$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa File: 7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa (raw, json) Hash identifier: NBXbBJdk77oCLFvW8QIOgNd8IKtlnskHzVZLwZA7SfM= Subject key identifier: 2A:C6:B5:55:88:9E:DF:79:C7:42:A6:29:B4:42:5A:5C:0E:C7:C4:16 Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584A7A4B4080A52EB257A0634A80 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 3356 IP address blocks: 23.156.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:40:80:a5:2e:b2:57:a0:63:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=a5a65a71-b7de-417b-a4bb-2d85b7fa434c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:06:34:52:ba:b1:75:f0:9e:24:c8:04:00: 56:09:1c:7a:24:e4:1c:0e:f5:7e:df:43:c1:7d:fa: f3:ba:33:9c:ad:76:b5:ac:43:9c:0d:5a:eb:77:e8: ec:a3:bb:e2:4a:e7:ef:32:c4:8a:28:f4:52:74:84: 72:1a:17:95:50:5a:88:6a:ac:85:20:18:72:ff:fd: dc:75:a4:18:0e:ab:73:90:70:5e:25:3a:c2:e7:42: 59:96:50:4b:59:a5:95:58:9c:9b:a0:ae:0a:ea:7e: 40:f2:19:5d:63:62:9a:10:24:a3:ca:df:bd:15:59: 4d:d3:ab:57:bd:c1:cb:6d:3a:94:c1:48:3f:30:db: 07:bd:7b:57:97:38:bf:5d:6b:53:91:6e:72:66:51: 91:54:dd:6b:81:71:e3:e1:bc:c9:05:0d:f6:17:80: 67:b0:0e:7f:92:5d:7e:9a:67:91:f2:1e:0b:a0:1e: 7f:c5:86:0f:1e:7f:3f:ab:2b:30:ae:02:d1:33:1f: 34:a5:28:89:11:51:69:d4:5f:2c:98:db:19:0e:2f: 6b:88:6e:22:11:33:29:b0:ad:42:d6:49:70:11:53: 9a:ae:17:89:0f:a7:b3:35:0a:cb:9a:55:cf:7c:78: 30:e8:73:15:52:8a:e8:68:1b:0e:2d:09:f2:d4:b3: 4f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:B5:55:88:9E:DF:79:C7:42:A6:29:B4:42:5A:5C:0E:C7:C4:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv4: 23.156.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:77:09:f8:bb:5a:e2:92:43:1b:fb:97:4f:ab:9a:9d:60:bc: 30:f6:5c:b7:8b:94:d0:dc:2e:f2:60:73:e9:4b:fc:99:db:c6: c5:15:c3:65:af:c6:ef:84:25:8d:0f:06:60:56:3f:69:dd:36: eb:00:77:2f:4b:fb:4a:b5:1c:78:f4:9c:a9:68:69:81:bb:67: 10:0d:2d:6a:25:ae:ca:09:61:fc:e0:db:37:1c:29:92:c2:16: 74:5c:c2:8d:bc:a9:7a:92:e3:98:13:2e:ec:c7:b2:fe:01:21: bd:3f:0e:f7:0b:15:b6:01:bc:4e:57:c2:86:ee:16:db:b5:3c: a9:c1:04:ed:3d:20:36:49:e5:06:52:c5:7b:93:0b:21:92:28: 17:a5:2a:3a:de:42:38:27:98:78:e2:7c:c8:23:98:c9:bc:78: eb:d3:64:0e:92:59:4c:21:23:64:4c:14:68:e8:08:5c:38:53: fd:88:be:53:20:38:31:a6:ab:ea:1c:bc:d2:a6:33:76:6a:02: a1:32:cf:02:d0:42:ea:f3:45:98:bc:df:cc:1a:27:fd:b5:18: e8:40:a3:94:02:b5:31:2e:99:f9:06:bb:99:5d:ab:bb:ee:4a: c4:85:73:db:5f:79:ca:d6:43:79:1f:79:b4:e1:17:21:a3:56: 45:82:4f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0CApS6yV6BjSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YTVhNjVhNzEtYjdkZS00MTdiLWE0YmItMmQ4NWI3ZmE0MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujQGNFK6sXXwniTIBABWCRx6JOQcDvV+30PB ffrzujOcrXa1rEOcDVrrd+jso7viSufvMsSKKPRSdIRyGheVUFqIaqyFIBhy//3c daQYDqtzkHBeJTrC50JZllBLWaWVWJyboK4K6n5A8hldY2KaECSjyt+9FVlN06tX vcHLbTqUwUg/MNsHvXtXlzi/XWtTkW5yZlGRVN1rgXHj4bzJBQ32F4BnsA5/kl1+ mmeR8h4LoB5/xYYPHn8/qyswrgLRMx80pSiJEVFp1F8smNsZDi9riG4iETMpsK1C 1klwEVOarheJD6ezNQrLmlXPfHgw6HMVUoroaBsOLQny1LNPLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrGtVWInt95x0KmKbRCWlwOx8QWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvN2YyMjQ5ZjYtNGJiMi0z MWI3LTlmMTQtYWEzZWU0ZDRhMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl3Cfi7WuKSQxv7l0+rmp1gvDD2XLeLlNDcLvJgc+lL/JnbxsUVw2Wv xu+EJY0PBmBWP2ndNusAdy9L+0q1HHj0nKloaYG7ZxANLWolrsoJYfzg2zccKZLC FnRcwo28qXqS45gTLuzHsv4BIb0/DvcLFbYBvE5XwobuFtu1PKnBBO09IDZJ5QZS xXuTCyGSKBelKjreQjgnmHjifMgjmMm8eOvTZA6SWUwhI2RMFGjoCFw4U/2IvlMg ODGmq+ocvNKmM3ZqAqEyzwLQQurzRZi838waJ/21GOhAo5QCtTEumfkGu5ldq7vu SsSFc9tfecrWQ3kfebThFyGjVkWCT0Q= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:07 2025 by rpki-client