$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa File: 87eb7ad8-367d-3484-866c-a694fd0c58a3.roa (raw, json) Hash identifier: QqD4gIIZy73G0na7GfvL1ssNqNNug9ggrUO6hm6BLSE= Subject key identifier: FB:9E:D9:0B:2E:3A:CA:F8:AA:33:15:72:96:92:CC:C2:8D:89:2A:1B Certificate issuer: /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Certificate serial: 010D0C9F4328584B0CDC122267589F7C6E73D000 Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 212524 IP address blocks: 23.154.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:12:22:67:58:9f:7c:6e:73:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=824e84b8-82da-47ad-96c2-8877a902c0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:11:1c:a9:93:75:a8:78:65:b6:4b:48:62: 9b:ce:1a:43:9f:c1:34:a6:75:8d:8a:61:75:1b:e0: 54:52:20:b9:b1:48:2a:83:97:21:94:e0:47:69:78: e2:49:9b:d4:83:b7:54:55:48:63:70:92:22:9a:55: 8a:77:b4:b8:d5:90:bd:9e:bf:91:b0:1f:7d:b9:8e: 64:09:39:45:b4:f2:f1:55:99:50:e9:8e:6f:c6:89: 49:a7:35:dd:fb:3f:9a:f9:68:6d:32:f3:0b:4a:49: b7:33:77:f5:02:1a:4a:f8:83:0a:23:5f:7b:03:00: 7b:45:62:76:b8:f8:76:d5:5f:b1:c1:61:b8:8f:dc: 40:e6:62:b4:f9:42:9f:50:d0:8e:a2:50:ca:42:bb: 68:95:39:91:ed:b5:69:e0:5a:3c:ab:74:2d:af:7f: 5f:00:93:5b:db:7c:4a:6f:50:9b:79:16:58:03:57: 64:80:ee:71:73:04:de:6c:3a:24:96:db:a2:c0:74: e0:72:bf:38:21:54:32:ce:ab:66:6b:51:90:bd:2e: b4:17:ae:be:6c:d0:67:26:c6:ad:52:e7:1c:94:fb: b4:2f:ac:53:bf:e5:aa:63:b7:08:98:b3:d1:fb:ef: 72:d8:f1:97:fb:61:33:cd:e1:11:3c:1a:5a:27:45: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9E:D9:0B:2E:3A:CA:F8:AA:33:15:72:96:92:CC:C2:8D:89:2A:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl X509v3 Authority Key Identifier: keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer sbgp-ipAddrBlock: critical IPv4: 23.154.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:30:44:ab:af:6e:1c:7f:34:5a:c7:df:fd:36:36:cf:d6:f7: a6:aa:16:fa:d1:7b:22:4a:d4:80:f7:b2:08:88:24:bc:92:8d: a3:08:45:d8:2d:61:93:2e:ae:6c:91:6b:a6:0e:d3:7a:30:8e: 0b:0e:3a:e3:59:04:bf:86:74:9b:c9:9e:c2:aa:27:54:60:2d: 73:05:67:f7:13:ea:d2:9e:ae:a0:05:47:f9:ea:ba:cd:62:c4: 44:4b:d9:9e:e3:a7:a1:58:c4:80:0c:88:6e:19:53:dc:c1:57: 49:4b:d3:36:88:2b:b5:17:40:1e:12:84:8c:4a:e8:bb:eb:0c: 4c:e5:66:fa:99:11:95:2e:57:a6:8a:ef:05:c5:9d:62:12:f3: b5:9e:c5:7b:91:22:7c:d4:78:28:aa:7e:eb:91:22:d4:19:59: d6:c6:2f:12:79:4d:8a:6b:89:f9:8c:0d:b4:e5:8f:7a:4b:06: 01:ce:47:6c:c5:a3:f0:d6:53:b8:99:0b:c3:31:7e:7d:e5:68: 0f:ab:f3:0c:85:96:a2:fa:4e:50:f5:2c:f5:2f:56:95:66:91: d1:5e:9c:b0:d4:b2:58:fa:7e:27:e1:9a:a2:f9:5b:cc:76:0e: 63:af:06:03:08:58:d4:67:3b:c3:e4:fe:86:ff:70:cc:3c:39: 29:31:56:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BIiZ1iffG5z0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTliNDliYjYtMjc4Mi00YTgyLTgyOWMtZDRiOTRlYjY0 NmYxMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ODI0ZTg0YjgtODJkYS00N2FkLTk2YzItODg3N2E5MDJjMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprERHKmTdah4ZbZLSGKbzhpDn8E0pnWNimF1 G+BUUiC5sUgqg5chlOBHaXjiSZvUg7dUVUhjcJIimlWKd7S41ZC9nr+RsB99uY5k CTlFtPLxVZlQ6Y5vxolJpzXd+z+a+WhtMvMLSkm3M3f1AhpK+IMKI197AwB7RWJ2 uPh21V+xwWG4j9xA5mK0+UKfUNCOolDKQrtolTmR7bVp4Fo8q3Qtr39fAJNb23xK b1CbeRZYA1dkgO5xcwTebDokltuiwHTgcr84IVQyzqtma1GQvS60F66+bNBnJsat UucclPu0L6xTv+WqY7cImLPR++9y2PGX+2EzzeERPBpaJ0X8oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPue2QsuOsr4qjMVcpaSzMKNiSobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OWI0 OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5NGViNjQ2ZjEvODdlYjdhZDgtMzY3ZC0z NDg0LTg2NmMtYTY5NGZkMGM1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTliNDliYjYtMjc4Mi00YTgyLTgy OWMtZDRiOTRlYjY0NmYxLzk5YjQ5YmI2LTI3ODItNGE4Mi04MjljLWQ0Yjk0ZWI2 NDZmMS5jcmwwHwYDVR0jBBgwFoAU1mm0D12iTNZq/ycK6P7yzPnobCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OWI0OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5 NGViNjQ2ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQwRKuvbhx/NFrH3/02Ns/W96aqFvrReyJK1ID3sgiIJLySjaMIRdgt YZMurmyRa6YO03owjgsOOuNZBL+GdJvJnsKqJ1RgLXMFZ/cT6tKerqAFR/nqus1i xERL2Z7jp6FYxIAMiG4ZU9zBV0lL0zaIK7UXQB4ShIxK6LvrDEzlZvqZEZUuV6aK 7wXFnWIS87WexXuRInzUeCiqfuuRItQZWdbGLxJ5TYprifmMDbTlj3pLBgHOR2zF o/DWU7iZC8Mxfn3laA+r8wyFlqL6TlD1LPUvVpVmkdFenLDUslj6fifhmqL5W8x2 DmOvBgMIWNRnO8Pk/ob/cMw8OSkxVn4= -----END CERTIFICATE-----Generated at Wed Sep 10 14:59:47 2025 by rpki-client