$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/a561f62a-0e69-39cd-83e7-f82c0a8e291f.roa File: a561f62a-0e69-39cd-83e7-f82c0a8e291f.roa (raw, json) Hash identifier: CZbktHHw238ZPN+Gdb48d6W9s3VhjvBPcp58VjTKHjE= Subject key identifier: EA:D7:FF:96:F8:35:7E:96:70:54:81:44:36:13:C7:F6:EF:9E:6A:B5 Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Certificate serial: 010D0C9F4328584A82AB4369A87B70A6330A7C00 Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/a561f62a-0e69-39cd-83e7-f82c0a8e291f.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 8095 IP address blocks: 23.156.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:43:69:a8:7b:70:a6:33:0a:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=80f73f1c-6eaa-4dd8-b01a-514e0927d734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:06:34:82:2a:ff:0d:99:c7:ba:e8:c1:a4: 55:ee:91:fa:d1:e2:f9:d4:cf:7e:68:50:95:e2:45: 8d:bc:c2:14:35:12:22:9c:83:3b:04:ba:5f:fe:d5: 9e:42:48:a4:5d:fe:a9:a6:60:f1:e0:43:53:12:09: 1f:7e:6c:75:08:45:ec:3f:b5:a0:ce:7a:c8:17:00: 28:59:9b:4d:c1:30:14:d2:c6:71:38:91:2e:5d:c3: 22:9e:8c:5e:21:89:c2:60:f8:02:f7:8b:6f:13:43: f2:9d:b4:31:27:d7:3f:93:a5:b1:84:fb:89:c8:b9: 9a:56:13:16:82:c8:c7:01:76:3c:1c:23:46:de:bc: d5:e9:ae:36:c4:25:bd:8f:c6:94:87:c3:c7:65:e9: 86:e9:88:b5:31:2a:54:9f:8c:49:c7:83:ae:af:39: 83:5f:a3:8f:3f:b3:de:18:cc:71:b1:f3:27:d2:ec: 23:4b:61:9f:b4:e4:d7:ca:15:0f:d7:59:ef:69:f6: 01:d0:93:95:cf:09:5a:b1:39:bc:44:38:21:f6:a4: 64:58:aa:0b:40:61:25:ba:e5:a2:2c:ec:b3:9a:ba: e7:0e:e6:b9:7e:0c:96:e3:3c:19:34:9a:3f:56:6e: ae:05:9a:97:fe:13:a4:78:37:d4:ab:d4:ce:ba:35: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D7:FF:96:F8:35:7E:96:70:54:81:44:36:13:C7:F6:EF:9E:6A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/a561f62a-0e69-39cd-83e7-f82c0a8e291f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl X509v3 Authority Key Identifier: keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer sbgp-ipAddrBlock: critical IPv4: 23.156.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:82:0a:00:ae:65:f7:93:4e:4a:e9:10:47:24:55:e9:51:f9: 76:b0:56:7f:fc:75:18:50:ab:8b:3d:b5:9a:02:0b:05:e9:85: ae:6f:97:de:a8:0e:71:30:17:db:fd:b4:60:7c:fa:6a:44:6e: 9d:74:b8:50:25:9c:57:b1:4d:3a:e5:e9:8f:d9:de:7d:2c:59: 97:ca:8c:54:2a:75:16:16:fc:b6:29:4f:4a:e4:bd:e4:98:04: 73:cd:51:9a:2f:28:64:3c:46:47:4b:18:3c:27:1e:a5:bb:21: d8:63:1c:80:8a:0b:fb:61:7f:01:73:65:14:97:4b:63:e9:60: 52:0c:74:ac:74:b7:6c:bc:5c:2b:15:ad:03:10:87:0b:2d:21: cc:42:e4:b0:be:fd:1d:1d:30:50:54:27:c2:de:63:e0:0d:bf: 77:b2:d1:77:40:11:cd:fe:10:2e:d8:69:2d:7a:c8:a1:37:ad: 16:9b:40:cf:92:d3:eb:72:4e:64:ef:a3:83:97:12:02:33:f7: 7b:ef:c2:57:7d:63:45:f9:0f:5d:78:5d:8a:eb:41:8d:a9:a9: 70:dd:db:fb:df:ec:42:0a:fa:be:9b:60:60:cb:33:99:fd:e2: 1a:49:b8:92:c1:4c:aa:58:f0:a0:75:0c:37:8d:82:59:55:84: e6:62:90:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0NpqHtwpjMKfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy ZmVhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ODBmNzNmMWMtNmVhYS00ZGQ4LWIwMWEtNTE0ZTA5MjdkNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIMGNIIq/w2Zx7rowaRV7pH60eL51M9+aFCV 4kWNvMIUNRIinIM7BLpf/tWeQkikXf6ppmDx4ENTEgkffmx1CEXsP7WgznrIFwAo WZtNwTAU0sZxOJEuXcMinoxeIYnCYPgC94tvE0PynbQxJ9c/k6WxhPuJyLmaVhMW gsjHAXY8HCNG3rzV6a42xCW9j8aUh8PHZemG6Yi1MSpUn4xJx4OurzmDX6OPP7Pe GMxxsfMn0uwjS2GftOTXyhUP11nvafYB0JOVzwlasTm8RDgh9qRkWKoLQGEluuWi LOyzmrrnDua5fgyW4zwZNJo/Vm6uBZqX/hOkeDfUq9TOujWtbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrX/5b4NX6WcFSBRDYTx/bvnmq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3 MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvYTU2MWY2MmEtMGU2OS0z OWNkLTgzZTctZjgyYzBhOGUyOTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0 ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1 MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj MDIxNTJmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKCCgCuZfeTTkrpEEckVelR+XawVn/8dRhQq4s9tZoCCwXpha5vl96o DnEwF9v9tGB8+mpEbp10uFAlnFexTTrl6Y/Z3n0sWZfKjFQqdRYW/LYpT0rkveSY BHPNUZovKGQ8RkdLGDwnHqW7IdhjHICKC/thfwFzZRSXS2PpYFIMdKx0t2y8XCsV rQMQhwstIcxC5LC+/R0dMFBUJ8LeY+ANv3ey0XdAEc3+EC7YaS16yKE3rRabQM+S 0+tyTmTvo4OXEgIz93vvwld9Y0X5D114XYrrQY2pqXDd2/vf7EIK+r6bYGDLM5n9 4hpJuJLBTKpY8KB1DDeNgllVhOZikBI= -----END CERTIFICATE-----Generated at Wed Jul 30 20:47:56 2025 by rpki-client