$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa File: 223fffd8-e55c-39f5-883b-add44fcafd45.roa (raw, json) Hash identifier: a7X2B3e/ZqOQ+gNvfVVeiSibM4DExWDrlapdujVZZgg= Subject key identifier: 74:DB:73:1A:CD:C8:4F:5A:2F:DE:BB:9C:40:29:31:32:1E:28:B2:34 Certificate issuer: /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Certificate serial: 010D0C9F4328584AA6F62EBA6FA63B3EF95F7080 Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 133073 IP address blocks: 23.154.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2e:ba:6f:a6:3b:3e:f9:5f:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=2f3bd775-8dac-4cc2-aebe-78a1733e999d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:ba:6e:c7:ae:f7:03:6a:4f:8e:9c:35:ce: da:9e:d7:dc:70:94:39:e7:26:10:ca:dc:76:4b:92: 36:f0:01:2e:fb:e5:02:41:cd:1f:ae:d6:96:35:2e: cd:cb:65:c7:ff:d6:c7:35:63:dc:7a:ff:47:ae:af: 2c:70:72:08:dd:35:ce:f2:c3:67:b5:34:b5:98:40: 13:49:13:b3:ad:cf:78:3d:94:2a:70:21:c2:9a:87: 64:aa:2f:b5:b4:00:4c:13:0d:22:13:e1:8c:eb:9a: 8f:e5:da:e2:1e:49:b2:c2:f9:49:16:94:eb:14:eb: cb:e4:87:a8:47:42:f2:d1:2b:63:22:3e:e4:0e:ef: 4c:48:ee:80:20:b0:d8:12:3e:00:2b:5a:45:bf:d7: 76:a8:93:8f:aa:70:b9:99:5f:c3:c0:d8:58:b8:6c: c4:7e:f4:d9:0e:85:5c:2f:df:8d:b2:8b:44:24:f9: a8:6d:2b:17:91:4f:4a:d5:04:f8:27:62:91:2e:f9: ba:96:42:b4:c2:7a:aa:9a:09:7b:93:20:84:7c:7a: a8:31:4e:d9:6e:5f:12:e8:29:18:2f:20:43:1b:7a: 1f:6d:77:b9:a0:57:3c:ba:07:56:07:cc:a8:94:5e: 95:f5:e0:4e:83:ce:fb:01:52:bc:14:ba:c8:b0:59: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DB:73:1A:CD:C8:4F:5A:2F:DE:BB:9C:40:29:31:32:1E:28:B2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl X509v3 Authority Key Identifier: keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer sbgp-ipAddrBlock: critical IPv4: 23.154.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:18:da:52:82:dc:91:1c:23:63:dd:2c:17:72:a6:89:7b:9d: d4:6a:4f:e8:6a:c1:d1:d9:d3:f0:ea:9a:99:ec:65:e0:be:43: b8:61:97:3c:a6:86:55:17:d5:c2:d9:9a:da:35:d1:55:12:b0: 61:1b:ce:85:17:7a:18:fe:c6:50:c0:d6:0f:1f:e8:cb:0e:ee: b1:95:43:d8:ed:2a:3d:dd:d2:79:09:e9:21:32:7e:d5:60:2e: 2a:24:6e:b8:20:8e:38:b7:3e:38:fc:8c:3b:37:6c:f1:6e:89: 88:31:43:8f:07:de:a3:8c:9f:9a:2c:7b:b5:36:c9:a9:ea:43: 9a:0c:59:66:16:3e:98:ec:0c:ea:fa:99:6d:1d:c3:bc:00:7a: d0:04:b6:f5:4b:a8:d1:31:2b:0f:79:77:8d:13:d7:7e:2b:a8: 6a:ec:f7:73:20:dd:fd:ae:1f:e3:83:46:3d:d0:70:fb:0b:6e: f9:76:71:11:2f:e5:ef:ef:02:1a:4a:1c:bb:23:d4:95:dc:9b: 28:6f:27:4d:e1:35:e5:f6:20:42:98:26:27:3e:2f:d2:28:2c: 7e:19:d1:a8:49:89:ab:0c:4f:42:9a:bd:2b:15:c9:5e:58:14: 25:bb:99:74:61:be:d7:3d:58:03:4f:a5:c3:5a:4d:5f:ee:d3: b0:72:29:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9i66b6Y7PvlfcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTliNDliYjYtMjc4Mi00YTgyLTgyOWMtZDRiOTRlYjY0 NmYxMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk MmYzYmQ3NzUtOGRhYy00Y2MyLWFlYmUtNzhhMTczM2U5OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lm6bseu9wNqT46cNc7antfccJQ55yYQytx2 S5I28AEu++UCQc0frtaWNS7Ny2XH/9bHNWPcev9Hrq8scHII3TXO8sNntTS1mEAT SROzrc94PZQqcCHCmodkqi+1tABMEw0iE+GM65qP5driHkmywvlJFpTrFOvL5Ieo R0Ly0StjIj7kDu9MSO6AILDYEj4AK1pFv9d2qJOPqnC5mV/DwNhYuGzEfvTZDoVc L9+NsotEJPmobSsXkU9K1QT4J2KRLvm6lkK0wnqqmgl7kyCEfHqoMU7Zbl8S6CkY LyBDG3ofbXe5oFc8ugdWB8yolF6V9eBOg877AVK8FLrIsFkATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTbcxrNyE9aL967nEApMTIeKLI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OWI0 OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5NGViNjQ2ZjEvMjIzZmZmZDgtZTU1Yy0z OWY1LTg4M2ItYWRkNDRmY2FmZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTliNDliYjYtMjc4Mi00YTgyLTgy OWMtZDRiOTRlYjY0NmYxLzk5YjQ5YmI2LTI3ODItNGE4Mi04MjljLWQ0Yjk0ZWI2 NDZmMS5jcmwwHwYDVR0jBBgwFoAU1mm0D12iTNZq/ycK6P7yzPnobCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OWI0OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5 NGViNjQ2ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcY2lKC3JEcI2PdLBdypol7ndRqT+hqwdHZ0/DqmpnsZeC+Q7hhlzym hlUX1cLZmto10VUSsGEbzoUXehj+xlDA1g8f6MsO7rGVQ9jtKj3d0nkJ6SEyftVg Liokbrggjji3Pjj8jDs3bPFuiYgxQ48H3qOMn5ose7U2yanqQ5oMWWYWPpjsDOr6 mW0dw7wAetAEtvVLqNExKw95d40T134rqGrs93Mg3f2uH+ODRj3QcPsLbvl2cREv 5e/vAhpKHLsj1JXcmyhvJ03hNeX2IEKYJic+L9IoLH4Z0ahJiasMT0KavSsVyV5Y FCW7mXRhvtc9WANPpcNaTV/u07ByKaM= -----END CERTIFICATE-----Generated at Mon Aug 4 21:48:25 2025 by rpki-client