$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/dbcba92f-5a5f-3858-b11b-9842497c7db4.roa File: dbcba92f-5a5f-3858-b11b-9842497c7db4.roa (raw, json) Hash identifier: rwPXRXfoVvlqYW65ySsldS+zTKR3abOJjtuDpV+f/fQ= Subject key identifier: A2:B5:ED:67:B5:A6:36:8C:A8:B1:11:26:B8:2F:92:D5:85:0C:55:CC Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F43285849E761DBA4E8D7004E1F3F91E0 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/dbcba92f-5a5f-3858-b11b-9842497c7db4.roa Signing time: Mon 19 May 2025 10:02:44 +0000 ROA not before: Mon 19 May 2025 10:02:44 +0000 ROA not after: Sun 17 Aug 2025 10:02:44 +0000 asID: 63916 IP address blocks: 23.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:61:db:a4:e8:d7:00:4e:1f:3f:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: May 19 10:02:44 2025 GMT Not After : Aug 17 10:02:44 2025 GMT Subject: CN=071ace2a-7e66-47f1-b5b8-320c3ac6f10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:77:86:80:25:8c:44:01:1c:51:65:d7:e9: 57:52:96:51:25:8e:95:fe:87:05:66:1b:4f:be:81: 18:f8:ed:e9:ee:68:c0:75:70:f5:dd:b7:2e:c4:a1: 04:f0:b8:52:33:c4:35:8f:3b:73:09:72:a4:c0:3f: 9c:3a:61:59:51:f4:4f:a9:fd:70:f2:78:35:5e:f3: 5f:52:b9:55:e6:1c:99:53:14:45:59:11:9a:1b:5f: f2:ac:9b:b7:0b:63:35:23:48:cf:45:e8:8e:73:9f: 93:7d:34:2c:e6:6a:ab:93:cb:d2:56:9a:14:51:45: 11:eb:d0:48:17:2e:23:38:f1:b9:46:7e:cc:54:0f: 7b:20:55:54:2c:96:bf:d9:48:a3:06:d9:64:86:38: c1:e3:57:37:44:b0:1a:da:09:00:4e:f8:ab:6c:d3: e6:1b:3d:10:fa:92:07:e4:52:5b:bf:ab:4c:5a:b6: ec:21:a9:30:dd:c7:e2:d4:d6:7b:f7:b7:22:3a:05: 13:6c:24:39:b2:15:62:64:df:75:60:d3:e0:78:7d: d2:85:8c:de:a1:e4:af:01:f5:19:62:e4:26:ab:96: 7a:53:5b:1f:6a:ed:4a:01:2f:87:44:71:cf:36:06: 42:46:83:e7:91:b9:a9:e9:c8:7c:df:18:84:20:03: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B5:ED:67:B5:A6:36:8C:A8:B1:11:26:B8:2F:92:D5:85:0C:55:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/dbcba92f-5a5f-3858-b11b-9842497c7db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 23.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:68:9e:47:7c:ab:5d:6f:3e:e5:96:ce:ac:75:12:c3:7f:a5: e5:f0:5a:9b:e6:e1:da:f1:17:26:c2:94:a9:2a:d9:e4:08:18: 35:54:ba:bb:f4:2e:dd:5e:89:ec:0a:42:a3:be:7e:16:41:79: 8c:a6:ee:bb:83:72:e0:f7:7b:24:8c:42:06:2b:06:58:77:9f: 7b:64:f2:16:33:15:f7:64:ad:00:7a:a6:18:84:6a:d9:80:73: c1:9f:a4:ff:2f:72:e0:e6:84:37:e2:d1:ba:5c:79:2c:b5:dd: 64:1c:8d:e6:14:94:b5:06:94:52:58:d9:d1:7a:23:5d:4c:b1: 0a:a7:3e:8d:e5:ad:ed:6a:19:a5:b9:1c:ea:90:da:70:14:07: 2f:04:6e:dc:90:94:9d:29:c0:0c:58:33:1e:48:d6:4a:6b:bf: 83:98:ca:8d:d3:c6:22:1f:8e:ef:67:17:62:e8:a3:d4:73:72: ef:ff:bf:03:6d:88:97:c2:78:64:5b:95:12:17:b2:6b:d0:36: f7:0b:7f:34:de:12:a8:b6:b1:20:d5:f9:6f:21:40:3e:66:1c: ab:d3:aa:24:9b:72:a6:e5:3e:93:00:0c:ab:90:2f:9d:43:f4: 3f:44:a4:f8:9f:a7:94:65:aa:51:73:d5:f3:bf:5b:fa:80:c6: 92:64:e2:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnYduk6NcATh8/keAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDUxOTEwMDI0NFoXDTI1MDgxNzEwMDI0NFowLzEtMCsGA1UEAxMk MDcxYWNlMmEtN2U2Ni00N2YxLWI1YjgtMzIwYzNhYzZmMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS13hoAljEQBHFFl1+lXUpZRJY6V/ocFZhtP voEY+O3p7mjAdXD13bcuxKEE8LhSM8Q1jztzCXKkwD+cOmFZUfRPqf1w8ng1XvNf UrlV5hyZUxRFWRGaG1/yrJu3C2M1I0jPReiOc5+TfTQs5mqrk8vSVpoUUUUR69BI Fy4jOPG5Rn7MVA97IFVULJa/2UijBtlkhjjB41c3RLAa2gkATvirbNPmGz0Q+pIH 5FJbv6tMWrbsIakw3cfi1NZ797ciOgUTbCQ5shViZN91YNPgeH3ShYzeoeSvAfUZ YuQmq5Z6U1sfau1KAS+HRHHPNgZCRoPnkbmp6ch83xiEIAPZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK17We1pjaMqLERJrgvktWFDFXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvZGJjYmE5MmYtNWE1Zi0z ODU4LWIxMWItOTg0MjQ5N2M3ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5onkd8q11vPuWWzqx1EsN/peXwWpvm4drxFybClKkq2eQIGDVUurv0 Lt1eiewKQqO+fhZBeYym7ruDcuD3eySMQgYrBlh3n3tk8hYzFfdkrQB6phiEatmA c8GfpP8vcuDmhDfi0bpceSy13WQcjeYUlLUGlFJY2dF6I11MsQqnPo3lre1qGaW5 HOqQ2nAUBy8EbtyQlJ0pwAxYMx5I1kprv4OYyo3TxiIfju9nF2Loo9Rzcu//vwNt iJfCeGRblRIXsmvQNvcLfzTeEqi2sSDV+W8hQD5mHKvTqiSbcqblPpMADKuQL51D 9D9EpPifp5RlqlFz1fO/W/qAxpJk4lA= -----END CERTIFICATE-----Generated at Mon Jun 16 11:53:50 2025 by rpki-client