$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa File: 9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa (raw, json) Hash identifier: N1UqhfbM8KR8LH9CGqyLSyQ5D8pv5gwDuJuP5Q40x0E= Subject key identifier: 70:36:8D:90:44:38:5B:C7:70:40:DB:57:7F:DF:13:23:52:B1:34:B0 Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F4328584A90A0BF46974302797B120B80 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 133199 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:bf:46:97:43:02:79:7b:12:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=83dc4653-4688-4b48-93cc-7c558f2f401c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:69:52:ce:fd:35:bd:30:d4:7e:9b:2b:63:6e: 62:11:94:5c:4c:4b:bc:25:f4:9a:65:fb:45:d1:f5: 40:b4:e8:8d:e4:cb:b2:f4:a7:73:77:fb:b1:1b:68: 89:5a:1f:dd:34:af:ae:27:37:e3:1d:2a:88:9d:7e: 46:eb:77:f7:56:0e:4a:a1:c7:02:fe:8f:7f:45:03: 1d:e6:8f:1d:3b:ee:fc:67:17:c6:9c:32:d3:21:6c: 52:29:65:37:4e:85:07:98:0f:48:72:d0:c8:43:a6: 6d:a9:7e:2d:d1:5f:e6:5f:16:83:2e:9d:b9:13:74: 0a:b5:70:d8:73:57:79:72:73:8f:20:6e:c7:21:cf: ab:06:8a:b0:d1:1d:23:ea:60:17:5c:9f:d5:9c:af: 54:fb:46:be:6e:34:50:6b:8a:f2:2a:66:62:be:b3: c2:fc:21:d6:ab:df:9a:88:19:2f:bc:e2:b4:34:6b: 55:db:9f:e6:ce:63:8f:64:7e:e5:ca:53:a4:3f:83: 98:be:60:3b:4a:2e:3c:12:61:81:09:8e:26:18:1e: 26:0f:75:ae:42:12:1e:ad:64:dc:cc:fc:99:65:31: ae:ad:c9:9d:c3:8f:c1:ac:13:7a:d1:96:76:d0:32: 46:fc:cd:ca:9b:36:de:42:77:74:11:6e:29:12:e3: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:36:8D:90:44:38:5B:C7:70:40:DB:57:7F:DF:13:23:52:B1:34:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:2d:28:10:b7:b5:53:d8:3a:33:f2:c1:41:45:e3:83:a9:74: d6:99:74:37:02:34:73:d5:20:ea:a6:f4:ce:ce:89:f9:d1:eb: 3f:21:b2:25:b2:94:88:58:47:69:4f:57:f6:bb:69:b3:da:cd: 58:1c:dc:3a:02:4d:76:c2:4d:a0:05:33:72:3e:a7:3d:0e:c0: f5:b0:70:fc:f0:7b:cf:a4:3d:a3:de:a2:7f:76:78:9c:cd:c9: cf:66:82:47:62:95:27:6f:4f:41:57:69:8f:0a:36:61:a1:d3: 17:ca:a6:d8:30:e6:a1:f4:c3:f6:c5:84:19:d7:f5:36:62:cc: d6:7b:ec:47:16:a9:31:76:c3:08:61:77:9a:87:41:28:c9:5b: d3:79:82:2d:73:16:61:14:74:94:18:c2:91:f0:b3:91:2d:03: 08:f1:d5:44:94:fb:4c:27:83:25:c9:ee:8b:c4:4b:9f:88:97: b8:a7:17:4d:bd:3d:eb:8d:e8:be:b9:46:d1:00:a3:ce:54:02: 0f:c2:f8:9d:f0:8b:10:da:19:7f:d7:ab:b2:83:49:5c:62:93: 05:5d:61:4d:5f:73:c3:b6:c6:77:71:45:f1:bb:8f:f8:65:18: 5d:35:a9:bb:31:b2:1b:6e:25:69:1d:43:87:68:27:bb:a5:27: 78:93:a1:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoL9Gl0MCeXsSC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODNkYzQ2NTMtNDY4OC00YjQ4LTkzY2MtN2M1NThmMmY0MDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/mlSzv01vTDUfpsrY25iEZRcTEu8JfSaZftF 0fVAtOiN5Muy9Kdzd/uxG2iJWh/dNK+uJzfjHSqInX5G63f3Vg5KoccC/o9/RQMd 5o8dO+78ZxfGnDLTIWxSKWU3ToUHmA9IctDIQ6ZtqX4t0V/mXxaDLp25E3QKtXDY c1d5cnOPIG7HIc+rBoqw0R0j6mAXXJ/VnK9U+0a+bjRQa4ryKmZivrPC/CHWq9+a iBkvvOK0NGtV25/mzmOPZH7lylOkP4OYvmA7Si48EmGBCY4mGB4mD3WuQhIerWTc zPyZZTGurcmdw4/BrBN60ZZ20DJG/M3KmzbeQnd0EW4pEuM7uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA2jZBEOFvHcEDbV3/fEyNSsTSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvOWJlZjljZTMtZmYzNi0z YzA1LWJhY2UtMWVjYTNmZjNkYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0tKBC3tVPYOjPywUFF44OpdNaZdDcCNHPVIOqm9M7OifnR6z8hsiWy lIhYR2lPV/a7abPazVgc3DoCTXbCTaAFM3I+pz0OwPWwcPzwe8+kPaPeon92eJzN yc9mgkdilSdvT0FXaY8KNmGh0xfKptgw5qH0w/bFhBnX9TZizNZ77EcWqTF2wwhh d5qHQSjJW9N5gi1zFmEUdJQYwpHws5EtAwjx1USU+0wngyXJ7ovES5+Il7inF029 PeuN6L65RtEAo85UAg/C+J3wixDaGX/Xq7KDSVxikwVdYU1fc8O2xndxRfG7j/hl GF01qbsxshtuJWkdQ4doJ7ulJ3iToWs= -----END CERTIFICATE-----Generated at Sun Jul 27 09:59:13 2025 by rpki-client