$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa File: 7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa (raw, json) Hash identifier: yuU3KAMkls0eWG4pK/MBGbmwHEHV4btiRp2vHLaQLYA= Subject key identifier: 47:F0:CF:94:36:E5:44:5D:B5:3B:AD:4D:92:C9:B8:62:48:A3:4A:8C Certificate issuer: /CN=f6a80343-5648-4b19-a2ae-d61e9d8fd359 Certificate serial: 010D0C9F4328584ADDECF273199CA25FBCF53B00 Authority key identifier: 4B:4C:33:15:8C:7A:06:17:06:BC:29:29:2B:94:64:52:3B:BB:24:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa Signing time: Fri 15 Aug 2025 17:31:50 +0000 ROA not before: Fri 15 Aug 2025 17:31:50 +0000 ROA not after: Thu 13 Nov 2025 18:31:50 +0000 asID: 46743 IP address blocks: 23.139.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:ec:f2:73:19:9c:a2:5f:bc:f5:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a80343-5648-4b19-a2ae-d61e9d8fd359 Validity Not Before: Aug 15 17:31:50 2025 GMT Not After : Nov 13 18:31:50 2025 GMT Subject: CN=1747a48c-e268-4058-b396-3b43fc5b9d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:25:bc:e8:a5:3a:f0:fa:51:06:99:1e:17: d5:b7:9d:75:7a:85:8b:52:e0:ab:af:ce:65:81:fb: b1:34:e3:08:d1:fd:18:60:71:1a:03:f1:cc:51:66: e3:fc:91:c6:5e:c8:65:14:1d:5d:c0:67:31:8a:0f: 02:e3:59:fc:de:d1:a3:92:e5:d5:10:7f:14:e4:b8: 37:6e:0c:f6:70:72:7b:dc:2a:70:e4:32:68:25:de: 9e:f2:1d:b5:e2:72:f1:91:43:27:51:c5:d3:d7:b4: 4b:5a:71:fa:ed:de:34:3f:68:2c:a7:16:35:27:1e: 0a:17:66:41:69:d6:db:e4:e0:ed:31:0b:1c:54:ad: 1e:98:0a:bc:54:e8:a5:75:d5:da:e3:44:30:b4:fb: 34:22:16:7e:38:ea:f0:79:a7:b4:84:a5:0f:fd:4c: 62:b4:12:e1:14:7a:09:a6:24:61:55:f7:88:2a:1f: d6:52:f5:43:62:78:c2:4a:03:ce:5e:8b:36:8c:16: fe:b7:a8:4c:35:a8:9f:41:01:9c:96:82:23:fd:d9: be:a3:53:0d:e1:5e:20:67:2f:d8:27:10:3f:df:bf: 3d:36:c3:12:59:98:94:b0:dd:71:b3:36:8e:97:78: d3:42:d2:8d:c0:25:ba:b7:bd:f8:9b:bf:6e:72:c2: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F0:CF:94:36:E5:44:5D:B5:3B:AD:4D:92:C9:B8:62:48:A3:4A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.crl X509v3 Authority Key Identifier: keyid:4B:4C:33:15:8C:7A:06:17:06:BC:29:29:2B:94:64:52:3B:BB:24:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer sbgp-ipAddrBlock: critical IPv4: 23.139.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:17:33:f4:46:a1:54:6e:be:94:40:a1:e3:21:82:80:47:c0: c6:45:f8:f2:96:68:04:eb:fc:10:c6:2d:9a:6a:ab:2c:35:8f: 71:45:4a:aa:26:38:f4:ce:80:46:80:a5:55:13:8c:34:31:6c: c3:d1:4e:3c:d8:d1:15:2f:95:02:1c:45:97:fe:1a:9d:2e:e2: 72:9b:9b:b4:0b:f0:85:d6:8e:26:7e:7c:0f:e6:dc:b2:d7:6b: f2:9f:32:c0:53:2a:cc:4c:e3:b6:df:70:96:bd:81:88:6b:74: 8a:19:84:9b:0a:53:79:23:f9:9d:47:a5:74:dd:11:1f:a1:67: f8:ae:4e:4d:8d:38:df:2f:7f:f3:b1:e3:5e:61:bd:02:65:da: 97:81:c3:15:0c:bf:e2:36:9d:56:78:51:da:7e:91:61:57:e8: 69:c3:30:70:84:43:f9:79:40:93:ae:f8:da:5c:17:ed:1b:5f: a8:ef:2e:1d:60:5d:20:03:b2:b2:b8:40:e7:2e:33:ca:5e:76: b3:a1:69:8d:91:e1:15:34:af:b3:61:da:41:4b:64:28:d6:21: 0d:b6:63:42:4c:18:fe:f3:f5:6a:d5:19:13:f9:29:e3:8f:23: 4b:c9:18:95:c2:58:88:95:b1:07:9e:ff:1e:de:6b:3a:d4:42: e8:22:13:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd7PJzGZyiX7z1OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhODAzNDMtNTY0OC00YjE5LWEyYWUtZDYxZTlkOGZk MzU5MB4XDTI1MDgxNTE3MzE1MFoXDTI1MTExMzE4MzE1MFowLzEtMCsGA1UEAxMk MTc0N2E0OGMtZTI2OC00MDU4LWIzOTYtM2I0M2ZjNWI5ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleclvOilOvD6UQaZHhfVt511eoWLUuCrr85l gfuxNOMI0f0YYHEaA/HMUWbj/JHGXshlFB1dwGcxig8C41n83tGjkuXVEH8U5Lg3 bgz2cHJ73Cpw5DJoJd6e8h214nLxkUMnUcXT17RLWnH67d40P2gspxY1Jx4KF2ZB adbb5ODtMQscVK0emAq8VOilddXa40QwtPs0IhZ+OOrweae0hKUP/UxitBLhFHoJ piRhVfeIKh/WUvVDYnjCSgPOXos2jBb+t6hMNaifQQGcloIj/dm+o1MN4V4gZy/Y JxA/3789NsMSWZiUsN1xszaOl3jTQtKNwCW6t734m79ucsKXOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfwz5Q25URdtTutTZLJuGJIo0qMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNmE4 MDM0My01NjQ4LTRiMTktYTJhZS1kNjFlOWQ4ZmQzNTkvN2ViNGM3OTgtNDQwZS0z YmE1LTljYmEtOWQ4YjcwNTllMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjZhODAzNDMtNTY0OC00YjE5LWEy YWUtZDYxZTlkOGZkMzU5L2Y2YTgwMzQzLTU2NDgtNGIxOS1hMmFlLWQ2MWU5ZDhm ZDM1OS5jcmwwHwYDVR0jBBgwFoAUS0wzFYx6BhcGvCkpK5RkUju7JC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNmE4MDM0My01NjQ4LTRiMTktYTJhZS1kNjFl OWQ4ZmQzNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYXM/RGoVRuvpRAoeMhgoBHwMZF+PKWaATr/BDGLZpqqyw1j3FFSqom OPTOgEaApVUTjDQxbMPRTjzY0RUvlQIcRZf+Gp0u4nKbm7QL8IXWjiZ+fA/m3LLX a/KfMsBTKsxM47bfcJa9gYhrdIoZhJsKU3kj+Z1HpXTdER+hZ/iuTk2NON8vf/Ox 415hvQJl2peBwxUMv+I2nVZ4Udp+kWFX6GnDMHCEQ/l5QJOu+NpcF+0bX6jvLh1g XSADsrK4QOcuM8pedrOhaY2R4RU0r7Nh2kFLZCjWIQ22Y0JMGP7z9WrVGRP5KeOP I0vJGJXCWIiVsQee/x7eazrUQugiE5o= -----END CERTIFICATE-----Generated at Wed Aug 20 03:47:47 2025 by rpki-client