$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa File: 4cecb50a-dda5-3206-892f-841e1f8d6994.roa (raw, json) Hash identifier: M6131IaT20E4/DBoioTyJW/2wJiFVkt2+lnF8NDzC6Y= Subject key identifier: 8C:32:E3:67:96:3F:0E:EE:D7:77:AB:2B:46:23:19:69:1E:98:E0:F2 Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F4328584A4C3B1AA175B1DA9137861D00 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 23347 IP address blocks: 23.156.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1a:a1:75:b1:da:91:37:86:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=b4363efc-8f80-427e-9bb2-6cc6278b83db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:79:fd:a4:ac:9c:09:68:3e:1b:6a:60:92: 06:79:e5:6b:87:ca:8c:bd:28:c7:fe:63:18:ed:f2: c6:ce:d2:f0:bc:b4:38:15:5e:e4:52:91:4b:95:f3: da:7f:c8:c7:07:83:5a:09:46:fd:a3:99:28:27:5d: eb:04:96:a3:79:76:8e:77:54:5b:35:11:a1:01:f0: 49:ad:0b:15:c3:b1:a3:da:a5:18:9b:c7:9d:11:19: 7e:8e:36:3c:dd:51:da:78:95:61:f7:f2:fa:49:d2: 68:a2:8e:87:7a:5a:a6:10:49:bf:f0:26:e1:c8:f5: 41:9c:bd:45:6e:8a:64:fc:0e:65:9a:b0:cd:a4:c5: 5c:a9:d7:6a:7f:54:39:64:36:9b:5f:83:98:b4:b4: 54:ec:c4:50:00:2a:78:0f:b0:bc:ed:d3:0d:0e:e3: 29:10:7f:30:35:52:ab:20:a0:2f:b5:ae:64:20:35: 86:ab:e9:3c:d7:ca:cf:e1:67:ee:3b:21:77:e5:64: 24:e3:58:1d:af:02:ac:54:19:0b:f2:c7:67:fc:bb: b2:ae:13:af:90:9e:29:55:8e:0c:80:69:50:32:f4: 82:93:1d:df:d3:6c:18:8d:d6:7c:b3:ed:8f:f1:e8: bb:55:a8:46:0d:5f:41:19:15:64:07:ef:d7:fc:66: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:32:E3:67:96:3F:0E:EE:D7:77:AB:2B:46:23:19:69:1E:98:E0:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f6:cb:76:50:c7:5b:2f:b2:e9:de:ca:b3:3c:3e:bb:c8:52: b3:6b:4c:7a:75:b7:83:52:53:f7:58:27:3e:d2:dd:4d:dd:d3: 6e:22:4d:44:1a:8a:9f:bd:6c:8e:49:6c:8b:f3:81:d8:8c:05: 86:cd:36:e1:45:7a:4d:99:6d:5c:38:bd:10:2c:f9:b4:0f:05: e1:70:e0:42:23:d7:57:bb:4c:02:f0:a5:b4:6f:8b:f2:59:9d: 32:94:cb:99:ad:bf:1e:05:c5:05:0a:63:13:03:3f:db:bb:dc: f2:23:0c:be:4e:8f:23:1a:34:45:71:3e:47:d6:b3:65:53:e6: 7d:d9:c3:87:ae:9c:2c:09:52:7e:45:bc:bb:e5:64:2f:31:69: 59:40:a6:e3:ed:ea:52:f9:b8:0d:38:68:e2:56:47:ff:e0:13: e3:30:4b:bc:bb:57:c5:73:cc:38:38:b9:89:db:6c:eb:9d:57: a3:6d:cf:95:23:94:b7:cc:33:ad:9e:13:dc:87:e7:41:ec:d8: 14:6e:24:14:c9:a8:a6:96:7b:65:28:e0:d6:56:37:44:38:93: 47:11:45:b7:d3:ad:0f:7a:e9:17:32:b8:9d:b1:4a:2a:16:c3: 14:c7:20:2e:c4:a9:19:f9:7e:df:a8:8d:b7:de:5d:17:a3:19: 44:7d:17:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxqhdbHakTeGHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk YjQzNjNlZmMtOGY4MC00MjdlLTliYjItNmNjNjI3OGI4M2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNB5/aSsnAloPhtqYJIGeeVrh8qMvSjH/mMY 7fLGztLwvLQ4FV7kUpFLlfPaf8jHB4NaCUb9o5koJ13rBJajeXaOd1RbNRGhAfBJ rQsVw7Gj2qUYm8edERl+jjY83VHaeJVh9/L6SdJooo6HelqmEEm/8CbhyPVBnL1F bopk/A5lmrDNpMVcqddqf1Q5ZDabX4OYtLRU7MRQACp4D7C87dMNDuMpEH8wNVKr IKAvta5kIDWGq+k818rP4WfuOyF35WQk41gdrwKsVBkL8sdn/LuyrhOvkJ4pVY4M gGlQMvSCkx3f02wYjdZ8s+2P8ei7VahGDV9BGRVkB+/X/GYIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwy42eWPw7u13erK0YjGWkemODyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvNGNlY2I1MGEtZGRhNS0z MjA2LTg5MmYtODQxZTFmOGQ2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv2y3ZQx1svsuneyrM8PrvIUrNrTHp1t4NSU/dYJz7S3U3d024iTUQa ip+9bI5JbIvzgdiMBYbNNuFFek2ZbVw4vRAs+bQPBeFw4EIj11e7TALwpbRvi/JZ nTKUy5mtvx4FxQUKYxMDP9u73PIjDL5OjyMaNEVxPkfWs2VT5n3Zw4eunCwJUn5F vLvlZC8xaVlApuPt6lL5uA04aOJWR//gE+MwS7y7V8VzzDg4uYnbbOudV6Ntz5Uj lLfMM62eE9yH50Hs2BRuJBTJqKaWe2Uo4NZWN0Q4k0cRRbfTrQ966RcyuJ2xSioW wxTHIC7EqRn5ft+ojbfeXRejGUR9F/c= -----END CERTIFICATE-----Generated at Mon Jun 30 08:25:30 2025 by rpki-client