$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa File: 0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa (raw, json) Hash identifier: q+RFwTkpBhjUL/V99dh5gGnMqZl4riofL6FHlUsT9c0= Subject key identifier: 51:19:3E:95:35:F2:84:63:7F:33:61:9D:E7:54:16:17:D8:4D:30:03 Certificate issuer: /CN=dfc88768-1b58-474d-a340-376827992098 Certificate serial: 010D0C9F4328584AA6F646C1A14CE549B36EE500 Authority key identifier: F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 21629 IP address blocks: 23.134.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:46:c1:a1:4c:e5:49:b3:6e:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc88768-1b58-474d-a340-376827992098 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=fb521fd3-08c2-49a3-910a-4ad8335fed36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:cd:bf:05:f7:32:96:67:aa:bc:88:a5:66: df:82:71:b3:e9:89:e6:84:a5:f4:90:49:73:58:32: 01:0c:dd:5f:ba:4a:c0:07:ce:97:09:d8:f7:e2:ca: 45:2c:a7:f3:d7:5c:55:40:4f:81:7c:f7:3d:d6:6d: f9:90:c7:52:fd:06:bd:57:79:99:7a:32:9e:3f:af: fb:43:fb:05:1c:20:ca:96:ae:79:49:1e:87:e5:6b: 3e:c1:85:01:05:f7:76:b2:8d:23:6d:e3:1e:50:b8: 7c:88:d6:64:0f:14:8b:ce:50:18:ba:e9:99:b1:aa: 2f:50:3e:7d:07:37:db:c3:1d:02:7e:a4:2a:5d:9c: 11:00:c8:2b:14:ca:1f:15:69:4f:8a:eb:d8:33:fe: 67:87:7a:b7:81:8e:78:d6:53:43:55:a5:07:08:c8: 77:3f:16:06:59:d2:31:f4:30:d3:6a:08:90:dd:41: 5d:f4:f4:7b:8e:ab:75:44:cb:32:4c:f4:a9:e1:52: 23:38:3e:e4:b8:20:4d:11:3c:aa:1e:08:0b:60:df: 56:b9:a4:8c:a6:c8:d4:c0:34:b1:f1:60:b8:12:cc: 5f:dc:07:8c:ca:33:43:0e:1e:2f:06:f0:fb:e3:31: 48:54:d2:a3:15:af:57:fd:68:ac:c3:5b:35:c0:27: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:3E:95:35:F2:84:63:7F:33:61:9D:E7:54:16:17:D8:4D:30:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl X509v3 Authority Key Identifier: keyid:F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer sbgp-ipAddrBlock: critical IPv4: 23.134.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:05:91:1d:c4:9d:86:48:de:ef:a6:b6:4a:31:a2:1f:b8:67: 24:e7:5d:64:5d:54:08:fe:a4:cb:39:74:43:c7:53:4b:f0:c8: 22:95:07:87:cf:76:45:a9:19:39:5f:d3:ae:b1:27:8c:bb:cc: fc:0d:95:b6:23:52:13:5e:ae:8a:56:aa:42:37:b5:7e:c3:70: 71:97:6a:fa:2b:67:e6:1b:ee:a0:4d:44:89:b7:7f:11:c2:25: a8:b4:28:f1:09:6f:86:c1:87:6a:8f:a5:76:61:ce:5f:33:2d: ca:07:2c:b1:b6:db:f9:0a:c4:a9:9a:b9:7c:16:58:90:b6:34: 2e:07:dd:36:e5:81:92:7d:14:1f:a3:62:2d:51:fa:ad:09:a4: 3d:06:68:0e:2b:83:ec:e3:ea:99:5b:3f:1a:aa:e3:0a:1b:26: 53:d6:c2:0b:61:7a:7d:09:a3:06:fd:5e:28:1b:7a:15:2f:87: f8:c1:ff:88:4c:0e:f0:2e:0b:cf:63:ee:fb:fb:51:9f:34:ce: f7:6c:fc:76:0f:27:70:bc:42:7a:19:69:3c:69:95:b1:6a:fe: 57:c6:0d:c0:21:bb:39:23:18:c7:b6:46:16:e5:95:f3:8b:8c: 6a:a1:a8:d2:af:e5:04:74:c2:96:b2:2a:8d:c7:ac:83:bf:26: 92:dd:4c:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9kbBoUzlSbNu5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjODg3NjgtMWI1OC00NzRkLWEzNDAtMzc2ODI3OTky MDk4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk ZmI1MjFmZDMtMDhjMi00OWEzLTkxMGEtNGFkODMzNWZlZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzTNvwX3MpZnqryIpWbfgnGz6YnmhKX0kElz WDIBDN1fukrAB86XCdj34spFLKfz11xVQE+BfPc91m35kMdS/Qa9V3mZejKeP6/7 Q/sFHCDKlq55SR6H5Ws+wYUBBfd2so0jbeMeULh8iNZkDxSLzlAYuumZsaovUD59 Bzfbwx0CfqQqXZwRAMgrFMofFWlPiuvYM/5nh3q3gY541lNDVaUHCMh3PxYGWdIx 9DDTagiQ3UFd9PR7jqt1RMsyTPSp4VIjOD7kuCBNETyqHggLYN9WuaSMpsjUwDSx 8WC4Esxf3AeMyjNDDh4vBvD74zFIVNKjFa9X/Wisw1s1wCcINQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEZPpU18oRjfzNhnedUFhfYTTADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4 ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4Mjc5OTIwOTgvMGY1ZmNkMmMtYzExNS0z ODFkLTgzYmYtOGJjZmQzM2NiYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZjODg3NjgtMWI1OC00NzRkLWEz NDAtMzc2ODI3OTkyMDk4L2RmYzg4NzY4LTFiNTgtNDc0ZC1hMzQwLTM3NjgyNzk5 MjA5OC5jcmwwHwYDVR0jBBgwFoAU9UapEYbSMklkzrvABv6x5EYHaoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4 Mjc5OTIwOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgFkR3EnYZI3u+mtkoxoh+4ZyTnXWRdVAj+pMs5dEPHU0vwyCKVB4fP dkWpGTlf066xJ4y7zPwNlbYjUhNeropWqkI3tX7DcHGXavorZ+Yb7qBNRIm3fxHC Jai0KPEJb4bBh2qPpXZhzl8zLcoHLLG22/kKxKmauXwWWJC2NC4H3TblgZJ9FB+j Yi1R+q0JpD0GaA4rg+zj6plbPxqq4wobJlPWwgthen0Jowb9XigbehUvh/jB/4hM DvAuC89j7vv7UZ80zvds/HYPJ3C8QnoZaTxplbFq/lfGDcAhuzkjGMe2RhbllfOL jGqhqNKv5QR0wpayKo3HrIO/JpLdTG4= -----END CERTIFICATE-----Generated at Sat Aug 9 14:18:59 2025 by rpki-client