$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa File: c7fb0120-8473-316e-81b4-70f9121c05f9.roa (raw, json) Hash identifier: /Zx4+keOXnHmH644Qzmwgw7wvbTpFDd3vL5jh/cMfp0= Subject key identifier: 7D:26:B9:1D:30:9A:B1:CC:93:D2:8D:B6:E8:53:A5:E1:1F:B8:01:50 Certificate issuer: /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Certificate serial: 010D0C9F4328584AECC14ABAAC00DDA987C01700 Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 394989 IP address blocks: 23.151.192.0/24 maxlen: 24 23.151.193.0/24 maxlen: 24 2602:febb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4a:ba:ac:00:dd:a9:87:c0:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bbab971e-fc89-42b1-b08d-e67b78a554fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:95:0d:97:17:aa:77:b8:ce:3a:0c:4c:f9: 02:9e:f0:5d:22:8d:79:3a:ad:de:b9:5b:5c:5b:db: 17:a9:73:54:9f:8b:25:38:0a:c5:be:53:2a:27:64: b2:bd:c1:8a:4c:63:90:df:c8:58:19:ec:ed:30:6c: 6c:7d:ad:b0:55:89:2e:71:34:2b:ac:a2:ec:fc:bb: b6:19:19:75:e8:75:87:69:ef:fe:ce:03:13:b0:f6: 34:50:2d:e1:98:7b:30:f2:ac:ac:8c:1e:2e:c0:cd: d5:89:78:3a:0b:5f:2c:2e:f3:77:aa:26:7b:f3:c0: 06:48:ad:b9:00:36:67:a2:77:b8:77:b4:f5:93:1b: 6e:7c:6e:cf:7f:ba:f9:c4:38:be:4e:43:78:a4:d4: a4:5a:55:ee:e8:b4:58:58:9f:d5:fd:eb:ea:0a:45: 6d:56:02:8c:8d:18:76:b4:bf:25:5d:18:18:58:65: c9:02:2e:6d:bd:e6:c6:5c:e9:48:d7:5f:75:f2:45: ab:2b:61:1b:a0:be:a5:38:d6:c1:a6:a2:d9:19:63: 04:33:55:08:70:d3:c8:09:9c:15:2e:3f:a9:cc:e9: c3:c2:16:ce:0d:13:e0:cc:94:c4:10:e7:2b:f7:78: c0:c7:21:e6:91:2a:68:dc:67:75:e2:20:0e:16:1f: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:B9:1D:30:9A:B1:CC:93:D2:8D:B6:E8:53:A5:E1:1F:B8:01:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl X509v3 Authority Key Identifier: keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer sbgp-ipAddrBlock: critical IPv4: 23.151.192.0/23 IPv6: 2602:febb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:93:34:6a:62:ce:36:3c:9d:0a:1c:71:8f:95:06:44:1b:9f: b7:ce:d0:fb:2f:e0:e3:28:fa:3f:10:c7:7f:0c:87:f8:8f:00: d9:fe:ad:c6:07:0c:3f:f5:26:70:e9:49:5e:b7:ab:05:64:07: 5b:8e:4d:98:91:5e:48:43:7a:74:e4:a1:da:74:04:2d:67:21: 05:30:25:9e:b5:06:56:c7:b9:b6:e8:9c:53:7e:f6:07:70:6d: 04:89:cd:c7:75:0d:a4:29:13:af:b9:70:ac:1b:79:dd:57:32: c9:80:d8:15:ea:8f:7f:4a:fd:ea:5f:a9:e4:3a:35:b5:48:4c: 01:66:35:73:d6:0b:85:4b:7d:67:17:f1:dd:e7:bc:d2:0a:2b: dd:39:1a:b6:c1:a0:b5:7e:d8:d0:ee:b6:cc:ab:e8:f7:cb:35: b3:92:a9:45:e5:bb:ad:18:dd:65:c1:cb:eb:77:8c:45:75:01: eb:d9:93:93:05:f1:bf:fc:c9:16:66:a5:92:2e:a6:d9:fa:e3: 55:f6:f4:77:74:19:7c:f7:15:05:fe:52:5c:b2:02:e7:36:1b: b1:b0:fc:ca:3f:c5:3c:84:c2:51:5a:43:0b:81:16:9d:1f:c7: 97:af:7b:02:8a:6a:35:43:56:c2:8c:27:95:3c:f8:b3:67:9f: 71:97:9d:51 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErswUq6rADdqYfAFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyMGI1ZDQtZGE1Ni00OWIxLThhZTEtNzk4N2E2YWZk ZTk5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmJhYjk3MWUtZmM4OS00MmIxLWIwOGQtZTY3Yjc4YTU1NGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHaVDZcXqne4zjoMTPkCnvBdIo15Oq3euVtc W9sXqXNUn4slOArFvlMqJ2SyvcGKTGOQ38hYGeztMGxsfa2wVYkucTQrrKLs/Lu2 GRl16HWHae/+zgMTsPY0UC3hmHsw8qysjB4uwM3ViXg6C18sLvN3qiZ788AGSK25 ADZnone4d7T1kxtufG7Pf7r5xDi+TkN4pNSkWlXu6LRYWJ/V/evqCkVtVgKMjRh2 tL8lXRgYWGXJAi5tvebGXOlI11918kWrK2EboL6lONbBpqLZGWMEM1UIcNPICZwV Lj+pzOnDwhbODRPgzJTEEOcr93jAxyHmkSpo3Gd14iAOFh/cIQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFH0muR0wmrHMk9KNtuhTpeEfuAFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIw YjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3YTZhZmRlOTkvYzdmYjAxMjAtODQ3My0z MTZlLTgxYjQtNzBmOTEyMWMwNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTEyMGI1ZDQtZGE1Ni00OWIxLThh ZTEtNzk4N2E2YWZkZTk5L2ExMjBiNWQ0LWRhNTYtNDliMS04YWUxLTc5ODdhNmFm ZGU5OS5jcmwwHwYDVR0jBBgwFoAUwNcz4F1MBW46fpQzLcRr6AFIaIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIwYjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3 YTZhZmRlOTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5fAMA4E AgACMAgDBgQmAv67ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzkzRqYs42PJ0KHHGPlQZEG5+3ztD7L+Dj KPo/EMd/DIf4jwDZ/q3GBww/9SZw6Ulet6sFZAdbjk2YkV5IQ3p05KHadAQtZyEF MCWetQZWx7m26JxTfvYHcG0Eic3HdQ2kKROvuXCsG3ndVzLJgNgV6o9/Sv3qX6nk OjW1SEwBZjVz1guFS31nF/Hd57zSCivdORq2waC1ftjQ7rbMq+j3yzWzkqlF5but GN1lwcvrd4xFdQHr2ZOTBfG//MkWZqWSLqbZ+uNV9vR3dBl89xUF/lJcsgLnNhux sPzKP8U8hMJRWkMLgRadH8eXr3sCimo1Q1bCjCeVPPizZ59xl51R -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:50 2025 by rpki-client