$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa File: d16055ca-dc7f-3352-833b-ee9a136e1952.roa (raw, json) Hash identifier: KjLblGEuMNHibGx+SkcwuDGbhuucs00Ug+YtOcE1vEc= Subject key identifier: 34:67:18:9B:82:E7:4B:8A:34:0E:67:C7:42:46:A1:EB:74:76:1A:7D Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F4328584A4C3B1A8E8077FE4432862F80 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 23347 IP address blocks: 23.156.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1a:8e:80:77:fe:44:32:86:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=2fbfbefb-8681-4698-89f0-fdc5c23a9542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:4d:9d:d6:9b:f6:39:4f:a7:12:84:aa:8a: 79:6b:22:6e:bc:e6:b5:2d:5e:b1:b1:8a:fe:b6:5d: 95:28:11:dc:c3:ea:e6:0e:ca:26:14:f8:d5:87:a1: 2b:43:2b:fa:1d:5d:a1:7d:2e:41:17:11:98:4e:9a: ad:69:6b:8a:03:5c:ce:63:4e:f8:cf:07:91:23:71: 20:2b:74:82:98:22:50:cc:ac:d5:31:ee:b0:31:14: f2:aa:d4:25:74:43:00:bd:5b:18:c4:90:b7:af:78: 20:15:f6:58:de:6b:39:31:66:96:fb:b4:9b:ba:88: a6:11:f1:c0:25:cb:d2:10:cc:a0:56:f8:3e:e1:11: d7:50:dd:97:58:5d:9b:1f:4e:c3:e9:17:52:e8:b2: 4d:04:fb:c9:4b:ca:c2:b3:50:64:8d:9d:12:31:1a: ef:1e:4b:36:52:ff:89:71:c4:56:64:6e:c7:00:48: e4:34:bc:91:9c:d5:48:57:3b:74:a5:3d:54:95:88: c5:85:35:08:12:2c:ae:d5:db:a2:32:26:9d:38:74: 8d:86:ef:6d:84:2b:b4:a7:61:1e:aa:2e:bd:e1:2d: 7e:be:46:c4:57:a4:11:6b:20:3a:b9:8c:47:1c:b7: 02:db:c8:37:7d:f9:1f:04:d5:87:f2:13:7d:04:14: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:67:18:9B:82:E7:4B:8A:34:0E:67:C7:42:46:A1:EB:74:76:1A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:77:d9:4e:b0:0f:fd:ce:01:80:3b:16:03:33:16:59:60:9f: 8e:45:eb:a8:21:ec:d7:41:91:6f:c0:45:08:4a:d8:90:1a:8f: f6:9a:7c:88:77:5a:e0:d4:29:fb:ee:0d:84:39:81:23:ab:9c: 5b:70:f0:4c:09:53:67:43:53:1c:fd:36:0e:70:14:09:9e:cf: dc:51:10:c3:97:a7:76:e1:75:68:36:c1:da:aa:df:06:ca:0a: 06:f1:27:c6:7b:11:27:be:65:b8:ba:34:73:ec:12:d4:79:36: 71:70:25:6c:63:c7:67:e6:1e:4f:b3:7e:c7:f4:0f:a6:90:fa: 8a:81:66:b6:9f:e3:ef:af:df:a7:fe:07:34:79:68:40:d4:92: 52:c4:9a:94:01:2a:94:3a:40:db:cf:f1:07:93:03:36:17:49: af:f2:6a:2e:0c:a9:ba:62:5f:9b:8b:af:9c:6e:6d:00:88:f7: 70:34:94:2b:ae:aa:ac:cf:a1:88:0d:c1:3c:6f:90:d9:1e:d6: fa:29:56:57:6a:8b:8f:c0:6d:7c:ba:8c:ec:d6:92:72:47:8e: 28:87:3f:de:c5:2c:55:52:bf:fb:aa:19:ce:74:29:00:60:18: ec:40:e3:77:db:f2:61:6b:63:88:a5:79:aa:ed:7f:67:4f:e2: bc:e2:b1:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxqOgHf+RDKGL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MmZiZmJlZmItODY4MS00Njk4LTg5ZjAtZmRjNWMyM2E5NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8NNndab9jlPpxKEqop5ayJuvOa1LV6xsYr+ tl2VKBHcw+rmDsomFPjVh6ErQyv6HV2hfS5BFxGYTpqtaWuKA1zOY074zweRI3Eg K3SCmCJQzKzVMe6wMRTyqtQldEMAvVsYxJC3r3ggFfZY3ms5MWaW+7SbuoimEfHA JcvSEMygVvg+4RHXUN2XWF2bH07D6RdS6LJNBPvJS8rCs1BkjZ0SMRrvHks2Uv+J ccRWZG7HAEjkNLyRnNVIVzt0pT1UlYjFhTUIEiyu1duiMiadOHSNhu9thCu0p2Ee qi694S1+vkbEV6QRayA6uYxHHLcC28g3ffkfBNWH8hN9BBSvUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRnGJuC50uKNA5nx0JGoet0dhp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvZDE2MDU1Y2EtZGM3Zi0z MzUyLTgzM2ItZWU5YTEzNmUxOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB32U6wD/3OAYA7FgMzFllgn45F66gh7NdBkW/ARQhK2JAaj/aafIh3 WuDUKfvuDYQ5gSOrnFtw8EwJU2dDUxz9Ng5wFAmez9xREMOXp3bhdWg2wdqq3wbK CgbxJ8Z7ESe+Zbi6NHPsEtR5NnFwJWxjx2fmHk+zfsf0D6aQ+oqBZraf4++v36f+ BzR5aEDUklLEmpQBKpQ6QNvP8QeTAzYXSa/yai4MqbpiX5uLr5xubQCI93A0lCuu qqzPoYgNwTxvkNke1vopVldqi4/AbXy6jOzWknJHjiiHP97FLFVSv/uqGc50KQBg GOxA43fb8mFrY4ileartf2dP4rziseE= -----END CERTIFICATE-----Generated at Mon Jun 30 14:30:16 2025 by rpki-client