$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa File: 4cecb50a-dda5-3206-892f-841e1f8d6994.roa (raw, json) Hash identifier: q2EE/KiTK1+tcJZnF7YgIE5OdBMNohSoQT9y9n9IthI= Subject key identifier: CA:53:15:BF:D2:03:80:BD:32:41:EE:E0:E1:66:29:B5:28:F5:43:16 Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F4328584B2CF6E8EE22DCCDC0A034BC80 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 23347 IP address blocks: 23.156.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e8:ee:22:dc:cd:c0:a0:34:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=2a6d99d3-bdd8-403b-9544-24dd6c897dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:cf:7e:b1:88:50:95:92:11:7e:51:c3:93: 64:75:d9:03:d6:74:14:56:90:a1:8f:4b:6d:22:36: 8a:e8:46:df:f5:8b:b8:3f:55:69:e3:9f:d3:4d:f4: 4d:1e:ac:cd:9e:37:61:52:8a:52:38:d8:21:19:f3: 7f:9d:30:b8:ca:22:f0:af:a6:9e:4d:bf:a3:8a:68: 13:4d:2d:ca:87:3d:3c:df:06:34:92:33:05:32:7d: 21:17:be:3f:65:16:95:23:f1:79:22:11:de:98:ff: 65:94:93:e1:58:01:66:e0:35:40:74:ec:c3:36:05: fc:49:69:8b:4e:e9:22:f6:ec:04:6a:c4:a8:82:2c: f3:2b:89:f0:9b:56:b2:86:03:77:c7:79:ef:3e:1c: c5:95:a1:5c:f9:9a:97:7d:c0:ad:2f:1e:85:ba:ee: 76:3d:45:33:0a:43:9e:9c:e0:7d:9f:67:2f:00:bb: 65:e1:a3:fc:e5:d5:d9:9c:c4:5d:a1:4b:e0:23:79: c7:89:62:f5:22:50:69:ac:f7:c9:51:4e:6c:77:6c: 23:85:df:b9:6e:9e:52:8b:25:e1:03:bd:79:ba:e2: 60:5d:42:eb:0e:56:d9:6a:b5:c7:b8:c5:68:d8:7d: 33:81:ae:b2:b8:e0:57:db:ec:e7:b3:87:be:d7:92: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:53:15:BF:D2:03:80:BD:32:41:EE:E0:E1:66:29:B5:28:F5:43:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:72:a0:90:f1:7f:b9:b7:61:7c:05:5c:b2:37:f5:65:13:1e: 86:e6:a7:ea:2b:c1:4a:15:bb:a2:f8:ec:60:11:2e:b2:0f:af: 93:97:a9:7f:16:29:3f:f9:1d:f7:21:c0:88:7a:98:e4:83:f2: de:59:f1:8a:06:f0:3c:6b:c0:be:77:34:5b:6d:85:da:82:e4: d0:b0:d6:c1:05:7d:2e:7a:2b:f6:46:12:a1:6d:e0:58:51:26: 3d:37:5b:af:cd:c4:75:c2:8a:4f:2e:0a:23:aa:6b:56:77:f6: 36:d0:33:50:47:07:5b:bf:35:d7:b2:b9:95:8f:0a:3f:d2:2d: d4:33:27:ea:a5:78:17:92:a7:ae:13:f0:c9:8f:2c:9a:64:74: 6a:32:65:d8:a2:98:5a:30:c0:0d:06:36:00:e6:5a:e1:5d:f3: 73:e6:cd:e4:04:24:50:5a:77:67:b6:a7:d3:0a:71:d0:f3:1d: 8c:65:d1:74:ad:61:02:b4:b5:43:56:44:44:83:95:f2:57:1a: 4b:e1:f1:78:4c:24:2a:58:b5:fa:dc:27:1e:24:11:05:21:37: e4:84:f9:3a:0f:7a:77:08:f7:27:5f:20:d8:db:23:41:a2:28: aa:4b:d8:bf:c7:95:7a:ce:a5:30:07:2a:5b:62:5c:9c:0e:3a: 6c:96:5e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9ujuItzNwKA0vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MmE2ZDk5ZDMtYmRkOC00MDNiLTk1NDQtMjRkZDZjODk3ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWHPfrGIUJWSEX5Rw5NkddkD1nQUVpChj0tt IjaK6Ebf9Yu4P1Vp45/TTfRNHqzNnjdhUopSONghGfN/nTC4yiLwr6aeTb+jimgT TS3Khz083wY0kjMFMn0hF74/ZRaVI/F5IhHemP9llJPhWAFm4DVAdOzDNgX8SWmL Tuki9uwEasSogizzK4nwm1ayhgN3x3nvPhzFlaFc+ZqXfcCtLx6Fuu52PUUzCkOe nOB9n2cvALtl4aP85dXZnMRdoUvgI3nHiWL1IlBprPfJUU5sd2wjhd+5bp5SiyXh A715uuJgXULrDlbZarXHuMVo2H0zga6yuOBX2+zns4e+15INHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpTFb/SA4C9MkHu4OFmKbUo9UMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvNGNlY2I1MGEtZGRhNS0z MjA2LTg5MmYtODQxZTFmOGQ2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRyoJDxf7m3YXwFXLI39WUTHobmp+orwUoVu6L47GARLrIPr5OXqX8W KT/5HfchwIh6mOSD8t5Z8YoG8DxrwL53NFtthdqC5NCw1sEFfS56K/ZGEqFt4FhR Jj03W6/NxHXCik8uCiOqa1Z39jbQM1BHB1u/NdeyuZWPCj/SLdQzJ+qleBeSp64T 8MmPLJpkdGoyZdiimFowwA0GNgDmWuFd83PmzeQEJFBad2e2p9MKcdDzHYxl0XSt YQK0tUNWRESDlfJXGkvh8XhMJCpYtfrcJx4kEQUhN+SE+ToPencI9ydfINjbI0Gi KKpL2L/HlXrOpTAHKltiXJwOOmyWXnM= -----END CERTIFICATE-----Generated at Sat Oct 11 06:41:08 2025 by rpki-client