$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa File: db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa (raw, json) Hash identifier: 3M8Mfu7XUm9+s1veSeMWwel/4THUEVZhdGYVoN9gPhQ= Subject key identifier: 6E:FE:5C:04:DC:5B:06:0E:06:32:9E:6A:70:EA:2A:35:21:4A:B8:C2 Certificate issuer: /CN=b25db122-9955-42d2-8413-be2d15a44347 Certificate serial: 010D0C9F4328584AA05116650F7DB69D3FB12930 Authority key identifier: 6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa Signing time: Thu 24 Jul 2025 15:53:29 +0000 ROA not before: Thu 24 Jul 2025 15:53:29 +0000 ROA not after: Wed 22 Oct 2025 15:53:29 +0000 asID: 401859 IP address blocks: 23.142.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:51:16:65:0f:7d:b6:9d:3f:b1:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25db122-9955-42d2-8413-be2d15a44347 Validity Not Before: Jul 24 15:53:29 2025 GMT Not After : Oct 22 15:53:29 2025 GMT Subject: CN=38eae48e-03e8-41dc-b55b-cadf8a5a5228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:1a:3d:49:99:d5:61:e4:27:e7:af:17:75: 28:63:c3:48:50:72:08:d7:46:f5:36:e0:16:2e:35: 15:e6:de:ee:54:3a:fb:51:2c:b8:d5:12:c5:50:49: 89:5b:52:30:89:82:54:9e:97:57:6c:f5:69:84:a0: e0:19:ee:c3:11:b0:d1:32:e3:2d:07:67:63:50:dc: a2:ae:9f:3b:eb:44:98:48:25:67:f6:88:9b:d4:f7: 81:5d:65:14:a9:0f:c3:5e:7e:17:ae:9f:4f:6f:8a: 1f:10:4e:86:ae:9d:e9:e3:64:b9:96:23:9f:86:5a: 25:3d:18:2b:ef:2f:52:8f:6c:ca:d7:9e:ec:a8:d8: 8c:01:7e:d3:36:83:69:b1:ad:c3:a5:c9:ed:a2:5e: 5c:90:aa:04:2b:30:74:f5:25:86:3f:59:ba:4e:a6: 04:80:56:b1:b8:e7:b7:0c:5b:88:0e:4e:3b:a2:71: 6f:c6:d7:4a:30:c2:a3:5a:74:0f:b2:d8:68:40:8d: 1d:65:24:d9:62:66:31:b0:b0:5f:a4:c2:60:5b:8d: 19:75:84:33:46:10:0d:0b:78:f7:42:d6:81:43:2e: 95:f0:ae:8f:88:af:b2:63:a9:04:e0:19:dc:56:04: ca:28:cd:7f:8f:94:d1:49:f7:85:21:02:37:b4:4f: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FE:5C:04:DC:5B:06:0E:06:32:9E:6A:70:EA:2A:35:21:4A:B8:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl X509v3 Authority Key Identifier: keyid:6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer sbgp-ipAddrBlock: critical IPv4: 23.142.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1b:ba:b9:84:d8:ba:eb:19:0a:b5:2e:89:12:72:c6:ab:be: 19:54:89:7b:ad:1d:39:1d:45:c2:e1:1c:96:0a:5a:e5:f5:91: c1:5f:2a:1b:8e:dc:c4:13:36:53:63:ca:f8:20:e5:52:37:83: e4:25:5d:41:33:a4:a2:27:d7:ab:c7:c2:22:ac:ea:27:94:44: e3:d3:04:75:7f:24:ad:84:69:92:92:ef:8d:d3:99:9c:9b:01: 78:ea:c6:a7:4f:bf:c6:c7:76:aa:3e:5d:88:f0:8c:ea:bd:54: b6:eb:63:fd:a1:66:b5:c3:68:9a:76:70:87:a4:6e:d7:6d:56: 20:73:06:53:6a:29:f6:34:02:e8:e6:f9:4d:cb:84:a6:d7:92: c6:28:df:f9:88:62:74:23:45:54:96:9d:cd:21:ce:05:88:92: 16:19:6e:f4:03:65:71:e8:ad:fe:46:44:0c:a6:db:0d:0b:97: 46:4b:23:7d:62:5c:03:a8:54:cf:c1:ac:6e:4b:f4:39:41:f2: e6:e3:29:8c:1f:ca:01:c2:fe:ed:4d:93:e2:e7:3f:9c:a2:1d: 0e:af:c3:86:72:a6:51:e2:9c:01:5d:31:aa:0b:ae:83:f5:35: a7:53:8d:97:77:81:19:50:99:32:d8:11:04:9f:2a:ae:4d:cd: 19:92:15:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqgURZlD322nT+xKTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI1ZGIxMjItOTk1NS00MmQyLTg0MTMtYmUyZDE1YTQ0 MzQ3MB4XDTI1MDcyNDE1NTMyOVoXDTI1MTAyMjE1NTMyOVowLzEtMCsGA1UEAxMk MzhlYWU0OGUtMDNlOC00MWRjLWI1NWItY2FkZjhhNWE1MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOEaPUmZ1WHkJ+evF3UoY8NIUHII10b1NuAW LjUV5t7uVDr7USy41RLFUEmJW1IwiYJUnpdXbPVphKDgGe7DEbDRMuMtB2djUNyi rp8760SYSCVn9oib1PeBXWUUqQ/DXn4Xrp9Pb4ofEE6Grp3p42S5liOfhlolPRgr 7y9Sj2zK157sqNiMAX7TNoNpsa3Dpcntol5ckKoEKzB09SWGP1m6TqYEgFaxuOe3 DFuIDk47onFvxtdKMMKjWnQPsthoQI0dZSTZYmYxsLBfpMJgW40ZdYQzRhANC3j3 QtaBQy6V8K6PiK+yY6kE4BncVgTKKM1/j5TRSfeFIQI3tE8/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7+XATcWwYOBjKeanDqKjUhSrjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVk YjEyMi05OTU1LTQyZDItODQxMy1iZTJkMTVhNDQzNDcvZGIxYzVjZWQtMTMzYi0z ZmEyLTg1YTMtZWM5YzZlZGUzNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjI1ZGIxMjItOTk1NS00MmQyLTg0 MTMtYmUyZDE1YTQ0MzQ3L2IyNWRiMTIyLTk5NTUtNDJkMi04NDEzLWJlMmQxNWE0 NDM0Ny5jcmwwHwYDVR0jBBgwFoAUbkxIbDvmoOzVeLpKwpeL2BeQr+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVkYjEyMi05OTU1LTQyZDItODQxMy1iZTJk MTVhNDQzNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF46cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQburmE2LrrGQq1LokScsarvhlUiXutHTkdRcLhHJYKWuX1kcFfKhuO 3MQTNlNjyvgg5VI3g+QlXUEzpKIn16vHwiKs6ieUROPTBHV/JK2EaZKS743TmZyb AXjqxqdPv8bHdqo+XYjwjOq9VLbrY/2hZrXDaJp2cIekbtdtViBzBlNqKfY0Aujm +U3LhKbXksYo3/mIYnQjRVSWnc0hzgWIkhYZbvQDZXHorf5GRAym2w0Ll0ZLI31i XAOoVM/BrG5L9DlB8ubjKYwfygHC/u1Nk+LnP5yiHQ6vw4ZyplHinAFdMaoLroP1 NadTjZd3gRlQmTLYEQSfKq5NzRmSFXk= -----END CERTIFICATE-----Generated at Mon Aug 11 05:50:30 2025 by rpki-client