$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/3e1ceb0b-3f06-3fe9-9aa8-f6c1f8fd847b.roa File: 3e1ceb0b-3f06-3fe9-9aa8-f6c1f8fd847b.roa (raw, json) Hash identifier: 8ilzoyq4u/tc8NiMinN3j84wl5bLD2rtHjm/2Rvktic= Subject key identifier: E0:9B:83:31:77:3A:70:98:AA:C1:1F:B9:D6:C0:46:77:1F:28:5C:CD Certificate issuer: /CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Certificate serial: 010D0C9F4328584A78881E220DAB4E71521F5100 Authority key identifier: 02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/3e1ceb0b-3f06-3fe9-9aa8-f6c1f8fd847b.roa Signing time: Thu 10 Jul 2025 09:52:01 +0000 ROA not before: Thu 10 Jul 2025 09:52:01 +0000 ROA not after: Wed 08 Oct 2025 09:52:01 +0000 asID: 5065 IP address blocks: 23.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:88:1e:22:0d:ab:4e:71:52:1f:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Validity Not Before: Jul 10 09:52:01 2025 GMT Not After : Oct 8 09:52:01 2025 GMT Subject: CN=3d1dd5d7-b06a-44db-9bda-bd4c49ec863a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:27:34:bd:b4:57:4e:53:61:5c:1a:2a:2a: d2:42:c8:ab:db:3e:5d:e1:95:95:4b:3c:82:32:5a: 17:a8:13:5b:4c:ba:a9:9e:ab:e5:c7:aa:4d:74:01: 09:51:1a:fb:a4:74:50:a9:48:ef:e3:53:52:04:4a: 52:16:3a:a2:ab:a8:ca:3b:b5:fa:50:0d:d6:fe:39: b4:a8:da:06:75:25:ad:42:b0:d7:95:07:63:ed:86: f2:fb:88:48:13:07:02:73:cd:23:ae:5e:fb:b7:0e: 5c:ab:de:61:7b:f7:7b:5b:c5:41:f4:ca:87:2a:5e: c1:24:96:b3:96:b7:d6:2d:e1:47:e0:bc:58:5b:7b: e7:10:39:9d:1c:53:9b:3f:49:ae:98:9e:e8:11:c2: f5:52:2d:0a:be:53:55:90:c3:32:0e:10:d8:e5:a7: 29:23:4b:b6:6c:06:46:e0:45:20:7a:39:65:be:11: 85:8a:49:73:d4:b8:bc:3d:56:76:a0:b7:8e:87:a6: 3b:5e:e0:33:20:02:2a:7a:f9:5a:49:92:aa:0a:0c: a3:e8:22:fa:2c:5e:48:c0:59:3c:22:cb:2f:31:56: bf:e4:21:4e:d4:d4:e5:db:68:4b:aa:93:cf:3f:fa: 93:2c:6b:9c:d6:46:c0:ac:88:20:05:c4:4d:92:b8: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9B:83:31:77:3A:70:98:AA:C1:1F:B9:D6:C0:46:77:1F:28:5C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/3e1ceb0b-3f06-3fe9-9aa8-f6c1f8fd847b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl X509v3 Authority Key Identifier: keyid:02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer sbgp-ipAddrBlock: critical IPv4: 23.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b9:d9:7a:9a:d2:3c:29:9c:80:78:e3:df:db:2f:1a:60:48: 02:df:f3:22:39:84:3e:8d:5f:13:ff:fa:a9:e5:7e:81:be:3e: ae:ad:c2:9f:75:05:1d:32:72:d6:93:f6:6a:45:c1:2a:ad:28: c5:e1:28:99:33:b5:5b:17:1d:45:e2:58:fd:92:95:59:20:2a: 89:6e:21:28:63:82:ea:7d:64:d5:22:a5:82:7b:88:bb:22:16: b9:da:b1:e8:88:7a:47:35:aa:04:78:3c:f3:b6:4e:b9:a6:3a: 53:b3:7c:bd:46:08:a4:a4:90:7b:33:98:13:dc:22:1f:7d:fe: c9:21:24:1e:33:c3:2d:d3:34:cb:cf:f4:21:d6:c1:d6:a5:64: 1b:36:f7:3f:57:af:88:e9:5d:ee:94:49:c1:d8:1a:d6:e5:f0: f5:07:66:6e:87:8e:32:6f:c7:9f:1f:6e:2a:72:b9:6f:62:a5: 44:f7:13:dd:23:ac:75:13:18:6e:eb:c5:77:79:56:bb:a7:3e: 20:e0:99:d6:a4:59:10:97:d8:24:c6:ff:0f:0f:5d:0d:d0:92: a4:41:09:bb:f3:20:91:1e:89:76:ce:a8:be:cd:f4:5a:83:dd: 87:01:5f:40:75:a7:81:1f:7a:84:11:be:ab:23:e3:b3:bb:a3: 83:bb:be:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp4iB4iDatOcVIfUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1NDk4NWEtZTkyYS00NzVjLWI1NTQtM2I5ZWQxYjIz OWRjMB4XDTI1MDcxMDA5NTIwMVoXDTI1MTAwODA5NTIwMVowLzEtMCsGA1UEAxMk M2QxZGQ1ZDctYjA2YS00NGRiLTliZGEtYmQ0YzQ5ZWM4NjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAonNL20V05TYVwaKirSQsir2z5d4ZWVSzyC MloXqBNbTLqpnqvlx6pNdAEJURr7pHRQqUjv41NSBEpSFjqiq6jKO7X6UA3W/jm0 qNoGdSWtQrDXlQdj7Yby+4hIEwcCc80jrl77tw5cq95he/d7W8VB9MqHKl7BJJaz lrfWLeFH4LxYW3vnEDmdHFObP0mumJ7oEcL1Ui0KvlNVkMMyDhDY5acpI0u2bAZG 4EUgejllvhGFiklz1Li8PVZ2oLeOh6Y7XuAzIAIqevlaSZKqCgyj6CL6LF5IwFk8 IssvMVa/5CFO1NTl22hLqpPPP/qTLGuc1kbArIggBcRNkrh3zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCbgzF3OnCYqsEfudbARncfKFzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0 OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjllZDFiMjM5ZGMvM2UxY2ViMGItM2YwNi0z ZmU5LTlhYTgtZjZjMWY4ZmQ4NDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU1NDk4NWEtZTkyYS00NzVjLWI1 NTQtM2I5ZWQxYjIzOWRjLzJlNTQ5ODVhLWU5MmEtNDc1Yy1iNTU0LTNiOWVkMWIy MzlkYy5jcmwwHwYDVR0jBBgwFoAUAl15dIvL+EI76EnOKcLxtXx6XyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjll ZDFiMjM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO52Xqa0jwpnIB449/bLxpgSALf8yI5hD6NXxP/+qnlfoG+Pq6twp91 BR0yctaT9mpFwSqtKMXhKJkztVsXHUXiWP2SlVkgKoluIShjgup9ZNUipYJ7iLsi FrnaseiIekc1qgR4PPO2TrmmOlOzfL1GCKSkkHszmBPcIh99/skhJB4zwy3TNMvP 9CHWwdalZBs29z9Xr4jpXe6UScHYGtbl8PUHZm6HjjJvx58fbipyuW9ipUT3E90j rHUTGG7rxXd5VrunPiDgmdakWRCX2CTG/w8PXQ3QkqRBCbvzIJEeiXbOqL7N9FqD 3YcBX0B1p4EfeoQRvqsj47O7o4O7vns= -----END CERTIFICATE-----Generated at Sun Jul 20 17:26:46 2025 by rpki-client