$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa File: a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa (raw, json) Hash identifier: cVYVloD3/HIBpeVhmatw0TuWt0DmCJ3j0eKJhthMPy0= Subject key identifier: 59:7B:37:99:D2:C3:B0:24:AD:00:BF:60:62:AD:D7:7E:AB:8D:09:CB Certificate issuer: /CN=23b53d83-5e68-43e6-b5fe-78a2c4546546 Certificate serial: 010D0C9F4328584A7A4B4E0EA9F0EAAA843B7C80 Authority key identifier: FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 13737 IP address blocks: 23.129.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:4e:0e:a9:f0:ea:aa:84:3b:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b53d83-5e68-43e6-b5fe-78a2c4546546 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=0893dfeb-e60c-4b0c-998c-f5787ab735bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:91:f7:b1:5b:83:e8:7d:da:77:ca:47:c2: 88:f5:da:26:a4:83:cb:1d:8f:a3:e4:07:0a:4e:89: 47:8a:93:82:61:7c:b2:95:f1:04:9b:1d:dc:48:dc: cb:1d:dc:25:7a:79:18:41:7a:0c:3e:01:bc:79:d5: d3:ea:b6:30:56:a7:01:64:0e:df:83:7f:7c:24:fc: ea:1d:3f:f2:1b:d1:6b:de:17:78:ac:17:9c:93:7f: fd:7b:86:34:70:fa:88:6d:f7:87:51:97:2b:70:d3: cf:ba:a7:0e:f2:e9:44:8f:63:65:ed:05:32:0b:c3: cb:b2:96:5c:f8:b8:a6:4e:35:c8:e1:d4:10:36:df: b6:3b:be:12:15:83:46:52:10:93:7c:2c:28:fb:42: 31:21:cf:f0:a7:b9:35:17:4c:94:fa:e0:e0:33:a3: 98:4f:2f:7e:24:5e:e0:90:5e:89:21:06:1f:50:6c: 18:c9:a0:8d:fa:c7:f7:1c:e7:7a:92:6f:45:0a:ba: 2a:ff:72:27:ee:ee:fd:df:7b:e0:e6:62:d9:bc:b1: c5:ea:88:d2:2d:a3:79:c8:08:d1:ba:79:e8:fa:ce: 4b:44:5c:55:58:0b:07:5d:16:8d:8e:d4:3c:81:93: a5:ee:fe:a1:c0:00:e0:e8:0d:4c:0c:24:c4:18:3c: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7B:37:99:D2:C3:B0:24:AD:00:BF:60:62:AD:D7:7E:AB:8D:09:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl X509v3 Authority Key Identifier: keyid:FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer sbgp-ipAddrBlock: critical IPv4: 23.129.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:27:d5:30:db:44:14:d8:89:9d:7a:38:3d:ca:f4:26:5b:3a: a5:5f:77:20:d9:05:a0:50:60:a3:f4:cc:31:52:bb:af:b0:4c: 4e:ef:c5:66:94:e4:e3:01:e5:1f:ca:0d:83:50:7e:3c:c5:30: b8:13:e0:fc:c3:07:e7:cb:a6:19:4c:0d:19:c7:eb:f3:be:64: 07:a4:99:46:20:6c:85:a9:5e:5b:6d:45:f8:02:db:f7:bd:3a: af:b3:8d:71:9f:a6:f2:54:4f:47:94:a9:0e:d0:d1:36:54:19: 36:56:88:dd:65:7b:c3:09:65:b9:56:dd:f2:68:49:ab:d1:86: 2e:54:e3:4a:21:2f:ac:e0:d9:f7:9d:b2:a6:25:aa:7c:18:4d: be:fc:cc:78:4f:5a:db:55:e4:3e:d1:a0:15:c2:cc:fa:8c:a5: 25:5b:06:d2:b1:42:49:09:5e:e6:a6:3a:06:dd:64:c4:98:4f: d5:b0:0b:5b:5f:de:c9:7e:27:03:e0:be:55:e3:de:a3:f0:2d: 2a:39:a3:63:37:82:37:64:c3:11:4a:29:6f:fd:99:53:e5:1c: 44:c5:32:de:2e:d8:88:c2:32:74:12:78:b4:7c:14:34:8e:f4: 1f:44:43:2d:62:df:54:cd:54:8b:6c:21:70:55:80:d5:ea:1b: bb:e0:ce:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S04OqfDqqoQ7fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTNkODMtNWU2OC00M2U2LWI1ZmUtNzhhMmM0NTQ2 NTQ2MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MDg5M2RmZWItZTYwYy00YjBjLTk5OGMtZjU3ODdhYjczNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVyR97Fbg+h92nfKR8KI9dompIPLHY+j5AcK TolHipOCYXyylfEEmx3cSNzLHdwlenkYQXoMPgG8edXT6rYwVqcBZA7fg398JPzq HT/yG9Fr3hd4rBeck3/9e4Y0cPqIbfeHUZcrcNPPuqcO8ulEj2Nl7QUyC8PLspZc +LimTjXI4dQQNt+2O74SFYNGUhCTfCwo+0IxIc/wp7k1F0yU+uDgM6OYTy9+JF7g kF6JIQYfUGwYyaCN+sf3HOd6km9FCroq/3In7u7933vg5mLZvLHF6ojSLaN5yAjR unno+s5LRFxVWAsHXRaNjtQ8gZOl7v6hwADg6A1MDCTEGDxAhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl7N5nSw7AkrQC/YGKt136rjQnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1 M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEyYzQ1NDY1NDYvYTZjZDM2M2EtOTU5YS0z YTZiLTk5ZmEtOGFhMmFjYTcxZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjNiNTNkODMtNWU2OC00M2U2LWI1 ZmUtNzhhMmM0NTQ2NTQ2LzIzYjUzZDgzLTVlNjgtNDNlNi1iNWZlLTc4YTJjNDU0 NjU0Ni5jcmwwHwYDVR0jBBgwFoAU+v+87d2vk5tSjRwfpyf83ZKQ3iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEy YzQ1NDY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAn1TDbRBTYiZ16OD3K9CZbOqVfdyDZBaBQYKP0zDFSu6+wTE7vxWaU 5OMB5R/KDYNQfjzFMLgT4PzDB+fLphlMDRnH6/O+ZAekmUYgbIWpXlttRfgC2/e9 Oq+zjXGfpvJUT0eUqQ7Q0TZUGTZWiN1le8MJZblW3fJoSavRhi5U40ohL6zg2fed sqYlqnwYTb78zHhPWttV5D7RoBXCzPqMpSVbBtKxQkkJXuamOgbdZMSYT9WwC1tf 3sl+JwPgvlXj3qPwLSo5o2M3gjdkwxFKKW/9mVPlHETFMt4u2IjCMnQSeLR8FDSO 9B9EQy1i31TNVItsIXBVgNXqG7vgzl4= -----END CERTIFICATE-----Generated at Sat Jul 26 19:42:08 2025 by rpki-client