$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa File: 1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa (raw, json) Hash identifier: /eMBcn9x9G9S+ur3xw5HP/M1T/8JiPLdBs1Elv7K+as= Subject key identifier: 04:AE:30:67:08:7A:2B:D8:4C:F4:5F:17:D9:81:01:BA:72:71:E5:29 Certificate issuer: /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Certificate serial: 010D0C9F4328584A9AC61C9EBF8D7208C8AFE0C0 Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa Signing time: Tue 22 Jul 2025 16:14:25 +0000 ROA not before: Tue 22 Jul 2025 16:14:25 +0000 ROA not after: Mon 20 Oct 2025 16:14:25 +0000 asID: 3742 IP address blocks: 23.128.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:c6:1c:9e:bf:8d:72:08:c8:af:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Validity Not Before: Jul 22 16:14:25 2025 GMT Not After : Oct 20 16:14:25 2025 GMT Subject: CN=43b93d1f-8b25-4381-9ad2-9dbf211342b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:99:83:d1:91:ab:08:d3:5d:c8:e0:3c:12: c1:37:76:21:a6:b7:91:01:5f:02:34:5b:d7:09:b5: 78:a0:a5:c9:29:7a:78:01:af:d3:bc:5e:46:b0:c6: 5d:37:f2:3c:d4:ce:86:1c:31:fb:46:f6:c1:86:3b: 67:6f:ea:e2:02:91:0a:b8:ba:36:4d:62:57:1e:2c: b8:4a:bd:75:04:c9:53:85:91:7d:20:e2:0f:8f:77: 9b:f9:09:6c:54:03:5f:da:b5:fe:0a:b4:b4:d3:cf: 6f:96:61:fd:94:b2:d9:73:8a:b1:05:74:dc:ec:29: 19:56:09:b0:5a:1a:dd:46:7a:a6:4f:33:ce:68:66: 64:b4:c2:14:e6:c7:7b:d9:d1:34:8f:28:b1:ac:9a: a9:49:12:3a:06:6e:e7:86:4a:89:ac:1e:8d:06:4a: ab:8f:23:d0:24:9a:3c:56:d1:93:7a:67:05:97:29: 72:97:6c:f0:2a:df:be:41:29:a7:68:9d:fc:31:25: 5c:10:bb:c5:1b:33:b2:d2:80:bc:03:31:9a:ec:2c: 91:7a:4d:08:b4:0c:b5:6d:9f:d2:dc:1f:76:fe:d7: 01:cf:02:34:88:de:e7:6b:35:4e:3a:dc:32:c1:61: c4:49:7a:e2:12:11:8f:d4:e4:d2:98:57:21:28:b5: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AE:30:67:08:7A:2B:D8:4C:F4:5F:17:D9:81:01:BA:72:71:E5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl X509v3 Authority Key Identifier: keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer sbgp-ipAddrBlock: critical IPv4: 23.128.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:01:08:90:ad:44:d1:53:46:09:36:b3:d1:0e:5e:1b:54:a6: e8:98:5a:e1:a1:04:b8:60:38:27:bb:60:dc:aa:c8:9a:e3:05: cd:6e:08:e7:7c:ce:d9:05:a3:e1:83:25:ce:a0:6b:c2:5f:b9: 51:66:4e:fe:0b:b4:d0:8c:55:31:9d:41:ac:7c:d3:06:d8:42: 72:55:0c:cc:02:e4:cc:ec:20:03:0d:41:07:36:65:d4:92:85: 49:2f:8b:3b:c8:7a:59:55:6e:07:a0:da:8c:01:65:db:72:55: ab:c0:40:90:e2:39:51:d2:15:db:4d:e7:f7:02:3a:2c:3d:df: 41:5f:4e:9a:16:27:b8:e3:07:37:48:07:31:3d:0d:71:2b:5b: ec:11:4e:7d:c2:a8:6e:44:5a:c1:36:b2:7e:2c:c2:9c:3b:e8: 73:7f:19:8f:7f:28:76:af:99:af:c4:b9:09:ca:b8:04:0e:9e: ec:66:cf:5c:bb:6c:75:c7:6a:fe:25:af:aa:3e:d5:de:aa:b6: 77:1c:af:04:ee:6a:4c:ff:e1:00:80:7e:59:09:20:83:aa:bd: 8d:89:4c:86:aa:78:2a:4b:b8:59:b4:c2:3e:93:b9:84:64:49: 2c:18:57:36:5c:b1:97:6f:9b:12:13:db:dd:7b:6e:a7:91:98: 5e:03:cb:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaxhyev41yCMiv4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTViYjYtZjhlNi00ZDY2LThkN2ItZDVhMzQyYjM1 ODdmMB4XDTI1MDcyMjE2MTQyNVoXDTI1MTAyMDE2MTQyNVowLzEtMCsGA1UEAxMk NDNiOTNkMWYtOGIyNS00MzgxLTlhZDItOWRiZjIxMTM0MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI+Zg9GRqwjTXcjgPBLBN3YhpreRAV8CNFvX CbV4oKXJKXp4Aa/TvF5GsMZdN/I81M6GHDH7RvbBhjtnb+riApEKuLo2TWJXHiy4 Sr11BMlThZF9IOIPj3eb+QlsVANf2rX+CrS0089vlmH9lLLZc4qxBXTc7CkZVgmw WhrdRnqmTzPOaGZktMIU5sd72dE0jyixrJqpSRI6Bm7nhkqJrB6NBkqrjyPQJJo8 VtGTemcFlylyl2zwKt++QSmnaJ38MSVcELvFGzOy0oC8AzGa7CyRek0ItAy1bZ/S 3B92/tcBzwI0iN7nazVOOtwywWHESXriEhGP1OTSmFchKLVlowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASuMGcIeivYTPRfF9mBAbpyceUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5 NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEzNDJiMzU4N2YvMWI5ODhkNmUtYzQ5OC0z N2VkLTg4YTUtOGZjMjU1NGEyN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJkOTViYjYtZjhlNi00ZDY2LThk N2ItZDVhMzQyYjM1ODdmLzFiZDk1YmI2LWY4ZTYtNGQ2Ni04ZDdiLWQ1YTM0MmIz NTg3Zi5jcmwwHwYDVR0jBBgwFoAUt1f5a1swFAeafsmLHd40lt3uqFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEz NDJiMzU4N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0BCJCtRNFTRgk2s9EOXhtUpuiYWuGhBLhgOCe7YNyqyJrjBc1uCOd8 ztkFo+GDJc6ga8JfuVFmTv4LtNCMVTGdQax80wbYQnJVDMwC5MzsIAMNQQc2ZdSS hUkvizvIellVbgeg2owBZdtyVavAQJDiOVHSFdtN5/cCOiw930FfTpoWJ7jjBzdI BzE9DXErW+wRTn3CqG5EWsE2sn4swpw76HN/GY9/KHavma/EuQnKuAQOnuxmz1y7 bHXHav4lr6o+1d6qtnccrwTuakz/4QCAflkJIIOqvY2JTIaqeCpLuFm0wj6TuYRk SSwYVzZcsZdvmxIT2917bqeRmF4Dyys= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:53 2025 by rpki-client