$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa File: e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa (raw, json) Hash identifier: EXhDRT5ljPzqFX30J4/0QfU+cCr5UlfuEMk9fTyafDw= Subject key identifier: AE:3B:43:88:33:A9:14:53:B1:66:6A:CB:4A:5C:B8:E3:BA:01:FF:5C Certificate issuer: /CN=74abbfb2-e5dc-4531-8f8b-856399f8fa45 Certificate serial: 010D0C9F4328584AA85BBAEC5D3687D10D4D4C80 Authority key identifier: 08:12:D1:FE:DD:1B:0E:26:9D:4C:D4:93:35:35:92:84:7B:F8:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 23.188.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ba:ec:5d:36:87:d1:0d:4d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74abbfb2-e5dc-4531-8f8b-856399f8fa45 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=41782e8d-0c1a-40f9-8229-6f890918bff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:89:b7:bf:86:9d:8d:08:d1:3a:96:da:59: f9:5f:23:97:b4:df:b6:02:63:6f:0e:93:9b:57:02: 1d:ce:b5:f8:4f:8d:be:c9:ea:e4:c8:1f:a5:73:eb: 1f:ad:b5:e3:a1:53:71:4f:b8:8b:ac:f5:4a:1e:e8: 38:ac:d9:cc:de:3b:31:f8:92:88:b5:2a:61:19:91: e1:ce:57:7a:59:6b:34:0b:1a:d7:ff:05:7d:d5:c1: 66:c0:d3:ef:af:04:82:26:c7:86:61:5e:f1:d7:65: 64:14:f2:f6:a4:f8:6d:be:bc:e1:3c:60:bb:66:35: 33:9c:3a:6f:56:4c:27:71:ec:ae:55:49:da:58:53: 0d:95:75:55:43:f7:2f:76:49:48:2a:ec:e3:75:76: 2b:84:36:67:83:5f:4a:66:4e:dd:8a:b0:91:ee:d0: bb:1c:84:11:c0:0b:05:89:ae:1f:09:44:1b:4d:25: 08:e8:d3:71:e8:db:80:10:89:d3:71:d2:3f:80:05: 4d:46:f4:de:e0:ac:d4:3b:46:1f:ed:92:ae:cf:22: 09:46:be:2a:c5:75:f6:ae:ae:82:cb:0b:26:9c:6e: 96:61:ee:dd:5c:46:14:99:66:40:5d:ce:b8:ec:d0: 4c:fe:f7:20:df:1a:b3:a5:7a:f8:b9:24:8c:56:18: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3B:43:88:33:A9:14:53:B1:66:6A:CB:4A:5C:B8:E3:BA:01:FF:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.crl X509v3 Authority Key Identifier: keyid:08:12:D1:FE:DD:1B:0E:26:9D:4C:D4:93:35:35:92:84:7B:F8:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer sbgp-ipAddrBlock: critical IPv4: 23.188.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:81:a6:8b:0c:93:05:cf:be:d1:1d:ca:ae:56:2e:c1:e5:2d: 8d:f0:cd:86:04:61:e5:11:ce:79:2d:5a:f4:a1:5e:91:6c:c9: 73:0f:64:c1:18:23:76:e5:64:c5:59:e5:a9:88:a1:bc:c9:49: b2:7a:8b:46:7d:d5:c0:e8:83:62:3d:6a:1e:22:a3:f4:01:dc: 17:11:0e:bd:30:cf:8f:df:bb:a6:d1:d8:1e:c4:f8:28:ce:74: 84:5e:e9:c3:e2:a8:34:3b:58:78:f2:6e:94:be:e4:b3:21:d8: 9b:3c:a5:74:bc:7f:79:f1:28:14:dd:b7:52:81:da:13:4b:7e: 92:c4:60:44:b1:f8:7d:e5:c4:5a:e3:c1:90:58:28:15:e0:dd: 2b:7a:20:ec:5f:5a:42:41:bf:06:f2:4e:17:71:ac:fa:04:d7: 20:b8:ff:44:9b:6e:5a:80:12:de:c2:0a:ef:58:cd:69:1e:a6: 44:82:10:aa:46:d1:43:32:e2:4e:56:33:73:54:05:c1:00:99: 8f:c9:c5:12:37:82:16:cb:d6:5e:4b:00:1b:98:41:d7:74:b2: 42:b1:4c:aa:a1:09:08:05:97:02:93:74:10:b0:3d:8f:53:d9: 10:90:ce:52:b2:f8:cf:2c:d9:cc:6d:bd:c8:e7:72:97:9d:bc: 2d:e0:0f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7rsXTaH0Q1NTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhYmJmYjItZTVkYy00NTMxLThmOGItODU2Mzk5Zjhm YTQ1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk NDE3ODJlOGQtMGMxYS00MGY5LTgyMjktNmY4OTA5MThiZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X2Jt7+GnY0I0TqW2ln5XyOXtN+2AmNvDpOb VwIdzrX4T42+yerkyB+lc+sfrbXjoVNxT7iLrPVKHug4rNnM3jsx+JKItSphGZHh zld6WWs0CxrX/wV91cFmwNPvrwSCJseGYV7x12VkFPL2pPhtvrzhPGC7ZjUznDpv VkwnceyuVUnaWFMNlXVVQ/cvdklIKuzjdXYrhDZng19KZk7dirCR7tC7HIQRwAsF ia4fCUQbTSUI6NNx6NuAEInTcdI/gAVNRvTe4KzUO0Yf7ZKuzyIJRr4qxXX2rq6C ywsmnG6WYe7dXEYUmWZAXc647NBM/vcg3xqzpXr4uSSMVhhgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK47Q4gzqRRTsWZqy0pcuOO6Af9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NGFi YmZiMi1lNWRjLTQ1MzEtOGY4Yi04NTYzOTlmOGZhNDUvZTljZTZhMGUtYjFmYS0z OTg3LWI5YWQtZDcxOTU3ZDE4NzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzRhYmJmYjItZTVkYy00NTMxLThm OGItODU2Mzk5ZjhmYTQ1Lzc0YWJiZmIyLWU1ZGMtNDUzMS04ZjhiLTg1NjM5OWY4 ZmE0NS5jcmwwHwYDVR0jBBgwFoAUCBLR/t0bDiadTNSTNTWShHv4QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NGFiYmZiMi1lNWRjLTQ1MzEtOGY4Yi04NTYz OTlmOGZhNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKBposMkwXPvtEdyq5WLsHlLY3wzYYEYeURznktWvShXpFsyXMPZMEY I3blZMVZ5amIobzJSbJ6i0Z91cDog2I9ah4io/QB3BcRDr0wz4/fu6bR2B7E+CjO dIRe6cPiqDQ7WHjybpS+5LMh2Js8pXS8f3nxKBTdt1KB2hNLfpLEYESx+H3lxFrj wZBYKBXg3St6IOxfWkJBvwbyThdxrPoE1yC4/0SbblqAEt7CCu9YzWkepkSCEKpG 0UMy4k5WM3NUBcEAmY/JxRI3ghbL1l5LABuYQdd0skKxTKqhCQgFlwKTdBCwPY9T 2RCQzlKy+M8s2cxtvcjncpedvC3gD9o= -----END CERTIFICATE-----Generated at Fri Aug 8 12:55:09 2025 by rpki-client