$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa File: 70a46534-e8e5-3181-abb5-2f44dc79049a.roa (raw, json) Hash identifier: Zlo5OZpz9Jr5ztu0D+IkZkESiULbADcMUHlvAE7gPoA= Subject key identifier: 0D:48:34:96:64:B2:BD:37:F5:A9:5A:CE:16:14:10:CF:96:D2:F3:95 Certificate issuer: /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Certificate serial: 010D0C9F4328584AAB2644F4E69AD6B57E4FC030 Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 209699 IP address blocks: 23.138.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:44:f4:e6:9a:d6:b5:7e:4f:c0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=1e16d7e8-630c-4c24-909d-dd207c5d9a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d0:f3:6d:d1:be:e2:f3:69:db:b6:73:28:f7: 33:11:d3:c9:23:80:47:d6:a8:82:cd:15:13:74:64: 7d:65:04:9c:d6:40:9f:12:4c:c2:49:87:1b:44:26: 61:33:c4:a2:53:52:c7:e9:bd:b9:c6:58:69:67:74: 22:e8:a2:64:e4:cd:8e:48:8e:fc:a0:bd:e7:87:90: 5c:df:24:48:07:6d:1b:38:8f:81:f0:28:63:c8:ea: 3d:d7:c5:6a:10:5a:a0:3c:18:ab:56:46:22:a4:bf: 0d:7b:d4:94:5c:e0:7f:8f:c8:ba:cb:3d:50:64:f6: bd:93:e0:3f:56:f4:f0:8c:ae:ec:b8:e5:66:75:52: e8:36:df:b7:f4:62:25:03:df:8c:b8:60:22:ab:64: b4:01:bc:51:4a:8e:b3:8a:1d:f5:fe:9b:07:a0:ef: c3:c0:65:b5:6b:8c:df:5d:d9:f6:af:91:ac:c3:0b: 70:85:d6:a2:3e:4e:c4:4d:38:98:15:e7:1a:ce:da: c7:0f:73:0d:6b:2b:e3:6b:c6:62:9c:93:f2:6f:dd: ea:88:ab:b4:3f:6a:7c:b2:df:af:e1:bc:38:95:9f: e6:65:f8:19:a5:16:fb:68:54:5c:e3:62:e5:c2:67: 72:8a:36:56:fd:20:f2:4b:5a:44:69:4e:ae:e4:27: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:48:34:96:64:B2:BD:37:F5:A9:5A:CE:16:14:10:CF:96:D2:F3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl X509v3 Authority Key Identifier: keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer sbgp-ipAddrBlock: critical IPv4: 23.138.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e4:6b:98:b3:4e:bd:f8:86:78:eb:5e:e3:88:28:e5:67:14: 47:97:0f:fe:7c:36:59:e3:9d:bf:48:87:b0:3e:19:52:a1:ea: 2e:fb:bf:84:7e:6b:09:0a:16:73:a6:d9:7b:70:05:e2:91:ed: 46:4a:11:4a:19:bd:b4:94:1e:4a:e2:0f:c6:5d:61:29:97:df: ad:ed:df:5b:61:de:f8:99:48:6e:49:1f:f7:e3:39:b8:5c:72: 75:6c:05:ef:49:82:8f:d7:3d:41:b5:5a:1f:80:6e:cc:f1:b5: c1:48:f4:9d:d8:b3:6f:52:e3:73:76:2b:38:e4:e6:13:ef:d9: ad:24:2e:b2:51:50:4d:a7:dc:d1:e0:f5:0f:40:4f:3b:71:8b: b6:13:ad:af:eb:22:10:90:fe:eb:3c:b6:e6:01:88:9c:0d:e2: 98:4f:a6:3a:68:e5:4b:ad:eb:dc:dc:eb:f8:37:3d:03:92:c5: e6:6c:fa:6c:73:4d:89:78:7c:59:2c:4d:3a:91:d8:80:db:43: 20:95:cf:d3:cb:80:9f:28:32:22:61:8d:be:49:24:69:7b:e8: b6:7a:8b:14:15:4c:ea:47:6c:92:73:35:31:ea:b4:6a:80:11: 7c:ea:64:1f:91:07:88:9c:47:eb:be:a8:27:f8:df:9f:dd:b7: dd:73:c9:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJkT05prWtX5PwDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMzZGRiYjItZmYyMS00YjA3LWI0ZTctMjY2ZDZkZjVh NmI1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MWUxNmQ3ZTgtNjMwYy00YzI0LTkwOWQtZGQyMDdjNWQ5YTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtDzbdG+4vNp27ZzKPczEdPJI4BH1qiCzRUT dGR9ZQSc1kCfEkzCSYcbRCZhM8SiU1LH6b25xlhpZ3Qi6KJk5M2OSI78oL3nh5Bc 3yRIB20bOI+B8ChjyOo918VqEFqgPBirVkYipL8Ne9SUXOB/j8i6yz1QZPa9k+A/ VvTwjK7suOVmdVLoNt+39GIlA9+MuGAiq2S0AbxRSo6zih31/psHoO/DwGW1a4zf Xdn2r5GswwtwhdaiPk7ETTiYFecaztrHD3MNayvja8ZinJPyb93qiKu0P2p8st+v 4bw4lZ/mZfgZpRb7aFRc42LlwmdyijZW/SDyS1pEaU6u5CdXCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1INJZksr039alazhYUEM+W0vOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNk ZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZkNmRmNWE2YjUvNzBhNDY1MzQtZThlNS0z MTgxLWFiYjUtMmY0NGRjNzkwNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjMzZGRiYjItZmYyMS00YjA3LWI0 ZTctMjY2ZDZkZjVhNmI1L2IzM2RkYmIyLWZmMjEtNGIwNy1iNGU3LTI2NmQ2ZGY1 YTZiNS5jcmwwHwYDVR0jBBgwFoAU2/Ttm+j9vTSYXGp/0tGrKinYiuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNkZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZk NmRmNWE2YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjka5izTr34hnjrXuOIKOVnFEeXD/58Nlnjnb9Ih7A+GVKh6i77v4R+ awkKFnOm2XtwBeKR7UZKEUoZvbSUHkriD8ZdYSmX363t31th3viZSG5JH/fjObhc cnVsBe9Jgo/XPUG1Wh+AbszxtcFI9J3Ys29S43N2Kzjk5hPv2a0kLrJRUE2n3NHg 9Q9ATztxi7YTra/rIhCQ/us8tuYBiJwN4phPpjpo5Uut69zc6/g3PQOSxeZs+mxz TYl4fFksTTqR2IDbQyCVz9PLgJ8oMiJhjb5JJGl76LZ6ixQVTOpHbJJzNTHqtGqA EXzqZB+RB4icR+u+qCf435/dt91zyYk= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:39 2025 by rpki-client