$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa File: d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa (raw, json) Hash identifier: tAIj8qn9NACOUu8oJRfjZfW5MG4DQZsvgtwKHP60S4I= Subject key identifier: E3:6A:D1:5C:54:B8:2D:B4:F8:C1:70:F7:0D:36:4B:F9:EE:20:89:76 Certificate issuer: /CN=f89b2137-fc39-48ca-9b75-2b8574c1a143 Certificate serial: 010D0C9F4328584A7085F49EB66BFA6B8C4DD440 Authority key identifier: 1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 395898 IP address blocks: 23.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f4:9e:b6:6b:fa:6b:8c:4d:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89b2137-fc39-48ca-9b75-2b8574c1a143 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=a8faff04-0665-4a8d-b99d-d0e3748f86f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6a:f1:eb:4f:30:a8:8c:9c:1e:42:23:78:6c: 7e:2f:b0:74:a5:6d:84:8f:83:76:a5:ba:db:27:04: f2:37:d6:68:b7:3e:44:eb:b1:2f:d7:ef:14:68:1f: 63:0b:32:2b:59:b0:24:fd:77:82:2e:ff:15:3f:95: 9c:ce:3f:36:7c:e4:d7:2d:6d:00:04:2a:7f:8b:79: e5:91:d8:1e:25:f6:8d:c5:db:c3:18:7b:e6:cd:e2: c9:07:4a:66:98:97:ea:11:dd:d4:fc:af:9e:a9:e0: c8:2a:45:15:e5:28:9a:fd:45:ba:8a:60:7d:a3:fb: 61:5f:2c:ac:14:e3:79:7a:12:13:6a:48:1a:8f:af: 8c:c4:d9:81:29:7a:cd:5e:f5:31:d9:b5:41:aa:92: 7f:b2:bb:12:46:f2:2f:08:79:ea:4c:f7:61:05:77: 6c:12:af:ce:5e:de:98:04:1b:b8:c0:7b:f5:84:4c: 13:3b:4f:00:04:cc:06:54:08:43:46:0f:c7:a2:1c: 83:ff:86:a9:13:b2:21:39:ab:25:72:3c:9c:a1:6e: 68:55:63:69:bc:94:a2:ab:64:85:c3:30:14:80:ce: 5a:5f:53:43:0b:bf:f3:76:68:c9:cc:db:a7:34:ba: d6:12:ce:a3:eb:b4:c0:e2:10:34:0f:cb:ba:3b:29: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6A:D1:5C:54:B8:2D:B4:F8:C1:70:F7:0D:36:4B:F9:EE:20:89:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl X509v3 Authority Key Identifier: keyid:1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer sbgp-ipAddrBlock: critical IPv4: 23.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:46:5d:ba:cb:cc:ff:6e:c5:60:8e:23:6e:66:0d:d6:73:ce: 47:fd:e7:1b:90:1f:b3:28:47:1a:3e:f2:ce:b5:7a:a1:00:a5: de:19:53:2b:ae:5b:e2:f2:89:3a:5d:63:3e:08:71:12:f6:fa: 2c:bb:10:c9:01:08:81:09:a6:16:d8:ce:3c:de:4a:ff:40:27: 7c:48:a4:cd:96:5d:ce:e6:92:3a:7b:32:db:54:ac:63:2d:c3: cc:01:9e:34:87:eb:12:9f:bc:9a:11:1c:1c:b3:77:5a:c3:ed: d3:96:bb:40:f4:f4:4e:f6:93:8a:e0:1d:4c:ef:3d:15:f3:dd: 03:f0:db:ca:84:5f:1f:0c:13:be:d2:38:f4:31:48:43:0e:b5: 02:6f:39:89:d8:39:f9:f2:c6:d4:83:d6:ed:78:39:ee:4e:14: e0:ff:7e:52:58:12:90:00:c2:05:a4:cd:a8:0e:9a:5b:15:c4: 32:12:a4:bc:25:f1:b7:98:e1:3c:41:78:03:1d:14:8a:da:b6: be:9e:b4:f9:33:79:86:7a:85:45:d1:73:49:d7:04:58:8a:84: e7:c3:7f:0a:04:47:d5:d5:5c:dd:1f:e3:a9:e7:54:cd:18:5a: 4b:57:01:ea:19:25:12:21:67:6a:43:17:9f:d5:1b:9a:7c:0a: 9f:53:01:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfSetmv6a4xN1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg5YjIxMzctZmMzOS00OGNhLTliNzUtMmI4NTc0YzFh MTQzMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk YThmYWZmMDQtMDY2NS00YThkLWI5OWQtZDBlMzc0OGY4NmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2rx608wqIycHkIjeGx+L7B0pW2Ej4N2pbrb JwTyN9Zotz5E67Ev1+8UaB9jCzIrWbAk/XeCLv8VP5Wczj82fOTXLW0ABCp/i3nl kdgeJfaNxdvDGHvmzeLJB0pmmJfqEd3U/K+eqeDIKkUV5Sia/UW6imB9o/thXyys FON5ehITakgaj6+MxNmBKXrNXvUx2bVBqpJ/srsSRvIvCHnqTPdhBXdsEq/OXt6Y BBu4wHv1hEwTO08ABMwGVAhDRg/HohyD/4apE7IhOaslcjycoW5oVWNpvJSiq2SF wzAUgM5aX1NDC7/zdmjJzNunNLrWEs6j67TA4hA0D8u6OykLawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONq0VxUuC20+MFw9w02S/nuIIl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mODli MjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1NzRjMWExNDMvZDk2MDQ1N2UtMmVhNC0z MTY2LWI4YTMtOGZkYzdkN2VkYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjg5YjIxMzctZmMzOS00OGNhLTli NzUtMmI4NTc0YzFhMTQzL2Y4OWIyMTM3LWZjMzktNDhjYS05Yjc1LTJiODU3NGMx YTE0My5jcmwwHwYDVR0jBBgwFoAUGxS8Xj/L9LUFYOtZHwtMAXbkit4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mODliMjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1 NzRjMWExNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFGXbrLzP9uxWCOI25mDdZzzkf95xuQH7MoRxo+8s61eqEApd4ZUyuu W+LyiTpdYz4IcRL2+iy7EMkBCIEJphbYzjzeSv9AJ3xIpM2WXc7mkjp7MttUrGMt w8wBnjSH6xKfvJoRHByzd1rD7dOWu0D09E72k4rgHUzvPRXz3QPw28qEXx8ME77S OPQxSEMOtQJvOYnYOfnyxtSD1u14Oe5OFOD/flJYEpAAwgWkzagOmlsVxDISpLwl 8beY4TxBeAMdFIratr6etPkzeYZ6hUXRc0nXBFiKhOfDfwoER9XVXN0f46nnVM0Y WktXAeoZJRIhZ2pDF5/VG5p8Cp9TAc4= -----END CERTIFICATE-----Generated at Sat Aug 9 14:30:37 2025 by rpki-client