$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa File: 51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (raw, json) Hash identifier: ubOfH5LkonzzstKFv0RuWrY2oCi+lAGbc9nr5688hqc= Subject key identifier: A8:16:0B:07:FC:F8:68:73:2D:81:22:0C:BF:A9:82:C4:15:44:71:A1 Certificate issuer: /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Certificate serial: 010D0C9F4328584A7E7B5F409BBAA9D6193FC900 Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 395185 IP address blocks: 23.137.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5f:40:9b:ba:a9:d6:19:3f:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=8e17f297-a74b-4274-ab71-37e04886cfac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:a1:34:ef:53:17:a0:32:51:72:80:83:09: 1f:0f:7b:c2:9b:79:69:94:ec:b1:a8:0d:79:94:7e: 9a:26:37:bc:ae:5e:db:56:d7:7e:94:45:5e:0e:4b: 9c:27:7a:c4:60:d8:b2:51:5f:3d:20:1f:0e:83:5f: a6:b2:b4:d3:07:6b:58:c8:da:15:2f:fa:50:a5:60: 84:a8:33:76:74:04:70:04:2a:6f:b3:c2:d9:d5:06: bc:af:8e:4d:5d:ac:97:77:5d:c9:87:4e:82:2c:ad: 05:ef:ea:df:41:1f:9d:88:7b:9f:db:8e:7f:99:9b: 7c:ab:0a:0f:a6:2a:15:f6:4e:ae:d3:9e:f2:67:c3: 04:c9:94:58:66:85:19:02:77:dc:18:65:8d:1d:ab: 6d:ce:db:f7:9b:e6:5c:78:10:fb:f7:4d:8e:43:84: 99:06:7f:b9:05:b6:68:3b:5f:4f:a9:aa:5a:96:a7: b6:5b:a0:e0:4d:63:e4:9c:5d:16:59:eb:d8:f9:3b: 0b:6a:59:da:1f:89:e8:ef:71:1f:c7:39:0e:18:82: 41:d8:21:e0:ff:86:69:a7:16:68:07:88:65:be:6c: 2b:71:2c:d3:03:b5:55:d0:e6:1f:6e:02:e0:59:78: c5:43:3f:37:86:a1:8e:51:6c:0c:25:03:4c:d6:e1: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:16:0B:07:FC:F8:68:73:2D:81:22:0C:BF:A9:82:C4:15:44:71:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl X509v3 Authority Key Identifier: keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer sbgp-ipAddrBlock: critical IPv4: 23.137.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:94:32:89:45:96:5d:0a:61:48:77:c1:d4:38:f3:d8:ac:ee: c3:fd:67:aa:1d:be:24:e8:c0:ce:66:67:23:a7:2f:b8:4f:58: 5e:16:1d:05:23:65:9b:f6:04:03:22:2d:ce:32:00:62:24:09: 6b:39:b3:fd:d0:30:6c:25:2c:b4:b6:93:70:54:a2:2d:1b:18: 20:d4:76:ac:53:f3:e6:1c:a2:10:28:30:9b:43:ec:99:23:b3: a8:c4:40:46:fa:20:da:fa:7c:66:ea:e4:60:0e:d4:b3:d0:4a: d6:4a:28:0a:5b:27:ea:f1:61:0f:e6:0f:8f:4c:ff:1c:6d:c4: 33:9a:61:27:f0:e9:4e:18:bc:b4:c8:30:88:29:73:3d:c5:a1: d1:d0:4c:b8:b5:2f:02:53:84:8c:eb:4f:2b:f6:a2:d1:81:6c: 09:4e:37:6b:9d:d2:d1:91:ea:89:e8:59:b6:a8:47:61:21:c2: c9:d3:d5:d7:09:2a:b5:1a:e4:93:b1:50:d8:4c:86:a1:af:da: ec:40:c4:aa:68:59:e6:7f:9c:94:61:b1:36:77:64:bd:1b:76: e5:51:10:ae:6b:47:b4:2f:91:93:33:18:91:e8:be:c9:ee:cb: d8:b4:0e:6d:a4:2b:5a:4b:24:71:74:07:6a:43:eb:02:6f:a9: ed:0e:82:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e19Am7qp1hk/yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBjMWJmNjgtOWRjOS00ZDBmLWExN2ItM2QwZjg0NWJi ZDBmMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OGUxN2YyOTctYTc0Yi00Mjc0LWFiNzEtMzdlMDQ4ODZjZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeWhNO9TF6AyUXKAgwkfD3vCm3lplOyxqA15 lH6aJje8rl7bVtd+lEVeDkucJ3rEYNiyUV89IB8Og1+msrTTB2tYyNoVL/pQpWCE qDN2dARwBCpvs8LZ1Qa8r45NXayXd13Jh06CLK0F7+rfQR+diHuf245/mZt8qwoP pioV9k6u057yZ8MEyZRYZoUZAnfcGGWNHattztv3m+ZceBD7902OQ4SZBn+5BbZo O19Pqapalqe2W6DgTWPknF0WWevY+TsLalnaH4no73EfxzkOGIJB2CHg/4ZppxZo B4hlvmwrcSzTA7VV0OYfbgLgWXjFQz83hqGOUWwMJQNM1uERhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgWCwf8+GhzLYEiDL+pgsQVRHGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGMx YmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1YmJkMGYvNTFiYTM0ZjItMGY4MC0z YThiLTgwMmUtMDNhMmFmYzQ4N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBjMWJmNjgtOWRjOS00ZDBmLWEx N2ItM2QwZjg0NWJiZDBmLzcwYzFiZjY4LTlkYzktNGQwZi1hMTdiLTNkMGY4NDVi YmQwZi5jcmwwHwYDVR0jBBgwFoAUM7wGYFV++Ssa/p8C4ub26K0mMeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBm ODQ1YmJkMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4m4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWUMolFll0KYUh3wdQ489is7sP9Z6odviTowM5mZyOnL7hPWF4WHQUj ZZv2BAMiLc4yAGIkCWs5s/3QMGwlLLS2k3BUoi0bGCDUdqxT8+YcohAoMJtD7Jkj s6jEQEb6INr6fGbq5GAO1LPQStZKKApbJ+rxYQ/mD49M/xxtxDOaYSfw6U4YvLTI MIgpcz3FodHQTLi1LwJThIzrTyv2otGBbAlON2ud0tGR6onoWbaoR2EhwsnT1dcJ KrUa5JOxUNhMhqGv2uxAxKpoWeZ/nJRhsTZ3ZL0bduVREK5rR7QvkZMzGJHovsnu y9i0Dm2kK1pLJHF0B2pD6wJvqe0Ogjk= -----END CERTIFICATE-----Generated at Tue Aug 5 08:21:10 2025 by rpki-client