$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa File: 91e1a3cc-e019-3754-b8b6-315f387f30d2.roa (raw, json) Hash identifier: 77vq+IXsZO3R+bGbFA7WHcv5TKItgHPwbxtaR3Lt2Fc= Subject key identifier: 7C:84:B7:10:81:04:76:CA:2B:60:13:D9:BA:7A:2E:A4:BB:06:27:EF Certificate issuer: /CN=478a0a21-d101-464c-8706-25bb157545c8 Certificate serial: 010D0C9F4328584A9FFBA984AF6754B53A20FC00 Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 401457 IP address blocks: 23.128.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a9:84:af:67:54:b5:3a:20:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=0ad4b019-acba-48d1-b1ac-e5262b99f444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:db:39:fc:fd:81:90:9b:02:0e:c7:12:b2:7e: 44:bf:bb:0e:30:25:bd:2e:64:d0:0e:d1:40:75:05: 93:3d:5f:e6:8d:03:24:fd:64:50:38:c2:ff:c5:9f: 03:41:37:53:12:e0:55:99:c8:52:2e:c3:43:e9:18: 62:bb:64:76:f9:b0:bc:6e:11:47:1c:09:01:2a:1a: 8d:ea:2c:86:fe:31:8e:29:8c:7a:64:f1:74:96:f3: 47:a4:42:28:2b:87:ec:69:06:36:e8:8b:f6:0f:f9: fb:4e:84:db:c0:5f:c7:ab:6b:c7:a7:4c:2a:57:19: 08:66:c2:42:7e:a4:d7:db:ca:34:d1:62:9c:ac:bb: a5:92:e8:e9:13:65:be:11:dd:09:d0:a0:f7:49:c4: 5b:c2:1c:cd:d5:36:51:34:b4:64:b9:96:93:a6:ac: 15:c1:c8:b3:78:84:ef:75:ec:38:b2:36:da:62:e3: 0b:0f:82:4a:9a:e6:c4:f8:17:2a:99:23:cd:f3:e0: f3:11:65:41:a3:ac:d0:55:c5:65:dc:07:2b:db:c3: 36:72:1d:4e:a5:4d:c4:9c:ef:36:21:04:a2:87:a4: 84:f0:02:a6:8a:46:9e:5e:e7:dc:59:a3:1b:20:a5: 0b:f7:0b:3a:3d:3a:bb:c6:03:dd:4e:41:c6:ff:14: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:84:B7:10:81:04:76:CA:2B:60:13:D9:BA:7A:2E:A4:BB:06:27:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl X509v3 Authority Key Identifier: keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer sbgp-ipAddrBlock: critical IPv4: 23.128.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d1:2b:4c:ee:97:12:03:0a:8f:80:84:6f:45:a2:49:02:72: 51:e7:50:d1:82:2a:03:2b:9c:70:2c:e1:29:b3:c7:8d:9b:e9: 82:41:d2:e5:64:7f:5e:ba:db:dd:19:95:8f:b8:d3:09:11:61: 78:10:97:30:d5:22:74:8b:17:89:0f:c5:46:5a:e1:2f:20:8f: 31:45:8c:fd:42:9f:d8:7d:87:c0:4e:e0:db:b2:95:dd:ed:2e: d5:33:29:f0:cc:ca:69:98:bd:f7:ed:8f:a2:73:6b:b1:10:d7: 90:3f:23:61:a7:f3:5f:77:63:b5:1e:7b:7e:55:49:a7:b3:4b: 14:62:41:df:f0:5f:2d:cf:70:62:bd:d1:4b:3e:ff:fa:c2:c7: 57:99:15:0c:14:90:5d:69:38:e7:3c:41:9f:f7:a7:ea:33:32: bd:96:de:81:42:79:c5:f0:c7:a1:0c:a0:83:f9:c4:eb:fd:26: f4:52:1e:7d:99:17:32:52:bf:32:86:b1:3c:de:cd:6c:a8:ee: 98:30:4a:b5:36:af:61:1f:4a:2f:ad:8b:43:41:ac:cd:af:74: b0:c3:14:6e:8d:5a:bb:29:7b:bc:57:a2:5a:52:43:14:12:5a: d4:cc:ab:e3:30:05:3c:db:72:e4:77:e7:51:cd:f5:b1:1d:5c: ba:4a:e4:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6mEr2dUtTog/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc4YTBhMjEtZDEwMS00NjRjLTg3MDYtMjViYjE1NzU0 NWM4MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MGFkNGIwMTktYWNiYS00OGQxLWIxYWMtZTUyNjJiOTlmNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjts5/P2BkJsCDscSsn5Ev7sOMCW9LmTQDtFA dQWTPV/mjQMk/WRQOML/xZ8DQTdTEuBVmchSLsND6Rhiu2R2+bC8bhFHHAkBKhqN 6iyG/jGOKYx6ZPF0lvNHpEIoK4fsaQY26Iv2D/n7ToTbwF/Hq2vHp0wqVxkIZsJC fqTX28o00WKcrLulkujpE2W+Ed0J0KD3ScRbwhzN1TZRNLRkuZaTpqwVwcizeITv dew4sjbaYuMLD4JKmubE+BcqmSPN8+DzEWVBo6zQVcVl3Acr28M2ch1OpU3EnO82 IQSih6SE8AKmikaeXufcWaMbIKUL9ws6PTq7xgPdTkHG/xQ/9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyEtxCBBHbKK2AT2bp6LqS7BifvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80Nzhh MGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJiMTU3NTQ1YzgvOTFlMWEzY2MtZTAxOS0z NzU0LWI4YjYtMzE1ZjM4N2YzMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDc4YTBhMjEtZDEwMS00NjRjLTg3 MDYtMjViYjE1NzU0NWM4LzQ3OGEwYTIxLWQxMDEtNDY0Yy04NzA2LTI1YmIxNTc1 NDVjOC5jcmwwHwYDVR0jBBgwFoAUNcXLPqvEc4Whq6zjIWHTNz4I6RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NzhhMGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJi MTU3NTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDRK0zulxIDCo+AhG9FokkCclHnUNGCKgMrnHAs4Smzx42b6YJB0uVk f166290ZlY+40wkRYXgQlzDVInSLF4kPxUZa4S8gjzFFjP1Cn9h9h8BO4Nuyld3t LtUzKfDMymmYvfftj6Jza7EQ15A/I2Gn8193Y7Uee35VSaezSxRiQd/wXy3PcGK9 0Us+//rCx1eZFQwUkF1pOOc8QZ/3p+ozMr2W3oFCecXwx6EMoIP5xOv9JvRSHn2Z FzJSvzKGsTzezWyo7pgwSrU2r2EfSi+ti0NBrM2vdLDDFG6NWrspe7xXolpSQxQS WtTMq+MwBTzbcuR351HN9bEdXLpK5Ok= -----END CERTIFICATE-----Generated at Sat Aug 9 22:48:04 2025 by rpki-client