$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/5b94bedc-f156-3733-8a9c-956daa3de0f2.roa File: 5b94bedc-f156-3733-8a9c-956daa3de0f2.roa (raw, json) Hash identifier: x/PDQxKWHwkZJVonzGKCQIo12NLN+9SNgZaWcZT7XJE= Subject key identifier: 9D:EA:73:CD:1D:54:27:5F:DA:9F:F9:A7:3A:05:E6:82:5F:D9:70:C3 Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F43285849D594E9067A641EC15BBE0800 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/5b94bedc-f156-3733-8a9c-956daa3de0f2.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 51847 IP address blocks: 23.156.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e9:06:7a:64:1e:c1:5b:be:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=f66cf9ff-5a18-49d8-9681-e2ff09563d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:78:fa:3f:49:1a:22:65:35:22:33:b6:1d:8b: 89:a5:14:88:b7:36:26:b1:fd:19:b1:35:5e:b5:41: 88:c3:26:e9:65:b3:78:8d:1f:f7:20:ca:19:20:77: 88:9e:04:de:28:a8:f8:75:ce:d7:6f:6b:79:d6:21: 17:c0:5e:d2:3f:43:e0:8c:4f:8c:df:66:f6:57:7f: 4f:c7:ac:fa:0c:fa:51:b9:43:35:bd:fb:4d:08:69: 87:64:5e:11:42:ef:25:be:c2:e4:22:0b:d4:19:4e: 28:5a:10:81:12:10:42:50:57:0b:e5:49:dc:fa:cf: c2:e1:79:e0:40:f7:5d:fd:ed:ec:2e:25:bc:51:5a: 45:57:93:52:9a:eb:03:03:f6:35:51:8a:f4:fb:c7: 33:ee:16:88:d1:d5:c5:b7:dd:98:9e:67:bc:49:9d: b2:d5:db:6f:a2:8d:11:a9:42:9b:87:13:27:99:aa: 69:eb:98:fc:2e:90:a4:f5:84:72:71:f1:48:ba:f5: 15:93:d9:07:89:19:40:b5:72:9a:67:7a:8d:48:73: c2:78:f9:9a:d2:da:6d:e4:6d:60:61:e5:9e:a5:19: 0c:94:c9:e6:af:9a:ba:c3:29:6e:70:6a:06:24:4d: 8b:e8:6d:9e:09:a9:be:45:e6:56:a6:3a:70:a9:42: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EA:73:CD:1D:54:27:5F:DA:9F:F9:A7:3A:05:E6:82:5F:D9:70:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/5b94bedc-f156-3733-8a9c-956daa3de0f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:30:0e:a0:ce:fd:fb:9d:06:01:52:3e:be:78:61:89:31:1f: 47:13:58:db:db:7b:c2:6b:cc:2b:79:ec:07:f0:56:a3:b8:d8: 01:11:a0:f4:cb:79:14:1b:b5:ad:a6:d0:ce:11:56:23:ad:f4: 97:e7:e0:fd:c7:5c:d4:91:84:ce:3f:72:fa:97:19:91:b4:9a: 4f:19:e6:bc:67:77:a4:88:21:1b:9f:e1:79:7a:2b:58:58:aa: 0f:f1:cd:5a:d9:ab:a3:3a:17:9a:8a:c7:e1:1e:38:fd:49:21: 57:9c:c3:82:71:f4:a2:db:a1:b7:34:83:49:b6:51:e0:fe:f5: 92:bc:a5:c9:f9:14:87:34:c7:8a:fb:b3:bd:66:04:3b:fd:97: 0f:b7:07:55:55:63:ab:0e:c0:1d:81:b6:e2:92:99:d2:14:f7: a1:ff:8b:3f:ba:94:e4:d7:23:60:6e:a0:f9:fe:c9:94:75:bf: d6:e2:a8:a3:e3:c0:0e:87:11:56:cf:f5:14:6c:e0:f8:f5:4d: 3f:4e:7f:27:9f:4f:81:f5:81:8c:36:76:b1:29:59:ec:cb:44: 5e:d7:11:4f:da:c9:c3:b3:cb:6c:bc:5d:43:a6:6d:1a:12:0d: b5:33:99:de:78:1a:ed:a0:6b:7f:36:7d:44:44:e7:45:ca:c7: 80:ab:26:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOkGemQewVu+CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjY2Y2Y5ZmYtNWExOC00OWQ4LTk2ODEtZTJmZjA5NTYzZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3j6P0kaImU1IjO2HYuJpRSItzYmsf0ZsTVe tUGIwybpZbN4jR/3IMoZIHeIngTeKKj4dc7Xb2t51iEXwF7SP0PgjE+M32b2V39P x6z6DPpRuUM1vftNCGmHZF4RQu8lvsLkIgvUGU4oWhCBEhBCUFcL5Unc+s/C4Xng QPdd/e3sLiW8UVpFV5NSmusDA/Y1UYr0+8cz7haI0dXFt92Ynme8SZ2y1dtvoo0R qUKbhxMnmapp65j8LpCk9YRycfFIuvUVk9kHiRlAtXKaZ3qNSHPCePma0tpt5G1g YeWepRkMlMnmr5q6wylucGoGJE2L6G2eCam+ReZWpjpwqUKc6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3qc80dVCdf2p/5pzoF5oJf2XDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvNWI5NGJlZGMtZjE1Ni0z NzMzLThhOWMtOTU2ZGFhM2RlMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkwDqDO/fudBgFSPr54YYkxH0cTWNvbe8JrzCt57AfwVqO42AERoPTL eRQbta2m0M4RViOt9Jfn4P3HXNSRhM4/cvqXGZG0mk8Z5rxnd6SIIRuf4Xl6K1hY qg/xzVrZq6M6F5qKx+EeOP1JIVecw4Jx9KLbobc0g0m2UeD+9ZK8pcn5FIc0x4r7 s71mBDv9lw+3B1VVY6sOwB2BtuKSmdIU96H/iz+6lOTXI2BuoPn+yZR1v9biqKPj wA6HEVbP9RRs4Pj1TT9OfyefT4H1gYw2drEpWezLRF7XEU/aycOzy2y8XUOmbRoS DbUzmd54Gu2ga382fURE50XKx4CrJrE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:05 2025 by rpki-client