C9F4328584AA44673F8C589FF026F8CE500 Authority key identifier: 44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/9a06a01f-898f-3d8b-8e52-5e8c1628c1a0.roa Signing time: Sat 26 Jul 2025 01:55:17 +0000 ROA not before: Sat 26 Jul 2025 01:55:17 +0000 ROA not after: Fri 24 Oct 2025 01:55:17 +0000 asID: 26042 IP address blocks: 23.142.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:46:73:f8:c5:89:ff:02:6f:8c:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Validity Not Before: Jul 26 01:55:17 2025 GMT Not After : Oct 24 01:55:17 2025 GMT Subject: CN=dcb254ba-2540-4646-8ee9-4096d8042093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f9:64:10:1e:ed:09:8b:10:e6:a2:3d:d5:81: fb:36:e7:8c:e2:e0:8c:e6:35:31:d1:a1:a4:1b:86: ec:06:47:ff:56:c3:17:e0:bf:65:98:54:6f:cd:e6: f1:37:01:4e:08:24:58:02:26:ac:2f:27:59:b3:70: 62:3c:a6:2e:0b:ef:ae:46:27:d4:af:a7:6d:ea:f5: 04:41:dd:70:b1:e3:e3:26:83:5c:98:07:36:97:da: 4a:53:4e:d7:bb:48:a8:12:87:e9:1f:bc:1b:0a:49: 2e:09:df:80:16:6a:22:8e:1d:1a:4b:a2:10:8a:8b: 87:df:c6:dd:38:3e:96:2d:34:fa:5e:bb:10:42:2d: f5:54:28:20:e4:01:9c:98:81:fb:a5:3d:21:0b:8d: fb:60:b5:72:cf:9b:ac:9f:c8:11:51:19:72:2c:c9: ec:cf:2e:72:77:fc:da:11:4e:ca:f4:b7:49:a4:b9: b3:d0:80:10:e7:03:f5:e8:db:68:62:7a:d7:59:e4: 59:bb:6b:14:40:67:a5:ff:3d:c7:ae:a8:9e:97:78: 1c:3d:1f:d6:e5:36:16:e4:59:e1:c8:e0:4e:c4:68: a8:f6:a6:d1:64:7a:50:09:ca:3f:18:23:22:7f:67: aa:72:8a:13:4d:8d:6c:89:36:41:e4:56:87:32:a6: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CE:0A:32:D1:7B:61:E8:5A:AE:98:95:B1:60:A0:16:BA:74:F7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/9a06a01f-898f-3d8b-8e52-5e8c1628c1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.crl X509v3 Authority Key Identifier: keyid:44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a9:76:26:d9:a5:14:b1:0f:84:54:ef:99:4f:6a:b8:10:8b: 81:6b:7d:f9:f6:02:02:d3:eb:de:25:5b:86:ef:61:fc:0f:d1: 59:bc:e2:ca:ed:83:3a:cb:d4:37:01:ac:54:ef:c9:f0:a4:36: b2:d7:6a:81:c3:32:21:36:d3:89:2e:9c:81:cb:f7:77:45:44: a9:c1:8e:ed:a7:2b:b6:ec:9d:5e:3f:14:cc:27:3a:31:94:de: 39:02:7b:44:ab:eb:47:b4:fb:df:f1:5c:07:c0:30:94:3e:b2: 02:e5:e0:c9:ba:d8:fc:36:0a:7e:b4:30:5f:c4:2c:1a:d6:4e: 4b:b4:ae:05:74:33:bc:ec:ad:57:8b:77:9b:80:1e:81:0a:04: cb:11:da:63:39:08:57:24:d3:74:1e:97:f1:6f:3d:82:5e:bf: d2:9c:59:95:92:6d:39:98:52:be:e1:e1:1e:05:57:a7:ea:18: e4:ed:67:ff:1f:02:df:6c:12:c5:e9:4b:1b:6c:9a:98:e1:a9: 1e:08:f9:5e:70:fa:6d:b3:21:a3:cd:49:02:9e:58:50:64:c7: ec:82:48:77:fd:e3:a4:4c:cb:33:a8:92:ef:21:9b:21:95:6e: 68:55:01:e0:96:80:1e:15:fc:11:e4:39:02:15:c6:27:09:be: b0:37:91:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkRnP4xYn/Am+M5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZTYzZDItZDA3Zi00OTU5LThmZGUtNTY5ZmQxNzY3 ZDdiMB4XDTI1MDcyNjAxNTUxN1oXDTI1MTAyNDAxNTUxN1owLzEtMCsGA1UEAxMk ZGNiMjU0YmEtMjU0MC00NjQ2LThlZTktNDA5NmQ4MDQyMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPlkEB7tCYsQ5qI91YH7NueM4uCM5jUx0aGk G4bsBkf/VsMX4L9lmFRvzebxNwFOCCRYAiasLydZs3BiPKYuC++uRifUr6dt6vUE Qd1wsePjJoNcmAc2l9pKU07Xu0ioEofpH7wbCkkuCd+AFmoijh0aS6IQiouH38bd OD6WLTT6XrsQQi31VCgg5AGcmIH7pT0hC437YLVyz5usn8gRURlyLMnszy5yd/za EU7K9LdJpLmz0IAQ5wP16NtoYnrXWeRZu2sUQGel/z3Hrqiel3gcPR/W5TYW5Fnh yOBOxGio9qbRZHpQCco/GCMif2eqcooTTY1siTZB5FaHMqZmLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPOCjLRe2HoWq6YlbFgoBa6dPcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZDJl NjNkMi1kMDdmLTQ5NTktOGZkZS01NjlmZDE3NjdkN2IvOWEwNmEwMWYtODk4Zi0z ZDhiLThlNTItNWU4YzE2MjhjMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2QyZTYzZDItZDA3Zi00OTU5LThm ZGUtNTY5ZmQxNzY3ZDdiL2NkMmU2M2QyLWQwN2YtNDk1OS04ZmRlLTU2OWZkMTc2 N2Q3Yi5jcmwwHwYDVR0jBBgwFoAURBxVfGHi57F+aB0D/Ec5mvWnEh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZDJlNjNkMi1kMDdmLTQ5NTktOGZkZS01Njlm ZDE3NjdkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIupdibZpRSxD4RU75lPargQi4Frffn2AgLT694lW4bvYfwP0Vm84srt gzrL1DcBrFTvyfCkNrLXaoHDMiE204kunIHL93dFRKnBju2nK7bsnV4/FMwnOjGU 3jkCe0Sr60e0+9/xXAfAMJQ+sgLl4Mm62Pw2Cn60MF/ELBrWTku0rgV0M7zsrVeL d5uAHoEKBMsR2mM5CFck03Qel/FvPYJev9KcWZWSbTmYUr7h4R4FV6fqGOTtZ/8f At9sEsXpSxtsmpjhqR4I+V5w+m2zIaPNSQKeWFBkx+yCSHf946RMyzOoku8hmyGV bmhVAeCWgB4V/BHkOQIVxicJvrA3kXM= -----END CERTIFICATE-----Generated at Mon Aug 4 19:02:59 2025 by rpki-client