$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa File: 8160f0e3-2d6f-3b91-9726-f47e80235128.roa (raw, json) Hash identifier: 7fJ3g/MjaGDoNp2lwUfsP4ST4SkDwazMek2P9aqJZZM= Subject key identifier: 1C:58:87:17:17:3A:B7:93:28:FB:38:7F:69:32:C6:8A:7E:60:B3:77 Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Certificate serial: 010D0C9F4328584A90A0BF55C09BBBAB15896DE0 Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 133199 IP address blocks: 23.156.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:bf:55:c0:9b:bb:ab:15:89:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=17ea852e-0f7f-445a-b144-f4f598ed5cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:10:6d:41:d1:88:15:60:92:b5:76:a5:97: 46:9a:46:9b:df:50:c7:0c:91:9f:9b:51:80:47:97: fd:da:b6:59:19:3e:47:34:1f:30:07:52:82:76:b4: ed:38:eb:75:14:09:eb:bc:62:51:e6:5c:eb:36:0c: 3b:7e:53:57:51:31:c3:cc:c4:4d:e8:1f:df:96:ef: 83:1a:bd:15:e5:5b:f8:c5:a3:8b:11:89:11:18:c1: 98:17:99:c4:82:ed:0d:47:6e:a7:99:07:d9:64:b2: 90:97:b4:74:09:a4:b7:b6:cb:2b:fd:ae:de:8d:f7: c8:0a:0b:af:90:8e:c0:1e:67:ce:99:88:4a:84:5a: 07:a2:bf:6d:df:53:5a:ce:3a:72:5c:52:80:37:66: 11:b8:09:fc:f2:0d:b0:15:6e:35:c0:67:c1:71:e8: 7c:30:2e:eb:8b:b6:2e:45:2c:a4:b2:14:5d:31:b8: a3:65:ea:fd:18:bd:9e:b4:f8:e1:c4:21:e9:d1:f3: 10:01:8a:cd:0d:0d:ee:8e:b1:3e:3d:c1:9a:a7:3a: a2:e8:73:cf:0f:aa:25:da:30:2c:1e:e6:98:7e:8c: af:12:ed:24:b5:f0:0b:e4:77:c6:e6:42:b5:74:f5: 8a:e6:37:00:2d:98:9b:11:20:23:f5:7a:72:71:13: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:58:87:17:17:3A:B7:93:28:FB:38:7F:69:32:C6:8A:7E:60:B3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl X509v3 Authority Key Identifier: keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer sbgp-ipAddrBlock: critical IPv4: 23.156.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:26:bf:31:43:39:37:5c:4c:62:74:2b:7d:a0:c4:06:b3:6d: e3:c2:43:c2:5d:ff:b6:c5:70:c6:96:c4:5b:11:c6:c3:af:ed: 28:59:f4:4d:45:b6:0d:a7:24:78:a7:7b:8c:b4:76:cc:90:5c: 73:b1:d5:bd:bf:98:0f:9a:28:d5:75:e8:a2:07:4a:f6:e4:86: 1d:d3:b6:96:3c:aa:95:fc:29:e9:76:33:4b:a3:2f:fc:76:40: a7:8b:a9:26:37:ab:04:13:dd:22:e4:0b:38:7f:fa:a6:05:ab: 20:a3:dd:ce:14:0b:8d:dd:3c:6e:b5:13:f8:71:df:b0:94:a7: 26:d6:e2:40:e8:75:80:27:c3:3a:f3:c2:a1:04:4e:0f:d6:68: 66:34:53:99:3d:4a:77:8e:25:7a:25:97:ed:02:6e:1e:e8:d7: 82:4f:e2:28:8d:a2:3f:68:bb:97:7b:c0:03:8b:1f:2c:29:d2: 26:38:3d:53:ae:73:7f:23:48:dd:76:92:de:0f:89:23:6f:72: 5d:47:aa:d5:06:9d:5f:d1:54:fa:ae:97:8f:77:9e:22:c1:46: 49:d1:6d:ae:d9:92:cb:6b:ba:02:b1:78:ad:50:5d:c8:af:d7: 12:11:31:56:cc:99:33:0e:9a:85:4b:2c:d9:f7:f2:b3:6f:3e: f4:5a:b3:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoL9VwJu7qxWJbeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy ZmVhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTdlYTg1MmUtMGY3Zi00NDVhLWIxNDQtZjRmNTk4ZWQ1Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTsQbUHRiBVgkrV2pZdGmkab31DHDJGfm1GA R5f92rZZGT5HNB8wB1KCdrTtOOt1FAnrvGJR5lzrNgw7flNXUTHDzMRN6B/flu+D Gr0V5Vv4xaOLEYkRGMGYF5nEgu0NR26nmQfZZLKQl7R0CaS3tssr/a7ejffICguv kI7AHmfOmYhKhFoHor9t31NazjpyXFKAN2YRuAn88g2wFW41wGfBceh8MC7ri7Yu RSykshRdMbijZer9GL2etPjhxCHp0fMQAYrNDQ3ujrE+PcGapzqi6HPPD6ol2jAs HuaYfoyvEu0ktfAL5HfG5kK1dPWK5jcALZibESAj9XpycRMijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxYhxcXOreTKPs4f2kyxop+YLN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3 MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvODE2MGYwZTMtMmQ2Zi0z YjkxLTk3MjYtZjQ3ZTgwMjM1MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0 ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1 MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj MDIxNTJmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwmvzFDOTdcTGJ0K32gxAazbePCQ8Jd/7bFcMaWxFsRxsOv7ShZ9E1F tg2nJHine4y0dsyQXHOx1b2/mA+aKNV16KIHSvbkhh3TtpY8qpX8Kel2M0ujL/x2 QKeLqSY3qwQT3SLkCzh/+qYFqyCj3c4UC43dPG61E/hx37CUpybW4kDodYAnwzrz wqEETg/WaGY0U5k9SneOJXoll+0Cbh7o14JP4iiNoj9ou5d7wAOLHywp0iY4PVOu c38jSN12kt4PiSNvcl1HqtUGnV/RVPqul493niLBRknRba7ZkstrugKxeK1QXciv 1xIRMVbMmTMOmoVLLNn38rNvPvRas44= -----END CERTIFICATE-----Generated at Wed Jul 30 20:41:42 2025 by rpki-client