$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa File: cb9a4e83-bcfc-3465-82bf-4111784123b0.roa (raw, json) Hash identifier: ml0l/1OKoIdGn8BQozdFuk0m6SBddDIIhEeRa7hR1xY= Subject key identifier: 1F:99:33:14:8A:F6:6E:D0:C4:B3:59:59:56:38:4F:B1:65:97:35:25 Certificate issuer: /CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Certificate serial: 010D0C9F4328584A8576027300D38490392A2CC0 Authority key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 401323 IP address blocks: 23.187.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:02:73:00:d3:84:90:39:2a:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=41cf827d-5d24-4549-ae49-f79859e665a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:3f:a1:f5:ad:c1:08:84:e5:09:49:7d:60: 91:01:a3:e5:f4:83:d9:97:44:a9:50:9e:e8:57:80: 4d:4a:21:7f:ad:8d:9a:57:8c:6c:ce:e6:6c:7f:03: cc:d1:40:ca:3f:82:0b:e3:1d:4b:7f:1d:e0:3c:4e: a9:fb:46:6c:40:86:e3:07:d0:5c:8d:f6:7d:06:d3: ef:99:5a:75:41:73:3b:d4:98:e6:09:92:e3:44:e2: ac:bf:ad:fa:74:6d:e6:ac:4b:12:ca:6b:b0:84:40: ef:30:0d:ee:cf:a5:40:7d:ee:26:2f:98:5d:19:a8: c1:1e:60:32:77:7d:f1:84:5c:54:fa:e1:8e:b2:a2: 23:37:d5:e5:d2:c7:e4:81:66:60:74:55:0a:c4:ff: a1:3e:a1:8a:92:f3:2b:f2:99:5f:05:48:21:9c:29: 76:1b:dc:01:06:80:ca:50:c1:86:b2:af:95:62:3f: 95:4c:5d:14:81:a9:14:41:b0:d1:47:a9:e1:c0:4b: b5:15:a9:b5:04:17:2c:c6:20:02:b3:2c:c7:c2:a4: 9b:9e:d9:bf:f2:1c:58:8d:05:51:1e:39:31:fa:7d: a7:97:49:9c:b8:7b:bf:02:4a:52:26:5b:3f:40:ca: 66:bc:b1:3c:73:da:c0:e7:e4:f5:cf:0f:0b:c1:2a: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:99:33:14:8A:F6:6E:D0:C4:B3:59:59:56:38:4F:B1:65:97:35:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl X509v3 Authority Key Identifier: keyid:EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer sbgp-ipAddrBlock: critical IPv4: 23.187.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:06:3e:e4:e9:36:10:f0:5c:14:64:3c:52:de:b0:1c:14:c1: 55:cc:73:4b:7d:c4:54:36:35:c5:65:c7:f7:29:bd:7d:0f:40: 56:4f:fb:2d:1a:cd:dd:76:97:7a:02:66:b6:67:b7:af:ce:b4: 4c:a6:b0:51:f4:eb:33:88:8c:55:f5:51:b3:6b:94:ed:d8:32: b7:2c:90:0e:71:63:50:bd:88:e4:96:9e:d8:3e:68:75:05:e4: 76:c9:05:c2:1b:e9:57:2c:7d:13:97:56:a5:70:55:25:24:1f: b1:f7:10:bf:20:99:f0:5f:3a:7a:0d:20:3c:f6:88:ec:6a:02: 51:00:da:aa:93:06:bd:f3:f2:f1:11:b2:2f:20:e5:ca:44:42: c4:14:e6:5c:8e:03:4b:59:03:c3:ec:45:d2:4d:29:1b:74:b3: f5:6e:aa:d6:c4:2a:35:ba:6a:b9:11:c6:09:d7:81:bb:b3:4a: 21:b8:6e:fc:42:1e:6f:73:13:40:3d:dc:17:e8:2f:7f:22:98: ab:2f:ac:0b:6e:4f:e3:9a:52:78:75:a0:7d:2f:e2:87:37:96: db:1d:75:16:46:75:f1:49:c2:4b:34:d5:b5:72:7d:34:e6:07: f2:3e:87:60:e0:0d:22:23:f2:87:84:d5:f9:05:1e:fb:47:75: 31:e8:ac:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgJzANOEkDkqLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmExZWY0OGMtMzE5Yi00ODg4LTliNmUtZWZlZGU2ZDE1 OWNhMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NDFjZjgyN2QtNWQyNC00NTQ5LWFlNDktZjc5ODU5ZTY2NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpo/ofWtwQiE5QlJfWCRAaPl9IPZl0SpUJ7o V4BNSiF/rY2aV4xszuZsfwPM0UDKP4IL4x1Lfx3gPE6p+0ZsQIbjB9BcjfZ9BtPv mVp1QXM71JjmCZLjROKsv636dG3mrEsSymuwhEDvMA3uz6VAfe4mL5hdGajBHmAy d33xhFxU+uGOsqIjN9Xl0sfkgWZgdFUKxP+hPqGKkvMr8plfBUghnCl2G9wBBoDK UMGGsq+VYj+VTF0UgakUQbDRR6nhwEu1Fam1BBcsxiACsyzHwqSbntm/8hxYjQVR Hjkx+n2nl0mcuHu/AkpSJls/QMpmvLE8c9rA5+T1zw8LwSqu7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+ZMxSK9m7QxLNZWVY4T7FllzUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFl ZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVkZTZkMTU5Y2EvY2I5YTRlODMtYmNmYy0z NDY1LTgyYmYtNDExMTc4NDEyM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmExZWY0OGMtMzE5Yi00ODg4LTli NmUtZWZlZGU2ZDE1OWNhL2ZhMWVmNDhjLTMxOWItNDg4OC05YjZlLWVmZWRlNmQx NTljYS5jcmwwHwYDVR0jBBgwFoAU69nfBRO1I+Ljr3Q5iNELI2O6Xo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFlZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVk ZTZkMTU5Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7s4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcGPuTpNhDwXBRkPFLesBwUwVXMc0t9xFQ2NcVlx/cpvX0PQFZP+y0a zd12l3oCZrZnt6/OtEymsFH06zOIjFX1UbNrlO3YMrcskA5xY1C9iOSWntg+aHUF 5HbJBcIb6VcsfROXVqVwVSUkH7H3EL8gmfBfOnoNIDz2iOxqAlEA2qqTBr3z8vER si8g5cpEQsQU5lyOA0tZA8PsRdJNKRt0s/VuqtbEKjW6arkRxgnXgbuzSiG4bvxC Hm9zE0A93BfoL38imKsvrAtuT+OaUnh1oH0v4oc3ltsddRZGdfFJwks01bVyfTTm B/I+h2DgDSIj8oeE1fkFHvtHdTHorLM= -----END CERTIFICATE-----Generated at Sat Aug 9 14:27:08 2025 by rpki-client