$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/1784983b-1cef-3cd5-ba1c-da3b531f691b.roa File: 1784983b-1cef-3cd5-ba1c-da3b531f691b.roa (raw, json) Hash identifier: MHhN55ttbh8W1ApLLcRsYbKbuP5KqbDiSm9FI+DD0XM= Subject key identifier: 94:E4:19:42:52:D1:5B:7D:BC:4D:EF:A5:B5:2C:3E:FA:1B:13:54:36 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584ACF710F4503DAFEE1D3D768C0 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/1784983b-1cef-3cd5-ba1c-da3b531f691b.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:0f:45:03:da:fe:e1:d3:d7:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=b70c92d9-cc44-4295-9a9c-94bbb2067cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ff:f0:28:72:08:47:d0:a4:9b:2c:f8:98:42: f3:71:4f:53:e5:a8:37:87:0a:38:b0:5b:b7:e6:9e: d6:94:5a:b0:73:a4:ba:e3:18:37:6e:7a:ed:d7:0c: 62:77:50:27:e6:40:4e:8a:89:91:e3:ca:94:0d:76: 0d:df:37:f1:b4:e9:c4:4a:3e:f8:5d:7c:1c:e3:72: 4a:d1:d0:58:e8:d3:0f:cc:91:9f:0c:ca:52:21:60: 69:6f:74:ab:74:4b:c1:94:bc:4d:9f:84:8d:1e:19: f0:0e:b4:5f:cb:f6:82:c6:d5:cf:e7:78:61:88:c7: dc:60:82:76:fa:c4:b6:6e:79:9a:07:73:38:3e:69: 73:72:14:4a:08:90:dc:55:32:26:b9:12:10:d2:ad: fc:76:80:07:21:db:19:6e:86:01:65:81:1b:d6:dc: f2:0b:a7:70:ad:c0:9f:af:08:38:a8:e0:3c:b1:48: 0b:52:e2:55:20:a0:31:bc:2f:b9:4b:9a:6d:ac:b8: a1:1e:2d:5b:fc:74:45:a4:d4:a9:40:49:d3:b1:cc: 88:8b:81:52:dd:92:ad:f6:c5:24:6b:c7:a8:ed:5f: 2d:ca:61:25:6a:4b:e1:cc:9a:ca:d0:ee:38:a2:97: 8e:65:9a:9c:4e:b3:98:e4:2a:d9:82:a9:dc:4b:aa: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E4:19:42:52:D1:5B:7D:BC:4D:EF:A5:B5:2C:3E:FA:1B:13:54:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/1784983b-1cef-3cd5-ba1c-da3b531f691b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:55:c7:71:fc:07:a9:08:b6:34:9d:10:7c:ad:56:71:c9:49: c6:f3:3e:25:52:bd:0e:f8:2f:b6:b7:82:c8:6f:b5:81:18:b3: 32:a1:9f:39:8b:ed:73:94:f8:e3:39:f0:69:cd:12:65:f2:03: 20:85:d8:73:6d:b3:88:9f:3c:33:ae:57:6b:39:0f:cd:f4:ab: 84:85:45:41:b7:35:03:fb:ed:2d:34:fb:f3:e0:5d:f3:32:ff: 0e:f6:50:6f:20:43:1f:49:f5:c9:13:bc:db:f4:2e:fc:1c:55: 6c:62:f0:b2:7c:7d:ed:34:24:d4:f2:82:76:2d:94:73:2f:a9: 4f:9a:62:16:4a:48:ed:9f:f6:c6:b2:a6:bb:79:23:83:54:94: 88:a4:a5:79:e3:44:81:03:f5:03:f7:da:36:de:6f:71:37:b9: 0c:84:dc:57:7d:3d:75:fb:11:25:8f:73:50:55:70:52:76:5e: 98:dd:61:83:0b:4a:78:64:a6:37:c7:df:25:83:a5:1b:f5:fe: 0c:ee:15:4d:7a:25:f0:df:60:5d:b1:ba:6b:e6:28:df:d3:09: 77:4f:c2:05:f5:d5:ad:97:3f:f6:7f:a7:56:f4:5c:bc:a8:51: 45:5a:2f:86:2f:93:a9:10:1a:37:08:dd:99:25:d5:43:e1:4d: c6:6d:db:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQ9FA9r+4dPXaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk YjcwYzkyZDktY2M0NC00Mjk1LTlhOWMtOTRiYmIyMDY3Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP/wKHIIR9Ckmyz4mELzcU9T5ag3hwo4sFu3 5p7WlFqwc6S64xg3bnrt1wxid1An5kBOiomR48qUDXYN3zfxtOnESj74XXwc43JK 0dBY6NMPzJGfDMpSIWBpb3SrdEvBlLxNn4SNHhnwDrRfy/aCxtXP53hhiMfcYIJ2 +sS2bnmaB3M4PmlzchRKCJDcVTImuRIQ0q38doAHIdsZboYBZYEb1tzyC6dwrcCf rwg4qOA8sUgLUuJVIKAxvC+5S5ptrLihHi1b/HRFpNSpQEnTscyIi4FS3ZKt9sUk a8eo7V8tymElakvhzJrK0O44opeOZZqcTrOY5CrZgqncS6pkqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTkGUJS0Vt9vE3vpbUsPvobE1Q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMTc4NDk4M2ItMWNlZi0z Y2Q1LWJhMWMtZGEzYjUzMWY2OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Vx3H8B6kItjSdEHytVnHJScbzPiVSvQ74L7a3gshvtYEYszKhnzmL 7XOU+OM58GnNEmXyAyCF2HNts4ifPDOuV2s5D830q4SFRUG3NQP77S00+/PgXfMy /w72UG8gQx9J9ckTvNv0LvwcVWxi8LJ8fe00JNTygnYtlHMvqU+aYhZKSO2f9say prt5I4NUlIikpXnjRIED9QP32jbeb3E3uQyE3Fd9PXX7ESWPc1BVcFJ2XpjdYYML SnhkpjfH3yWDpRv1/gzuFU16JfDfYF2xumvmKN/TCXdPwgX11a2XP/Z/p1b0XLyo UUVaL4Yvk6kQGjcI3Zkl1UPhTcZt20g= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:09 2025 by rpki-client