$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa File: e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa (raw, json) Hash identifier: fY73gRcLNABZcZt2B6kmJv9gr1TjKtwc0Rw94BAqpLo= Subject key identifier: 11:2B:B5:36:F6:C0:BA:B5:D6:34:09:3F:22:B3:C3:67:6B:F5:24:E0 Certificate issuer: /CN=897be676-f6c1-4efc-8bef-a425edb4f479 Certificate serial: 010D0C9F4328584AA2C6458B7EB0A75F3F546500 Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 7018 IP address blocks: 23.129.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:45:8b:7e:b0:a7:5f:3f:54:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=33695ef5-5aa2-445f-a40e-2c54443e67ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:39:7b:84:4a:9d:ce:f6:9e:95:f7:82:da: df:20:21:d4:23:52:d2:cf:89:6c:bc:25:8a:09:bc: 78:59:89:ca:96:c5:73:2e:3f:1f:77:6b:7a:9d:c7: 76:de:4d:41:44:ee:2c:d8:60:ad:ae:97:60:b8:22: 8f:a6:9c:0f:cd:a9:96:3a:42:41:ad:d8:cf:d2:9a: 5b:69:2c:b4:b5:c6:ed:b7:da:be:63:31:f5:7b:3e: 5c:12:b3:b3:31:1e:34:c5:66:cc:1f:ce:e0:51:aa: 55:78:b8:83:6b:47:63:32:95:34:84:d8:37:8f:dc: 28:e1:da:ba:36:ea:a7:4c:c2:96:81:6a:eb:6f:32: af:5f:3c:19:39:d5:40:5d:c4:1e:cb:be:0f:a2:1b: af:9e:10:0c:09:1c:93:d6:9e:12:9f:03:41:69:8f: fc:30:75:bd:14:c3:56:14:5e:c1:b2:c2:9a:83:b9: 27:88:94:63:80:f5:1f:fe:05:e2:d2:d1:d1:af:2b: de:e5:d9:7c:03:b4:5c:28:94:6f:53:a7:b3:01:d8: 27:fa:17:85:08:cb:5e:70:81:6d:2b:8a:97:40:7a: 18:0d:4c:48:57:86:78:83:f9:08:40:dd:d6:37:f1: fa:96:95:61:1d:38:48:53:ec:2c:7f:01:74:e3:ce: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2B:B5:36:F6:C0:BA:B5:D6:34:09:3F:22:B3:C3:67:6B:F5:24:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl X509v3 Authority Key Identifier: keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer sbgp-ipAddrBlock: critical IPv4: 23.129.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6f:7f:00:28:3b:82:79:b8:00:b6:1d:6e:8c:24:77:7e:83: 53:b4:d0:87:e5:fe:97:d9:df:aa:f3:f5:74:df:b4:ce:c5:0a: ea:26:8c:49:b9:b4:9a:67:0c:ee:86:7a:8c:af:a3:3d:c2:fe: 57:82:e0:4e:88:1b:79:29:d7:2c:0e:24:3f:c5:15:2f:0a:61: e7:e8:32:af:f8:df:d5:bb:5e:a4:87:9e:b8:68:fe:96:e0:9f: 44:14:f6:28:ff:a7:5a:ff:69:56:bd:5b:ee:92:c2:21:5c:fc: b4:d1:d2:f6:1d:d3:a7:a3:81:29:84:ac:58:bd:f0:73:01:d5: a8:61:37:c0:31:38:f0:fd:35:06:04:ee:58:47:cc:e2:1f:2a: ec:c9:f0:41:7e:81:50:76:c3:21:d4:e1:33:b4:a4:4b:35:fd: c4:d6:8e:83:ed:8d:de:70:e1:83:33:56:bf:62:27:05:a9:02: ea:e2:36:28:b6:65:1b:a3:df:ba:19:79:84:44:20:f7:41:42: 95:58:d4:4a:d4:eb:2c:b8:57:0c:02:e7:7a:c3:55:14:39:e4: 49:2b:4e:70:97:fe:dc:64:02:68:3f:ef:4d:45:80:45:26:2e: 87:8a:7a:3b:47:ca:36:a8:1c:25:73:b9:1d:19:a3:12:81:3b: 6e:c9:30:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqixkWLfrCnXz9UZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk3YmU2NzYtZjZjMS00ZWZjLThiZWYtYTQyNWVkYjRm NDc5MB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk MzM2OTVlZjUtNWFhMi00NDVmLWE0MGUtMmM1NDQ0M2U2N2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jI5e4RKnc72npX3gtrfICHUI1LSz4lsvCWK Cbx4WYnKlsVzLj8fd2t6ncd23k1BRO4s2GCtrpdguCKPppwPzamWOkJBrdjP0ppb aSy0tcbtt9q+YzH1ez5cErOzMR40xWbMH87gUapVeLiDa0djMpU0hNg3j9wo4dq6 NuqnTMKWgWrrbzKvXzwZOdVAXcQey74PohuvnhAMCRyT1p4SnwNBaY/8MHW9FMNW FF7BssKag7kniJRjgPUf/gXi0tHRryve5dl8A7RcKJRvU6ezAdgn+heFCMtecIFt K4qXQHoYDUxIV4Z4g/kIQN3WN/H6lpVhHThIU+wsfwF0485dhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBErtTb2wLq11jQJPyKzw2dr9STgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OTdi ZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1ZWRiNGY0NzkvZTNmOGJkYTctMmVlYi0z ZGNkLTgyNDItM2E0OTdmNDc4YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODk3YmU2NzYtZjZjMS00ZWZjLThi ZWYtYTQyNWVkYjRmNDc5Lzg5N2JlNjc2LWY2YzEtNGVmYy04YmVmLWE0MjVlZGI0 ZjQ3OS5jcmwwHwYDVR0jBBgwFoAUyLo9e/15omcGXuvwTgOpZHeRROQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OTdiZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1 ZWRiNGY0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtvfwAoO4J5uAC2HW6MJHd+g1O00Ifl/pfZ36rz9XTftM7FCuomjEm5 tJpnDO6Geoyvoz3C/leC4E6IG3kp1ywOJD/FFS8KYefoMq/439W7XqSHnrho/pbg n0QU9ij/p1r/aVa9W+6SwiFc/LTR0vYd06ejgSmErFi98HMB1ahhN8AxOPD9NQYE 7lhHzOIfKuzJ8EF+gVB2wyHU4TO0pEs1/cTWjoPtjd5w4YMzVr9iJwWpAuriNii2 ZRuj37oZeYREIPdBQpVY1ErU6yy4VwwC53rDVRQ55EkrTnCX/txkAmg/701FgEUm LoeKejtHyjaoHCVzuR0ZoxKBO27JMOI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:21 2025 by rpki-client