$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa File: 1591f74c-28e6-3beb-a060-29508edef5ad.roa (raw, json) Hash identifier: J879lD28RI83Bb+MPIr/yq8bS4zk+lSAh2kmizTtQNA= Subject key identifier: E2:BD:F0:13:4F:C3:16:66:C6:3F:EC:78:D2:83:EE:D9:F1:FD:D2:E4 Certificate issuer: /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182 Certificate serial: 010D0C9F4328584A7085F63CE2CBDCADB2DE8420 Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 397423 IP address blocks: 23.173.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f6:3c:e2:cb:dc:ad:b2:de:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=86a9e726-881b-4365-a2fc-a5e80542f0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:b2:1b:13:c6:54:66:e2:ec:64:1c:bc:17: 1d:61:6a:8e:8c:9c:75:fd:e2:21:e1:17:d7:85:e8: 59:74:8a:dc:db:51:32:4d:10:5c:e5:17:ba:fa:c8: ec:bb:67:9f:54:8d:47:df:79:18:a8:50:7b:f7:0d: 47:92:29:ef:88:6b:7c:70:59:13:dd:60:c6:d0:ec: fd:46:b9:70:81:06:df:de:da:3d:a1:14:fb:f8:06: 5c:4e:07:f3:22:5b:f8:92:1b:ec:30:50:3f:8a:17: 44:17:a5:92:af:92:44:f6:e2:d6:8f:b1:4e:72:ce: 6d:8e:a1:60:48:7b:e8:66:3b:d8:6e:f1:1d:43:76: 46:77:3c:cf:7b:b6:e5:20:31:63:26:60:22:cc:07: 50:3b:35:83:fd:9d:db:12:f8:9b:ea:d5:4a:f0:af: dc:67:1b:03:9d:ca:3b:cb:b4:89:4e:73:30:c1:47: 1f:31:c4:7d:54:b3:b0:8d:5e:0e:c3:39:ab:82:ec: 5f:6d:9c:d4:4e:e2:e3:45:88:11:4b:56:e6:85:cb: 1d:27:f8:56:84:9c:5f:13:ab:2a:72:79:b8:f7:b1: cb:ee:80:db:09:66:d2:1f:4d:58:17:b1:53:3c:c5: 25:50:1c:53:c5:7d:9e:d1:8c:56:3e:c9:10:8f:b4: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BD:F0:13:4F:C3:16:66:C6:3F:EC:78:D2:83:EE:D9:F1:FD:D2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl X509v3 Authority Key Identifier: keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer sbgp-ipAddrBlock: critical IPv4: 23.173.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:80:59:78:2d:ba:cd:d1:6a:69:56:9c:2c:87:54:e5:6d:30: 20:5d:0c:c7:07:d6:f9:21:dd:e7:33:d1:5a:91:25:f9:3c:fc: 61:97:32:a7:37:3c:52:f2:60:53:0e:da:4c:62:a1:61:4a:5a: e0:41:e3:83:9d:de:29:13:6d:dd:d5:d5:6c:67:c7:a6:0a:95: ee:d5:69:df:45:d4:12:83:c5:15:69:a1:35:99:43:5f:39:b9: 93:39:67:10:5b:b1:3e:bb:67:25:fd:8a:08:ee:8e:01:e9:2e: e8:3c:05:4c:cd:ac:97:e4:83:74:ea:20:46:eb:3e:87:1b:40: 47:0c:7b:6e:f6:bc:12:4e:2a:2c:f7:37:75:cc:02:f3:89:a3: 46:1c:7e:ed:40:d3:23:94:de:40:39:3f:1e:6e:20:03:31:e2: 1a:ea:32:9d:1f:ad:c8:2a:f8:e1:2d:bf:d9:81:f3:66:46:81: 35:a7:b3:2c:58:6d:75:5c:8a:95:ec:14:fe:e3:e1:04:bd:f1: 11:59:e0:aa:e6:7f:a0:e7:aa:e5:77:0f:a1:af:af:98:8d:60: 38:a1:78:ff:e7:79:18:10:6f:ae:f2:f4:7c:dd:67:cf:7e:f6: 5f:e1:50:c6:a0:e1:21:bd:77:1b:10:44:2b:72:f0:a6:a2:22: 70:81:9e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfY84svcrbLehCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg0NWJhM2ItOWZjMi00MGZiLWI3NGMtNDQ1YWNlOGI0 MTgyMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ODZhOWU3MjYtODgxYi00MzY1LWEyZmMtYTVlODA1NDJmMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4eyGxPGVGbi7GQcvBcdYWqOjJx1/eIh4RfX hehZdIrc21EyTRBc5Re6+sjsu2efVI1H33kYqFB79w1HkinviGt8cFkT3WDG0Oz9 RrlwgQbf3to9oRT7+AZcTgfzIlv4khvsMFA/ihdEF6WSr5JE9uLWj7FOcs5tjqFg SHvoZjvYbvEdQ3ZGdzzPe7blIDFjJmAizAdQOzWD/Z3bEvib6tVK8K/cZxsDnco7 y7SJTnMwwUcfMcR9VLOwjV4OwzmrguxfbZzUTuLjRYgRS1bmhcsdJ/hWhJxfE6sq cnm497HL7oDbCWbSH01YF7FTPMUlUBxTxX2e0YxWPskQj7RiVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK98BNPwxZmxj/seNKD7tnx/dLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODQ1 YmEzYi05ZmMyLTQwZmItYjc0Yy00NDVhY2U4YjQxODIvMTU5MWY3NGMtMjhlNi0z YmViLWEwNjAtMjk1MDhlZGVmNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg0NWJhM2ItOWZjMi00MGZiLWI3 NGMtNDQ1YWNlOGI0MTgyLzA4NDViYTNiLTlmYzItNDBmYi1iNzRjLTQ0NWFjZThi NDE4Mi5jcmwwHwYDVR0jBBgwFoAUa4RCaddw3SaK97NTFvSuFhxj8L0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wODQ1YmEzYi05ZmMyLTQwZmItYjc0Yy00NDVh Y2U4YjQxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF62YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+AWXgtus3RamlWnCyHVOVtMCBdDMcH1vkh3ecz0VqRJfk8/GGXMqc3 PFLyYFMO2kxioWFKWuBB44Od3ikTbd3V1Wxnx6YKle7Vad9F1BKDxRVpoTWZQ185 uZM5ZxBbsT67ZyX9igjujgHpLug8BUzNrJfkg3TqIEbrPocbQEcMe272vBJOKiz3 N3XMAvOJo0Ycfu1A0yOU3kA5Px5uIAMx4hrqMp0frcgq+OEtv9mB82ZGgTWnsyxY bXVcipXsFP7j4QS98RFZ4Krmf6DnquV3D6Gvr5iNYDiheP/neRgQb67y9HzdZ89+ 9l/hUMag4SG9dxsQRCty8KaiInCBnpc= -----END CERTIFICATE-----Generated at Tue Jul 8 20:49:24 2025 by rpki-client