$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa File: 28b7558c-0a86-30e8-a429-1570b46f2dc7.roa (raw, json) Hash identifier: lm/xm12l/UWUSif02eS+9HntVHnBk9pG4sjXyiFMetk= Subject key identifier: 53:5C:67:8C:3E:F4:43:05:32:65:04:37:5B:18:03:F9:58:3A:EF:F3 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584A81460214A476007BC93F6200 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 20473 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:02:14:a4:76:00:7b:c9:3f:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2a3dd5a7-e25e-49b1-9f3c-7e266ce7309e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:99:d6:04:ec:0e:d6:bb:c0:d1:b7:73:ce: 3c:13:3f:65:79:49:6e:0b:16:f6:53:a8:40:9a:6c: 67:8a:78:58:2e:64:2f:4f:81:de:94:bf:77:e1:68: 17:43:be:c4:8f:1d:c2:a1:90:83:8f:cb:f5:0b:38: 6f:14:ae:20:5f:16:95:b8:61:82:53:2a:ab:cb:32: fa:db:e9:64:5c:5a:f1:3b:7b:50:b0:bd:3f:87:5a: 41:1d:06:25:99:98:81:a4:bf:52:d6:b6:f3:9c:17: c9:f0:b9:d5:46:cc:2e:d2:85:bb:51:ff:02:48:85: d7:0f:79:5b:7f:86:d7:fa:b1:f9:d8:9c:cc:1d:09: 18:5a:2f:14:ee:07:eb:36:2d:b8:6f:2a:eb:36:54: 97:c3:62:49:5a:0a:55:7a:cd:39:e5:36:01:82:6e: c1:3d:49:db:67:c8:7a:e6:67:05:9f:12:80:04:f1: f8:8b:78:89:53:47:40:61:ad:c0:74:8f:e7:83:b0: 8a:bd:6f:0a:2e:1f:ce:1b:df:21:1e:97:31:eb:03: 85:36:0f:12:1e:1e:3f:35:a2:7c:60:00:89:48:7f: da:46:2b:9a:a3:10:78:e2:e9:c1:02:7f:fe:f3:ae: 75:e6:1f:55:01:e0:71:4d:a2:ea:57:be:db:76:e3: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:67:8C:3E:F4:43:05:32:65:04:37:5B:18:03:F9:58:3A:EF:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c9:84:83:55:76:a4:a5:86:6e:d2:46:a8:46:1a:0b:08:62: 4e:c9:e5:21:75:05:51:57:15:2b:ca:d3:5a:36:a1:51:52:be: d0:99:ba:97:75:3b:81:64:6c:19:c4:97:96:8e:85:27:ad:6b: 1a:ce:fb:05:e0:03:87:bd:23:41:09:5b:25:7e:0e:ae:16:d2: 47:13:a2:a8:cf:22:a5:9f:00:8a:80:14:42:c1:85:52:76:d9: 88:83:08:95:ec:ae:e5:9f:73:df:6a:88:8d:7d:4b:ee:dd:09: fa:5e:3c:04:18:51:c9:43:a5:87:ec:5a:72:21:62:b2:79:18: 7e:74:97:20:da:d6:d4:44:77:07:2f:06:58:b5:6f:fe:9a:98: 09:bb:4d:fb:ec:ff:70:76:07:cc:41:81:07:66:4b:03:f9:1c: 99:92:15:ac:ee:99:18:ab:47:77:5e:be:44:b3:b2:6e:6a:6c: 2c:c9:76:83:7a:59:ba:eb:fc:48:07:e6:05:cc:c5:0d:b9:f8: 95:83:f5:26:34:ab:79:a6:46:b9:f2:cb:5d:33:29:53:75:c1: ba:4a:b4:b5:c6:99:f6:ad:99:72:d1:26:71:f9:12:00:67:2e: c2:c8:4e:c3:ed:8e:d2:f0:77:09:6d:77:3b:92:c7:ac:5c:11: a9:f1:77:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgIUpHYAe8k/YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmEzZGQ1YTctZTI1ZS00OWIxLTlmM2MtN2UyNjZjZTczMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWKZ1gTsDta7wNG3c848Ez9leUluCxb2U6hA mmxninhYLmQvT4HelL934WgXQ77Ejx3CoZCDj8v1CzhvFK4gXxaVuGGCUyqryzL6 2+lkXFrxO3tQsL0/h1pBHQYlmZiBpL9S1rbznBfJ8LnVRswu0oW7Uf8CSIXXD3lb f4bX+rH52JzMHQkYWi8U7gfrNi24byrrNlSXw2JJWgpVes055TYBgm7BPUnbZ8h6 5mcFnxKABPH4i3iJU0dAYa3AdI/ng7CKvW8KLh/OG98hHpcx6wOFNg8SHh4/NaJ8 YACJSH/aRiuaoxB44unBAn/+86515h9VAeBxTaLqV77bduOejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNcZ4w+9EMFMmUEN1sYA/lYOu/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMjhiNzU1OGMtMGE4Ni0z MGU4LWE0MjktMTU3MGI0NmYyZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnJhINVdqSlhm7SRqhGGgsIYk7J5SF1BVFXFSvK01o2oVFSvtCZupd1 O4FkbBnEl5aOhSetaxrO+wXgA4e9I0EJWyV+Dq4W0kcToqjPIqWfAIqAFELBhVJ2 2YiDCJXsruWfc99qiI19S+7dCfpePAQYUclDpYfsWnIhYrJ5GH50lyDa1tREdwcv Bli1b/6amAm7Tfvs/3B2B8xBgQdmSwP5HJmSFazumRirR3devkSzsm5qbCzJdoN6 Wbrr/EgH5gXMxQ25+JWD9SY0q3mmRrnyy10zKVN1wbpKtLXGmfatmXLRJnH5EgBn LsLITsPtjtLwdwltdzuSx6xcEanxd4o= -----END CERTIFICATE-----Generated at Tue Aug 5 17:17:34 2025 by rpki-client