$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa File: 4701df24-d7bf-33a8-aa62-b91271027365.roa (raw, json) Hash identifier: w7Bwa0eY4OmkBUnQLO7MRKF4iRMBNjz+pCQps82t+IY= Subject key identifier: 24:CB:99:BA:46:AE:B2:2D:0E:2A:9C:ED:C8:0A:A9:F5:49:21:9F:80 Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Certificate serial: 010D0C9F4328584AE9F67F71C320BE381F207E08 Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 57974 IP address blocks: 23.153.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7f:71:c3:20:be:38:1f:20:7e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=c16b3d1c-63d5-44f5-91f3-b83f3217ec4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:f7:e5:81:25:84:3c:3b:84:bc:34:32:c7: 59:69:6d:07:7c:d8:5b:73:0f:6b:08:e6:5d:55:75: 76:c4:08:42:6b:52:25:93:f2:7e:db:48:56:0b:ad: bd:6b:4c:cf:91:a3:fc:78:d2:dc:b4:33:73:c8:c9: eb:dd:ea:2c:e6:e8:b8:27:7b:9d:14:5e:e4:63:ae: 34:52:db:68:63:ed:55:86:2e:57:c3:d8:18:d8:b4: 07:8f:a6:38:bb:c0:49:13:cf:54:a1:a7:59:da:de: 05:cf:59:59:fe:b9:84:e0:c4:74:39:8e:78:5e:1d: c8:c9:ad:a7:91:ba:a8:e6:72:3a:f6:bd:2c:ee:2b: fa:7a:86:1d:5e:9b:2d:86:4c:88:78:1e:23:24:21: bc:ff:84:8d:35:1e:39:4d:ce:e8:03:32:df:cf:73: 32:1e:e7:29:93:c1:99:5d:af:65:a7:a3:04:64:d8: d2:0a:67:1c:f7:59:45:6b:f3:ff:89:a2:ba:f1:5c: 49:8d:af:14:11:a8:4f:95:6a:7f:9e:f3:8d:b2:6e: 22:6a:73:f1:25:64:22:ac:b1:94:ca:41:da:e2:21: 32:fd:36:f4:d6:36:7a:94:7a:9b:b3:91:24:0c:4e: 26:f2:90:6a:3c:90:22:b6:b7:79:ca:d3:a8:f7:6d: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CB:99:BA:46:AE:B2:2D:0E:2A:9C:ED:C8:0A:A9:F5:49:21:9F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl X509v3 Authority Key Identifier: keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer sbgp-ipAddrBlock: critical IPv4: 23.153.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:62:e1:1b:cb:c6:d5:bc:e2:60:fc:33:e8:a8:3d:9b:9c:b6: 41:03:0e:94:5c:27:d2:53:64:e4:db:b1:b3:8f:5f:a0:f5:38: b7:02:f1:28:ff:bd:ef:d0:a4:e5:02:dc:80:87:f8:ac:8f:6c: 4b:e0:30:a4:4c:bd:c1:02:2b:24:84:71:cf:2d:92:3d:5a:79: 20:bf:84:5c:c5:31:03:7a:70:de:c9:44:9a:05:23:71:45:7e: 45:cc:12:3c:bc:c1:e0:f3:22:5e:3f:cf:9e:44:95:f6:f1:0f: a2:a0:93:ca:a9:7a:20:83:04:73:97:c3:73:66:2c:18:fe:9d: 2b:2b:ce:e0:d8:92:75:b8:9e:29:50:b1:a6:9e:d1:53:8d:3f: e4:2d:6f:a8:c0:ce:19:b0:86:21:17:e0:28:0f:1e:cc:ef:05: fe:e0:70:13:0d:ba:0b:72:05:35:14:65:d8:d5:7f:84:dc:a8: aa:db:70:1b:2e:0b:75:71:fa:89:67:fb:e3:9d:2c:93:6d:dc: 43:85:5f:5e:fa:0e:4d:75:31:33:80:00:a3:c3:34:29:77:e6: 0f:03:4e:f2:0b:ba:ad:34:75:d6:94:6e:b9:69:01:5c:b8:eb: 19:4f:09:45:53:27:eb:a6:c4:6e:5f:28:2f:86:ae:d6:bd:ca: a0:d8:05:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9n9xwyC+OB8gfggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5 NzA3MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YzE2YjNkMWMtNjNkNS00NGY1LTkxZjMtYjgzZjMyMTdlYzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMv35YElhDw7hLw0MsdZaW0HfNhbcw9rCOZd VXV2xAhCa1Ilk/J+20hWC629a0zPkaP8eNLctDNzyMnr3eos5ui4J3udFF7kY640 UttoY+1Vhi5Xw9gY2LQHj6Y4u8BJE89UoadZ2t4Fz1lZ/rmE4MR0OY54Xh3Iya2n kbqo5nI69r0s7iv6eoYdXpsthkyIeB4jJCG8/4SNNR45Tc7oAzLfz3MyHucpk8GZ Xa9lp6MEZNjSCmcc91lFa/P/iaK68VxJja8UEahPlWp/nvONsm4ianPxJWQirLGU ykHa4iEy/Tb01jZ6lHqbs5EkDE4m8pBqPJAitrd5ytOo921iLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTLmbpGrrItDiqc7cgKqfVJIZ+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNDcwMWRmMjQtZDdiZi0z M2E4LWFhNjItYjkxMjcxMDI3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji ZWFjYjk3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKti4RvLxtW84mD8M+ioPZuctkEDDpRcJ9JTZOTbsbOPX6D1OLcC8Sj/ ve/QpOUC3ICH+KyPbEvgMKRMvcECKySEcc8tkj1aeSC/hFzFMQN6cN7JRJoFI3FF fkXMEjy8weDzIl4/z55ElfbxD6Kgk8qpeiCDBHOXw3NmLBj+nSsrzuDYknW4nilQ saae0VONP+Qtb6jAzhmwhiEX4CgPHszvBf7gcBMNugtyBTUUZdjVf4TcqKrbcBsu C3Vx+oln++OdLJNt3EOFX176Dk11MTOAAKPDNCl35g8DTvILuq00ddaUbrlpAVy4 6xlPCUVTJ+umxG5fKC+Grta9yqDYBbo= -----END CERTIFICATE-----Generated at Sat Aug 23 22:04:45 2025 by rpki-client