$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa File: 2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa (raw, json) Hash identifier: aiEw0+4KlUgcLf7CiTeXUrhf5XQr9SpgQqWv6dstWj4= Subject key identifier: 7C:80:85:4C:09:E7:51:88:B5:C6:4F:54:17:99:64:A5:B0:63:CF:49 Certificate issuer: /CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Certificate serial: 010D0C9F4328584AB4EF0698B66B0B85600DD700 Authority key identifier: 59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 203062 IP address blocks: 23.138.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ef:06:98:b6:6b:0b:85:60:0d:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=8008df93-c037-483b-8013-a8d6b67065bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f0:ae:d0:e1:52:3d:bb:22:ca:8b:3a:fc:5d: 27:6c:f2:0e:6c:ea:0f:89:28:fc:e3:5f:69:ad:d4: 1e:7a:11:4c:07:51:5d:36:91:ad:35:b2:8b:38:fe: e7:60:82:98:be:79:82:7a:bc:9c:dd:9b:30:e9:fb: 83:62:6c:dc:0d:10:e2:53:b2:3b:39:56:aa:3c:5d: 1a:6c:a5:74:09:ac:78:13:e7:8b:d2:86:f6:ca:10: 3e:1d:2c:95:5b:e2:fa:2e:06:37:f6:fc:74:ca:08: d3:20:75:a2:73:a6:67:0a:53:b6:0a:a3:47:3d:66: 75:34:84:39:5f:7e:08:e6:4d:e3:21:20:bf:3f:dd: 22:bc:f6:a7:b2:60:a1:69:bf:28:26:49:84:82:2f: 41:9b:b6:c9:15:e4:dc:01:48:31:95:54:11:c7:04: 64:5d:6c:43:2d:f6:ef:e3:34:db:65:19:48:77:7a: 57:2f:5d:cf:87:d1:dc:b1:23:bb:b2:46:4b:e8:55: b6:2a:89:32:ab:5d:8f:61:94:cb:bd:80:3b:fe:4c: 23:e5:a8:45:b8:74:49:bb:6f:36:08:24:89:68:bc: 18:8c:a9:c1:ec:db:cd:0a:87:16:50:69:8e:5d:fd: bc:d6:9f:20:5b:2c:6f:9e:50:85:6f:63:ec:9a:93: 82:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:80:85:4C:09:E7:51:88:B5:C6:4F:54:17:99:64:A5:B0:63:CF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl X509v3 Authority Key Identifier: keyid:59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer sbgp-ipAddrBlock: critical IPv4: 23.138.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c3:50:4b:9d:60:12:89:c4:1f:57:5d:d4:11:1d:76:9e:1c: f2:57:20:49:af:30:c1:9e:28:c1:4c:bd:3f:26:87:25:22:22: 64:3c:db:04:a5:f6:3d:2f:83:19:e1:08:ae:68:2e:ea:3b:0e: e2:94:61:78:1b:fc:e7:2c:f5:08:e0:c2:cd:bb:31:c2:59:1e: 06:cc:45:a7:7b:d7:db:fb:9c:a9:bb:9e:5c:fc:7b:05:0a:ce: 5c:8a:f4:c7:12:29:aa:47:3a:77:88:19:14:4f:52:4b:25:55: de:9a:c0:d6:78:1e:c3:22:32:d4:32:ac:79:5f:97:62:4d:c6: 26:26:84:40:c4:80:6d:3f:56:d2:fc:40:cf:b5:30:e5:f8:39: a7:92:34:71:78:d4:1a:8c:a1:4e:78:94:88:d5:c1:cb:18:43: d6:c9:5f:12:f4:52:e8:56:81:98:2c:a4:b1:0c:6e:17:b4:c5: 49:14:3e:d2:6c:84:a9:38:d2:5a:4e:c7:38:4e:d4:a1:cd:3e: 18:76:bb:52:6b:72:f2:40:b3:4f:8a:a5:4b:f8:81:15:ae:6d: 34:aa:dc:48:9f:cf:8d:6e:46:f5:0f:32:f7:37:31:5a:39:e9: 21:e8:66:6f:69:a9:b1:0c:41:7c:ec:0e:0d:f5:49:a3:6c:21: 6b:ae:18:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07waYtmsLhWAN1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlMjM4YzItMmEyYy00ZjIwLTlmODUtNTJmYjhhNDJj MzA0MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ODAwOGRmOTMtYzAzNy00ODNiLTgwMTMtYThkNmI2NzA2NWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PCu0OFSPbsiyos6/F0nbPIObOoPiSj8419p rdQeehFMB1FdNpGtNbKLOP7nYIKYvnmCeryc3Zsw6fuDYmzcDRDiU7I7OVaqPF0a bKV0Cax4E+eL0ob2yhA+HSyVW+L6LgY39vx0ygjTIHWic6ZnClO2CqNHPWZ1NIQ5 X34I5k3jISC/P90ivPansmChab8oJkmEgi9Bm7bJFeTcAUgxlVQRxwRkXWxDLfbv 4zTbZRlId3pXL13Ph9HcsSO7skZL6FW2Kokyq12PYZTLvYA7/kwj5ahFuHRJu282 CCSJaLwYjKnB7NvNCocWUGmOXf281p8gWyxvnlCFb2PsmpOC9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyAhUwJ51GItcZPVBeZZKWwY89JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUy MzhjMi0yYTJjLTRmMjAtOWY4NS01MmZiOGE0MmMzMDQvMmI3ZDc4ZjgtODk0OC0z OWMyLWFjODQtM2I5NzZkNzNmYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZlMjM4YzItMmEyYy00ZjIwLTlm ODUtNTJmYjhhNDJjMzA0LzFmZTIzOGMyLTJhMmMtNGYyMC05Zjg1LTUyZmI4YTQy YzMwNC5jcmwwHwYDVR0jBBgwFoAUWZrMJeJlMnVj6NHXo+Wjsb/+oFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUyMzhjMi0yYTJjLTRmMjAtOWY4NS01MmZi OGE0MmMzMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4rMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDDUEudYBKJxB9XXdQRHXaeHPJXIEmvMMGeKMFMvT8mhyUiImQ82wSl 9j0vgxnhCK5oLuo7DuKUYXgb/Ocs9Qjgws27McJZHgbMRad719v7nKm7nlz8ewUK zlyK9McSKapHOneIGRRPUkslVd6awNZ4HsMiMtQyrHlfl2JNxiYmhEDEgG0/VtL8 QM+1MOX4OaeSNHF41BqMoU54lIjVwcsYQ9bJXxL0UuhWgZgspLEMbhe0xUkUPtJs hKk40lpOxzhO1KHNPhh2u1JrcvJAs0+KpUv4gRWubTSq3Eifz41uRvUPMvc3MVo5 6SHoZm9pqbEMQXzsDg31SaNsIWuuGEM= -----END CERTIFICATE-----Generated at Wed Aug 6 09:32:04 2025 by rpki-client