$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa File: 2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa (raw, json) Hash identifier: Lz3vwvF7+Aqyf44TSzdEElu76ipBvjW7kzBMfiJuSGw= Subject key identifier: 19:FE:9A:A7:95:39:B3:5C:3A:D6:C6:06:DD:FB:90:EA:1B:A5:68:F5 Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F4328584B0B76AEB248090437679BB700 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 208504 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ae:b2:48:09:04:37:67:9b:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=62f8c55a-7cea-4275-af23-cc924521093c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f9:c0:f8:9f:14:14:3b:a7:5d:f4:88:a2:8a: c5:e7:ef:e7:a0:3a:7d:65:dd:a4:95:e7:85:e5:c7: 14:f8:07:f3:74:ea:51:36:4f:f8:2d:de:af:8a:e7: 64:65:40:80:33:20:95:9e:ab:d2:ac:44:6f:3b:a8: 7f:c4:c7:c4:a6:de:d1:59:b1:d6:c8:7d:1a:9c:f1: d8:b7:49:d7:19:5b:4b:26:0f:49:a1:54:a8:a8:60: 3c:f3:75:05:77:ef:cd:b5:eb:98:f1:1f:90:c8:0f: 21:42:ba:b8:68:58:cb:65:d5:de:be:73:69:1f:e3: 89:5f:e7:16:cb:6a:7f:da:1f:41:23:cc:7c:e1:ab: 21:19:98:8f:0f:ac:8d:01:24:53:bc:1a:5a:70:3c: 7f:c2:42:c5:5f:1e:87:3c:21:2c:7d:d2:83:8b:6a: d0:3b:92:fa:c5:51:e8:1d:92:f8:3e:db:07:2c:46: 2b:6e:f9:47:48:1c:ae:5a:4c:16:12:b1:99:f9:b3: b2:99:ac:ef:da:c1:5f:96:c9:8c:f1:d0:e6:ef:46: 36:e6:ec:43:c7:91:78:86:eb:d2:d7:61:05:ba:eb: a2:39:7c:10:ea:f6:08:7c:2c:3b:de:76:84:bc:fd: 77:fb:a3:25:35:4d:b9:f5:c3:66:a0:a6:4f:96:5f: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FE:9A:A7:95:39:B3:5C:3A:D6:C6:06:DD:FB:90:EA:1B:A5:68:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:e7:f4:49:c3:05:6a:c0:27:84:0f:85:98:e1:20:10:84:62: 1f:61:4f:ef:e8:68:70:93:60:41:48:f6:b4:54:8f:67:e6:32: af:56:aa:ff:4b:12:3b:1e:58:4d:8e:3e:03:7c:5d:03:24:85: 5b:59:e3:f8:be:e5:25:20:52:66:e4:bd:a0:48:f2:30:72:89: 94:72:3e:ed:4b:21:4b:c1:1f:8d:d7:f5:53:8a:c2:85:73:cf: 22:2d:91:f1:a4:54:cc:39:86:7a:b9:f1:f1:03:c2:08:7b:41: 05:36:54:1f:5f:75:29:d4:38:16:9f:a2:c8:ed:d7:4a:86:14: 9c:0f:ad:ea:45:a0:92:4d:65:d6:fc:d1:ca:02:42:9c:fb:c2: cf:e0:32:97:f0:46:d0:35:5f:36:10:30:ff:3b:68:d6:1c:e9: 52:9e:f6:ef:4a:71:33:65:a4:f3:4c:35:29:23:40:c9:5f:8f: 3e:f4:ba:c8:fb:01:60:bb:41:bc:5b:c7:ec:47:46:08:42:d1: 76:46:61:95:29:a6:e2:f0:43:6a:23:36:a6:07:33:0e:76:f2: 02:29:da:ed:b8:fc:88:90:2e:5b:80:25:a4:ea:56:fa:e1:f0: 37:13:42:73:06:67:f6:45:1e:09:99:07:3c:20:dd:1d:50:3c: 06:b8:fb:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq6ySAkEN2ebtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NjJmOGM1NWEtN2NlYS00Mjc1LWFmMjMtY2M5MjQ1MjEwOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vnA+J8UFDunXfSIoorF5+/noDp9Zd2kleeF 5ccU+AfzdOpRNk/4Ld6viudkZUCAMyCVnqvSrERvO6h/xMfEpt7RWbHWyH0anPHY t0nXGVtLJg9JoVSoqGA883UFd+/NteuY8R+QyA8hQrq4aFjLZdXevnNpH+OJX+cW y2p/2h9BI8x84ashGZiPD6yNASRTvBpacDx/wkLFXx6HPCEsfdKDi2rQO5L6xVHo HZL4PtsHLEYrbvlHSByuWkwWErGZ+bOymazv2sFflsmM8dDm70Y25uxDx5F4huvS 12EFuuuiOXwQ6vYIfCw73naEvP13+6MlNU259cNmoKZPll/hpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn+mqeVObNcOtbGBt37kOobpWj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvMmQxN2NkNGYtNmI4Yy0z YmM2LWE4MTYtYTJmMmFkZDU4Nzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLn9EnDBWrAJ4QPhZjhIBCEYh9hT+/oaHCTYEFI9rRUj2fmMq9Wqv9L EjseWE2OPgN8XQMkhVtZ4/i+5SUgUmbkvaBI8jByiZRyPu1LIUvBH43X9VOKwoVz zyItkfGkVMw5hnq58fEDwgh7QQU2VB9fdSnUOBafosjt10qGFJwPrepFoJJNZdb8 0coCQpz7ws/gMpfwRtA1XzYQMP87aNYc6VKe9u9KcTNlpPNMNSkjQMlfjz70usj7 AWC7Qbxbx+xHRghC0XZGYZUppuLwQ2ojNqYHMw528gIp2u24/IiQLluAJaTqVvrh 8DcTQnMGZ/ZFHgmZBzwg3R1QPAa4+z4= -----END CERTIFICATE-----Generated at Sun Sep 14 05:55:26 2025 by rpki-client