$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa File: 0dd95984-d9ac-3818-b720-6721242d6420.roa (raw, json) Hash identifier: 59WOqW7pAzspRSSePrS3mO+CmcAk07Dohiqox4DRtkM= Subject key identifier: 29:0C:F7:44:90:AA:F3:28:F7:9B:F7:50:D8:22:40:34:5C:D7:AF:7A Certificate issuer: /CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Certificate serial: 010D0C9F4328584AB650E0D708262C93C0415680 Authority key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 213993 IP address blocks: 23.134.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e0:d7:08:26:2c:93:c0:41:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=b73c66da-1633-4568-89fd-9baf9cdf252e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:28:99:8f:c9:00:a3:d5:85:98:b3:22:33: a5:f6:63:74:38:05:d3:af:46:d0:d9:be:04:40:7c: 24:f2:81:b5:4a:48:51:c7:0a:be:41:9a:41:56:ab: 62:e4:0b:46:81:1b:76:18:bb:51:bc:e1:03:24:d0: b5:78:55:8b:13:ba:05:13:2f:14:fb:c0:81:b3:c2: 4f:85:71:9e:9e:bf:bf:72:b0:fb:4a:bc:e8:bc:fa: a7:af:8b:e9:05:8c:a5:a4:82:7e:9b:dd:92:5e:99: 8a:ec:b6:3a:1f:24:d8:49:c9:50:f4:54:87:cc:83: 33:95:7f:e3:16:e6:d1:a1:7e:b8:b9:a7:39:57:8a: 30:ac:b2:6b:ed:09:b1:f0:f9:8b:6e:9e:54:c0:6f: 0f:ad:04:c4:7f:32:66:82:77:48:f5:60:fe:c1:7f: 87:3f:fb:0d:0a:c2:d7:b4:57:9c:d0:13:99:b4:8a: 38:fe:4a:de:20:d2:27:d0:ba:75:00:0a:8f:cd:04: 99:95:db:27:1d:4a:44:cd:3c:cf:48:18:75:0b:c2: a9:18:46:9f:af:c1:fc:fa:7d:70:de:66:10:33:96: 86:5a:de:bb:aa:7e:75:14:0d:f0:3e:58:25:f6:d7: 70:96:86:f7:7a:c9:fe:a3:c8:3f:13:b7:8b:ba:8b: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0C:F7:44:90:AA:F3:28:F7:9B:F7:50:D8:22:40:34:5C:D7:AF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl X509v3 Authority Key Identifier: keyid:4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer sbgp-ipAddrBlock: critical IPv4: 23.134.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c7:5c:bf:11:b5:b0:da:9c:1a:62:44:03:27:67:1c:bc:5f: 39:f0:85:ae:85:de:85:ac:c4:18:da:2a:07:1f:da:9e:84:b5: 6b:29:3b:99:09:56:9d:6c:72:82:d3:c3:33:55:81:0d:f9:90: a0:0e:68:0c:ab:20:6d:f0:0b:5d:a2:d0:54:d8:d9:3d:79:e5: a3:c3:b7:2f:51:ad:12:d1:cf:96:91:86:59:8c:4a:bf:e4:ab: 9f:3d:bc:bd:7e:00:30:11:7b:e5:92:5d:b8:a5:4e:c7:1c:42: 9d:6d:bf:79:75:ad:f6:e9:01:d9:d2:0b:f3:e8:04:b2:9e:4a: c7:62:0f:c8:aa:21:bf:f0:72:5d:ff:8d:3b:93:9b:33:40:aa: 10:8b:bd:ba:22:46:92:93:ee:ff:dc:a7:6f:c7:e4:0c:e9:e4: 35:70:29:11:e7:60:05:3f:cc:12:21:4e:80:b1:09:4d:e3:71: 6b:7c:8a:95:e2:d7:45:91:71:24:3f:8c:d6:fd:13:c0:51:28: 1f:b0:e5:fb:fa:dc:ef:08:c4:f8:43:40:eb:e4:ff:1c:0d:bc: 4d:37:ec:74:60:4b:7e:56:2f:76:59:c6:39:90:4f:44:38:95: e3:3c:0f:72:3a:1e:f3:55:68:c5:51:96:63:04:e7:eb:af:10: bc:62:86:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UODXCCYsk8BBVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiM2I1OTgtOGQ4My00ODY0LTgxOGItZjU4MzNiNzU4 M2U3MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk YjczYzY2ZGEtMTYzMy00NTY4LTg5ZmQtOWJhZjljZGYyNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCkomY/JAKPVhZizIjOl9mN0OAXTr0bQ2b4E QHwk8oG1SkhRxwq+QZpBVqti5AtGgRt2GLtRvOEDJNC1eFWLE7oFEy8U+8CBs8JP hXGenr+/crD7SrzovPqnr4vpBYylpIJ+m92SXpmK7LY6HyTYSclQ9FSHzIMzlX/j FubRoX64uac5V4owrLJr7Qmx8PmLbp5UwG8PrQTEfzJmgndI9WD+wX+HP/sNCsLX tFec0BOZtIo4/kreINIn0Lp1AAqPzQSZldsnHUpEzTzPSBh1C8KpGEafr8H8+n1w 3mYQM5aGWt67qn51FA3wPlgl9tdwlob3esn+o8g/E7eLuot/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkM90SQqvMo95v3UNgiQDRc1696MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iY2Iz YjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3NTgzZTcvMGRkOTU5ODQtZDlhYy0z ODE4LWI3MjAtNjcyMTI0MmQ2NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmNiM2I1OTgtOGQ4My00ODY0LTgx OGItZjU4MzNiNzU4M2U3L2JjYjNiNTk4LThkODMtNDg2NC04MThiLWY1ODMzYjc1 ODNlNy5jcmwwHwYDVR0jBBgwFoAUTwH1eiacjpGp9CgLU9cqPEl4Q6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iY2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgz M2I3NTgzZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4a0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjHXL8RtbDanBpiRAMnZxy8Xznwha6F3oWsxBjaKgcf2p6EtWspO5kJ Vp1scoLTwzNVgQ35kKAOaAyrIG3wC12i0FTY2T155aPDty9RrRLRz5aRhlmMSr/k q589vL1+ADARe+WSXbilTsccQp1tv3l1rfbpAdnSC/PoBLKeSsdiD8iqIb/wcl3/ jTuTmzNAqhCLvboiRpKT7v/cp2/H5Azp5DVwKRHnYAU/zBIhToCxCU3jcWt8ipXi 10WRcSQ/jNb9E8BRKB+w5fv63O8IxPhDQOvk/xwNvE037HRgS35WL3ZZxjmQT0Q4 leM8D3I6HvNVaMVRlmME5+uvELxihvU= -----END CERTIFICATE-----Generated at Sat Aug 9 20:50:47 2025 by rpki-client