$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa File: db4190ad-5350-383b-b3b5-9d97a927e02f.roa (raw, json) Hash identifier: FMxscKscKLjE0yCBidKvoRXQSw5cZyMBuzLYnjvEMRI= Subject key identifier: 8B:62:D9:4A:8B:83:DB:EF:82:53:B0:F3:80:56:BF:D1:C9:14:9A:C0 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584A77808F5582F0B01B44079400 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 21859 IP address blocks: 23.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8f:55:82:f0:b0:1b:44:07:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=a1fbee76-60fd-4c9d-a309-cf612d309761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:89:1f:3d:88:79:7f:51:84:c2:dc:bc:b5:f6: 11:7d:38:1a:55:f7:f3:75:c7:2f:12:d3:91:f6:0f: 5f:36:d6:6e:e8:61:05:d3:76:a9:8c:8e:35:b8:2c: 22:a1:5b:df:7e:12:0c:e1:44:08:f9:70:65:a1:5d: fa:a4:43:4b:93:81:80:e5:b5:90:4b:f1:b1:77:2e: f0:07:58:68:c8:5a:33:43:32:63:d3:84:5a:28:17: a6:8c:7f:c0:bc:cc:cf:3a:7a:86:70:83:ea:e6:1a: 0b:51:96:2d:52:fc:8a:1f:e3:11:67:b0:11:08:74: ca:d2:f9:e8:04:87:64:98:49:5c:45:0d:c1:21:85: 55:e3:32:42:33:9e:ed:b0:28:ae:c4:1d:a1:0d:37: 24:0c:fb:83:fe:43:73:53:fc:c6:6f:2f:20:17:4f: 67:dc:ac:7c:40:bd:86:0c:ff:da:2a:d2:4b:82:82: 03:49:c1:4a:48:d2:c3:06:e2:e2:69:e4:90:6a:d5: 29:60:b8:66:b8:f5:d4:63:ee:7c:d7:dd:17:4c:77: 68:be:f9:7d:b4:6d:ee:73:16:36:46:f0:80:dd:7d: 18:03:af:13:df:e0:c2:bc:9e:1b:6d:b2:ca:3b:af: f4:e9:78:3a:7a:0c:40:18:79:6b:8d:13:9a:eb:70: 99:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:62:D9:4A:8B:83:DB:EF:82:53:B0:F3:80:56:BF:D1:C9:14:9A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d8:f7:ce:9c:77:ec:80:c6:5d:e3:2b:d5:b9:16:a4:3e:11: cd:95:4c:79:32:a4:f7:89:fe:38:03:36:24:22:af:50:60:f5: b0:cd:ae:8c:a8:e7:d3:f2:bd:23:56:59:c6:69:c5:33:25:79: e5:9d:56:78:a7:1e:12:1e:fc:dc:e5:ed:fd:2a:25:8b:6d:60: d2:a8:a0:4e:05:7a:67:d8:23:2c:41:6f:30:8a:54:73:fa:09: 05:12:26:5d:b9:8a:63:de:ec:ac:f3:7f:ca:e9:94:6a:dd:bc: 30:7a:b0:a3:ec:51:03:32:eb:2e:ce:af:ff:a6:75:82:f5:56: d2:b2:74:cb:b5:e5:3e:1b:33:c7:48:02:59:da:02:20:19:15: 31:fa:a1:53:b0:e1:8f:49:b3:ad:98:f6:fa:6f:b4:02:72:92: 48:ab:ac:6f:07:68:78:d4:24:b6:91:1c:5f:77:fa:8e:5d:b5: cf:90:50:17:e4:a0:4f:b1:b6:11:c0:b8:43:70:17:1c:c8:0b: 8b:70:c7:86:76:88:f2:96:3b:19:91:14:2c:10:c3:0c:8b:4a: a6:3f:1b:39:60:17:49:5f:3c:54:69:c5:68:8d:e5:08:89:d9: c5:9d:0d:44:fb:ec:07:4f:97:ec:aa:2d:a7:88:53:1f:e0:8d: 7e:23:98:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gI9VgvCwG0QHlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk YTFmYmVlNzYtNjBmZC00YzlkLWEzMDktY2Y2MTJkMzA5NzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8okfPYh5f1GEwty8tfYRfTgaVffzdccvEtOR 9g9fNtZu6GEF03apjI41uCwioVvffhIM4UQI+XBloV36pENLk4GA5bWQS/Gxdy7w B1hoyFozQzJj04RaKBemjH/AvMzPOnqGcIPq5hoLUZYtUvyKH+MRZ7ARCHTK0vno BIdkmElcRQ3BIYVV4zJCM57tsCiuxB2hDTckDPuD/kNzU/zGby8gF09n3Kx8QL2G DP/aKtJLgoIDScFKSNLDBuLiaeSQatUpYLhmuPXUY+58190XTHdovvl9tG3ucxY2 RvCA3X0YA68T3+DCvJ4bbbLKO6/06Xg6egxAGHlrjROa63CZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIti2UqLg9vvglOw84BWv9HJFJrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvZGI0MTkwYWQtNTM1MC0z ODNiLWIzYjUtOWQ5N2E5MjdlMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvY986cd+yAxl3jK9W5FqQ+Ec2VTHkypPeJ/jgDNiQir1Bg9bDNroyo 59PyvSNWWcZpxTMleeWdVninHhIe/Nzl7f0qJYttYNKooE4FemfYIyxBbzCKVHP6 CQUSJl25imPe7Kzzf8rplGrdvDB6sKPsUQMy6y7Or/+mdYL1VtKydMu15T4bM8dI AlnaAiAZFTH6oVOw4Y9Js62Y9vpvtAJykkirrG8HaHjUJLaRHF93+o5dtc+QUBfk oE+xthHAuENwFxzIC4twx4Z2iPKWOxmRFCwQwwyLSqY/GzlgF0lfPFRpxWiN5QiJ 2cWdDUT77AdPl+yqLaeIUx/gjX4jmLo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:49 2025 by rpki-client