$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa File: 2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa (raw, json) Hash identifier: M9xMhLxot+IIORrAT70QeJb9Fo+/s2pQWiTDqrAI7v8= Subject key identifier: 79:61:B1:26:DE:59:02:AA:E8:2D:12:A8:54:26:59:D5:91:28:9B:A0 Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F4328584A2ABAE203C6D087E58D82E640 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 208504 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e2:03:c6:d0:87:e5:8d:82:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=9f519b8e-843e-4b35-9ad1-9aa37f202de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:dc:e0:33:bc:f2:ad:1a:54:31:8a:fa:d5: e9:ae:a8:21:19:f9:c5:bb:57:56:1c:8d:5d:76:73: 86:7d:e6:aa:7d:4a:8b:44:fc:e7:f1:79:aa:ef:3b: ed:aa:54:8f:ad:8e:47:5f:a7:a7:92:6e:d7:e6:5f: e0:d1:58:a8:53:24:fd:cf:26:ec:f4:77:35:68:f7: b1:74:e4:7f:7f:7e:28:71:df:02:1f:c3:31:f8:7e: 91:8c:d2:1e:74:51:11:5c:51:c7:dd:18:b8:17:bc: a2:71:ab:5f:06:f7:5c:80:9c:53:8c:4a:12:71:92: 6e:76:df:38:0f:0b:61:dd:cc:89:40:4b:d0:3a:cf: 60:1e:73:c3:f1:1a:3f:2b:0b:69:c7:63:05:dc:49: 35:30:20:24:a1:9c:ce:bc:ce:4b:62:16:96:19:da: 24:fb:e9:3d:87:ad:9e:3d:45:64:6e:6f:06:dc:c6: bb:d0:a0:18:86:8d:1d:27:96:5b:83:82:a0:69:e9: 3f:c2:23:a3:2b:cb:a2:54:0d:02:50:b2:c6:3f:7e: 44:52:f1:ea:6c:62:64:6b:82:4f:a8:50:b0:be:bf: 7d:46:48:af:ad:43:18:1d:2d:c5:95:4b:cc:e2:77: d7:b6:99:13:f6:72:c8:eb:25:59:d3:c6:ae:8c:23: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:61:B1:26:DE:59:02:AA:E8:2D:12:A8:54:26:59:D5:91:28:9B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:1f:51:83:0f:38:66:b2:6d:ed:4f:9c:3f:2e:48:cf:c9:2b: 10:b6:eb:bf:f2:0f:f0:e8:d9:d5:52:78:9b:70:c4:fd:65:ac: 96:26:fd:dc:55:fe:00:3b:1f:55:a8:b4:e7:81:03:8d:9d:d8: d8:77:27:f9:8a:df:99:2c:dd:bc:9c:78:28:b8:3a:49:27:6d: 4b:5f:0f:9f:a4:38:90:ee:d4:2d:69:1d:9a:bf:b8:e3:00:d8: c8:76:16:b5:04:89:bf:f5:fb:6d:20:95:6e:8c:43:eb:59:05: ca:1e:3b:4f:c6:c5:b0:80:f5:b2:a5:3b:98:d6:dc:61:51:62: 2c:d8:b6:e7:e9:9c:48:6b:12:af:6e:a8:d3:4f:e4:8e:bd:da: cb:85:e1:db:bd:5d:a0:c4:e6:96:29:b3:0a:dd:85:d6:88:70: 47:91:ad:b2:95:e3:61:a0:9d:2c:20:ce:fb:77:47:7a:60:ed: 65:8e:b9:31:e5:ed:19:57:2b:bf:ef:4b:15:3d:1c:58:0d:03: b9:da:0e:31:8e:55:b8:f2:e3:a6:29:7d:67:96:6f:83:e4:5c: ce:15:c9:cb:a9:ce:e3:44:fd:cf:c5:ea:33:4a:02:d0:eb:91: 30:aa:9b:64:fd:40:ab:39:4c:c4:35:04:78:2d:b7:c1:94:14: ef:e6:29:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuIDxtCH5Y2C5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OWY1MTliOGUtODQzZS00YjM1LTlhZDEtOWFhMzdmMjAyZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyrc4DO88q0aVDGK+tXprqghGfnFu1dWHI1d dnOGfeaqfUqLRPzn8Xmq7zvtqlSPrY5HX6enkm7X5l/g0VioUyT9zybs9Hc1aPex dOR/f34ocd8CH8Mx+H6RjNIedFERXFHH3Ri4F7yicatfBvdcgJxTjEoScZJudt84 Dwth3cyJQEvQOs9gHnPD8Ro/Kwtpx2MF3Ek1MCAkoZzOvM5LYhaWGdok++k9h62e PUVkbm8G3Ma70KAYho0dJ5Zbg4Kgaek/wiOjK8uiVA0CULLGP35EUvHqbGJka4JP qFCwvr99RkivrUMYHS3FlUvM4nfXtpkT9nLI6yVZ08aujCP/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlhsSbeWQKq6C0SqFQmWdWRKJugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvMmQxN2NkNGYtNmI4Yy0z YmM2LWE4MTYtYTJmMmFkZDU4Nzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8fUYMPOGaybe1PnD8uSM/JKxC267/yD/Do2dVSeJtwxP1lrJYm/dxV /gA7H1WotOeBA42d2Nh3J/mK35ks3byceCi4OkknbUtfD5+kOJDu1C1pHZq/uOMA 2Mh2FrUEib/1+20glW6MQ+tZBcoeO0/GxbCA9bKlO5jW3GFRYizYtufpnEhrEq9u qNNP5I692suF4du9XaDE5pYpswrdhdaIcEeRrbKV42GgnSwgzvt3R3pg7WWOuTHl 7RlXK7/vSxU9HFgNA7naDjGOVbjy46YpfWeWb4PkXM4VycupzuNE/c/F6jNKAtDr kTCqm2T9QKs5TMQ1BHgtt8GUFO/mKbk= -----END CERTIFICATE-----Generated at Tue Jun 17 03:25:41 2025 by rpki-client