$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/1584faf1-c6b9-36aa-93c1-0e40302d9104.roa File: 1584faf1-c6b9-36aa-93c1-0e40302d9104.roa (raw, json) Hash identifier: mgE5LVlfeWqy+F2j7pvVkSSvFGpNvzwLKhwPF9xwYLs= Subject key identifier: 37:BC:D2:C9:90:03:19:C8:14:7B:3E:A6:94:6E:7C:F1:3B:3A:5A:D5 Certificate issuer: /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9 Certificate serial: 010D0C9F4328584A7271065D22BDD1990FBDFF40 Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/1584faf1-c6b9-36aa-93c1-0e40302d9104.roa Signing time: Tue 08 Jul 2025 05:30:39 +0000 ROA not before: Tue 08 Jul 2025 05:30:39 +0000 ROA not after: Mon 06 Oct 2025 05:30:39 +0000 asID: 8095 IP address blocks: 23.157.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:72:71:06:5d:22:bd:d1:99:0f:bd:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9 Validity Not Before: Jul 8 05:30:39 2025 GMT Not After : Oct 6 05:30:39 2025 GMT Subject: CN=04ba0ffd-bc08-47fa-a33d-2a8ef3134077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:71:34:67:13:80:75:75:46:ab:54:90:25: c4:fa:98:9c:84:cf:76:87:30:3d:77:4b:90:10:cb: ae:95:ec:40:0a:1a:48:f7:bc:05:8d:f0:fe:4f:51: 98:b8:51:e7:9c:bc:2c:89:ce:8b:7f:7d:6e:3b:9c: 4e:25:2e:d1:45:c0:23:49:b2:df:72:0b:92:14:60: 77:d4:07:eb:64:9e:8d:56:51:e3:30:c6:64:12:cb: 51:58:54:ee:5c:25:ef:a2:99:cb:c2:18:e9:09:bf: 8f:12:a7:19:28:38:53:6e:17:42:1d:e8:6e:0c:e9: 89:86:a4:f6:10:4b:03:fb:55:6c:f9:23:bf:59:ff: 92:f6:ab:ed:7e:68:77:e6:3c:50:f3:03:3f:e2:66: 9c:70:b4:d3:96:ef:a7:25:26:10:66:b2:03:88:90: 23:37:65:bc:fe:f4:42:89:b4:e4:72:3e:2a:76:af: 54:ca:aa:60:f8:60:a6:3c:02:cb:e5:24:35:f3:d3: 4a:76:23:7e:18:cc:8d:4e:68:97:8a:c8:fa:4e:5c: d6:26:0a:55:e0:5a:18:68:4f:5d:87:38:45:05:e7: aa:91:9c:1f:1b:d5:59:97:9b:eb:10:e4:77:e0:cc: 3b:a0:56:ed:9b:88:3c:e2:e6:38:43:96:81:3f:e4: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BC:D2:C9:90:03:19:C8:14:7B:3E:A6:94:6E:7C:F1:3B:3A:5A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/1584faf1-c6b9-36aa-93c1-0e40302d9104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl X509v3 Authority Key Identifier: keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:38:b9:b1:d8:b9:d2:77:36:76:a0:58:4d:5f:27:1b:67:bf: 06:03:c2:3d:f6:d6:51:0c:6f:7d:10:63:c6:4f:ef:98:4d:98: 7a:15:b6:e4:9c:dc:e0:5a:26:fa:3c:d2:20:38:6e:43:89:13: 2f:78:33:00:b3:54:2b:22:9e:93:a5:63:1d:3e:d9:a5:85:d6: 5d:3e:6e:32:33:62:1f:cd:88:c4:88:ab:10:78:d6:b9:6d:9d: cc:59:e2:97:e1:cf:4d:d5:2f:17:4e:3c:79:bf:dd:25:ae:3f: 31:bf:e2:f2:b7:c6:bd:ed:e6:ed:62:5a:8a:17:37:1c:95:a7: 05:e2:db:11:31:eb:40:ba:62:e7:c0:20:23:c4:4f:3d:12:a8: 80:5a:62:0e:a6:9b:88:a8:83:01:de:e3:4d:01:9d:52:d3:09: c9:50:7b:2d:e5:18:cd:63:ae:b7:ad:ca:26:26:14:18:64:01: 8a:e7:61:a8:c2:20:40:63:0e:34:f4:ca:65:46:75:12:bd:46: dd:4f:d6:87:a8:31:1e:c4:03:de:d5:5d:c3:0d:27:2e:de:e3: fc:c8:8a:cd:42:49:a0:da:ef:f3:9d:9b:13:da:dd:64:8e:11: 53:23:d9:4a:95:7b:6c:2c:91:a3:b9:64:0b:23:ad:2c:8e:7b: dc:91:3c:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpycQZdIr3RmQ+9/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmYjdkNTctNzg3Ni00ZTNhLWIwNTUtMzUzNDAxMGZj NmE5MB4XDTI1MDcwODA1MzAzOVoXDTI1MTAwNjA1MzAzOVowLzEtMCsGA1UEAxMk MDRiYTBmZmQtYmMwOC00N2ZhLWEzM2QtMmE4ZWYzMTM0MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhRxNGcTgHV1RqtUkCXE+pichM92hzA9d0uQ EMuulexAChpI97wFjfD+T1GYuFHnnLwsic6Lf31uO5xOJS7RRcAjSbLfcguSFGB3 1AfrZJ6NVlHjMMZkEstRWFTuXCXvopnLwhjpCb+PEqcZKDhTbhdCHehuDOmJhqT2 EEsD+1Vs+SO/Wf+S9qvtfmh35jxQ8wM/4maccLTTlu+nJSYQZrIDiJAjN2W8/vRC ibTkcj4qdq9Uyqpg+GCmPALL5SQ189NKdiN+GMyNTmiXisj6TlzWJgpV4FoYaE9d hzhFBeeqkZwfG9VZl5vrEOR34Mw7oFbtm4g84uY4Q5aBP+Q7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe80smQAxnIFHs+ppRufPE7OlrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWZi N2Q1Ny03ODc2LTRlM2EtYjA1NS0zNTM0MDEwZmM2YTkvMTU4NGZhZjEtYzZiOS0z NmFhLTkzYzEtMGU0MDMwMmQ5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDlmYjdkNTctNzg3Ni00ZTNhLWIw NTUtMzUzNDAxMGZjNmE5LzA5ZmI3ZDU3LTc4NzYtNGUzYS1iMDU1LTM1MzQwMTBm YzZhOS5jcmwwHwYDVR0jBBgwFoAUlnIacrGcuC5379T0HM3IoLzJrE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWZiN2Q1Ny03ODc2LTRlM2EtYjA1NS0zNTM0 MDEwZmM2YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo4ubHYudJ3NnagWE1fJxtnvwYDwj321lEMb30QY8ZP75hNmHoVtuSc 3OBaJvo80iA4bkOJEy94MwCzVCsinpOlYx0+2aWF1l0+bjIzYh/NiMSIqxB41rlt ncxZ4pfhz03VLxdOPHm/3SWuPzG/4vK3xr3t5u1iWooXNxyVpwXi2xEx60C6YufA ICPETz0SqIBaYg6mm4iogwHe400BnVLTCclQey3lGM1jrretyiYmFBhkAYrnYajC IEBjDjT0ymVGdRK9Rt1P1oeoMR7EA97VXcMNJy7e4/zIis1CSaDa7/OdmxPa3WSO EVMj2UqVe2wskaO5ZAsjrSyOe9yRPGE= -----END CERTIFICATE-----Generated at Wed Jul 9 18:21:57 2025 by rpki-client