$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/30a285b8-594a-3cf3-8664-b23f8c85f32b.roa File: 30a285b8-594a-3cf3-8664-b23f8c85f32b.roa (raw, json) Hash identifier: aZzVcBocl6R9qo7V+C8bleIPVeoQzZJzPN1l4kHtUTg= Subject key identifier: F0:6B:7C:53:DE:2C:32:DD:A0:DD:92:BC:58:6F:8B:19:CC:60:FE:18 Certificate issuer: /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Certificate serial: 010D0C9F4328584A07D52D156A83E6392018C880 Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/30a285b8-594a-3cf3-8664-b23f8c85f32b.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 19518 IP address blocks: 23.128.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2d:15:6a:83:e6:39:20:18:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=5e92d62f-7531-46e3-9444-59b19d4aeddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:f8:1e:fa:a6:67:fe:24:d9:3f:8c:c9:35: 49:7f:8d:a3:02:20:f5:7e:33:ae:9b:3a:a2:df:72: d6:cf:ea:07:0f:1f:78:95:f2:88:1c:7d:77:c7:60: 3f:28:db:9a:a4:df:aa:8f:43:ee:2b:c6:45:a1:86: 37:ac:b5:3b:04:08:27:ef:7c:c0:8c:94:d6:94:4a: d1:4d:83:42:3f:21:32:ae:32:3e:69:19:45:26:85: 59:53:f9:a1:ba:52:99:bc:e0:99:b3:7a:17:71:0d: e7:16:34:23:07:08:70:d1:f3:51:2d:ca:ff:9e:f9: bf:1c:9a:f4:ae:f1:46:da:7f:e3:83:0f:8e:39:87: 6d:3d:4e:04:f9:e9:2e:9c:46:a1:d2:c8:12:27:03: 56:e8:a3:c7:5a:c1:9f:62:59:47:82:da:b4:bd:5a: 73:1e:5b:41:71:fb:7b:26:07:4c:55:c3:24:75:74: 68:76:43:2e:b0:5b:53:87:cd:06:68:b4:72:73:47: 54:af:70:fe:1d:71:e0:ff:b2:8a:69:2e:9e:b0:bc: 87:3c:f2:4a:c7:21:65:8a:70:9b:2e:e9:f8:c7:ab: d9:93:4a:29:91:66:21:81:9f:b8:fd:6a:67:57:56: 62:86:af:8f:f3:07:5a:1e:3b:ea:16:81:cb:67:ea: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6B:7C:53:DE:2C:32:DD:A0:DD:92:BC:58:6F:8B:19:CC:60:FE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/30a285b8-594a-3cf3-8664-b23f8c85f32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl X509v3 Authority Key Identifier: keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer sbgp-ipAddrBlock: critical IPv4: 23.128.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bd:78:be:d2:1a:c0:7a:03:96:c9:9b:e8:a1:00:9f:55:33: 47:76:b5:79:80:2c:b1:a9:de:11:ec:4b:41:04:97:1c:ff:4b: a2:9b:ad:56:43:90:d0:ca:f1:d7:15:bd:2c:89:f8:9e:b6:aa: bb:78:29:c3:35:d0:72:6e:b5:4d:96:83:d6:39:da:3e:26:ce: 99:b3:d6:93:a6:6e:e3:f6:a1:01:90:61:38:f4:f7:dc:8e:1a: 98:8e:04:41:eb:f4:19:a1:65:aa:00:f2:a1:8c:dd:0a:18:ad: 93:8a:22:51:35:d0:27:30:5e:35:06:ef:95:59:97:42:02:f5: e5:62:ea:7e:44:87:0b:b1:6b:dd:1e:20:d9:10:ac:f7:a5:9e: ef:e2:30:27:2d:c0:2f:fc:7b:d3:75:9f:b7:a1:0a:ee:1c:4b: 78:f0:b9:03:bd:67:e5:1e:9a:14:56:49:4c:98:67:49:44:97: fb:51:65:00:ec:67:d8:85:ef:6e:d6:4c:4d:e4:7e:fa:02:4d: 7a:d1:8d:e5:bb:29:18:97:6e:ec:e9:24:1c:90:0d:a8:95:c5: 63:a3:cb:e4:3a:56:d4:1d:fa:4a:80:2f:57:de:32:e7:6b:b0: 85:eb:d9:84:24:47:2d:76:0e:54:0e:79:ad:f3:be:7a:33:b0: ce:ce:bd:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1S0VaoPmOSAYyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTViYjYtZjhlNi00ZDY2LThkN2ItZDVhMzQyYjM1 ODdmMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NWU5MmQ2MmYtNzUzMS00NmUzLTk0NDQtNTliMTlkNGFlZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlif4HvqmZ/4k2T+MyTVJf42jAiD1fjOumzqi 33LWz+oHDx94lfKIHH13x2A/KNuapN+qj0PuK8ZFoYY3rLU7BAgn73zAjJTWlErR TYNCPyEyrjI+aRlFJoVZU/mhulKZvOCZs3oXcQ3nFjQjBwhw0fNRLcr/nvm/HJr0 rvFG2n/jgw+OOYdtPU4E+ekunEah0sgSJwNW6KPHWsGfYllHgtq0vVpzHltBcft7 JgdMVcMkdXRodkMusFtTh80GaLRyc0dUr3D+HXHg/7KKaS6esLyHPPJKxyFlinCb Lun4x6vZk0opkWYhgZ+4/WpnV1Zihq+P8wdaHjvqFoHLZ+pWGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBrfFPeLDLdoN2SvFhvixnMYP4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5 NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEzNDJiMzU4N2YvMzBhMjg1YjgtNTk0YS0z Y2YzLTg2NjQtYjIzZjhjODVmMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJkOTViYjYtZjhlNi00ZDY2LThk N2ItZDVhMzQyYjM1ODdmLzFiZDk1YmI2LWY4ZTYtNGQ2Ni04ZDdiLWQ1YTM0MmIz NTg3Zi5jcmwwHwYDVR0jBBgwFoAUt1f5a1swFAeafsmLHd40lt3uqFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEz NDJiMzU4N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu9eL7SGsB6A5bJm+ihAJ9VM0d2tXmALLGp3hHsS0EElxz/S6KbrVZD kNDK8dcVvSyJ+J62qrt4KcM10HJutU2Wg9Y52j4mzpmz1pOmbuP2oQGQYTj099yO GpiOBEHr9BmhZaoA8qGM3QoYrZOKIlE10CcwXjUG75VZl0IC9eVi6n5Ehwuxa90e INkQrPelnu/iMCctwC/8e9N1n7ehCu4cS3jwuQO9Z+UemhRWSUyYZ0lEl/tRZQDs Z9iF727WTE3kfvoCTXrRjeW7KRiXbuzpJByQDaiVxWOjy+Q6VtQd+kqAL1feMudr sIXr2YQkRy12DlQOea3zvnozsM7OvSw= -----END CERTIFICATE-----Generated at Mon Jun 16 12:12:47 2025 by rpki-client