$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa File: 571cbfab-46db-38c9-9e6c-a6d9b7760005.roa (raw, json) Hash identifier: uP8eQSqkGmGa0o05ZHIi+Lw7gDYEUnvhg86Mc7sUokc= Subject key identifier: 7A:D4:7B:68:A3:F1:1B:88:FD:FC:C2:E3:80:12:95:0B:1D:88:57:7D Certificate issuer: /CN=d6301b93-7acb-4494-b07b-a79f8d7740ea Certificate serial: 010D0C9F4328584ACE0BA19380A3FC385C54A2F0 Authority key identifier: C9:C5:3C:34:E8:02:6F:E2:05:1F:E3:4A:53:E9:85:67:DF:B7:2D:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 63023 IP address blocks: 23.154.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a1:93:80:a3:fc:38:5c:54:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6301b93-7acb-4494-b07b-a79f8d7740ea Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=be3660f8-9e13-496f-aeb3-e59c70acb827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c7:85:68:d8:df:bb:fc:86:b1:a6:e6:d5:88: ca:e3:22:5e:ec:ed:0b:d4:8e:25:93:3a:16:cd:d5: ee:8f:e3:4b:0c:10:74:05:73:f6:ae:ba:46:80:72: 8c:7e:c8:0c:8f:72:5f:b3:f4:70:33:c4:77:98:bf: 01:5c:ae:26:b7:b9:40:cb:69:f3:98:fc:ff:41:fe: 0c:dd:57:53:2a:b0:0d:33:ec:e1:1a:26:d1:8a:9b: 69:4e:5f:90:00:b7:6c:b3:c8:89:7f:49:ff:1a:75: 72:24:48:f8:fe:06:a5:d6:88:6e:b2:32:b6:71:b8: a3:8e:5e:c7:93:81:28:a1:ed:37:db:64:80:a5:26: 6f:0a:59:7b:1e:aa:f8:a8:1b:b1:e5:f9:d2:73:f2: ee:ca:7d:06:e5:60:92:31:d7:46:53:16:e8:ac:ef: 2c:a4:d6:85:49:33:53:f8:32:8d:75:0e:67:ad:61: e3:e4:2a:40:32:e8:c7:6b:0d:31:98:a4:6f:8a:1d: e8:b1:2f:39:90:dc:5f:19:34:ff:48:e0:69:87:b3: 20:d4:6e:0c:8e:94:6c:d1:f2:b1:37:a0:95:a4:df: 72:0f:0d:db:ed:ba:a6:f5:7c:26:52:4d:bd:a7:d7: 8f:91:73:74:ad:c3:0b:d4:74:f8:7f:73:5f:64:b0: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D4:7B:68:A3:F1:1B:88:FD:FC:C2:E3:80:12:95:0B:1D:88:57:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.crl X509v3 Authority Key Identifier: keyid:C9:C5:3C:34:E8:02:6F:E2:05:1F:E3:4A:53:E9:85:67:DF:B7:2D:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer sbgp-ipAddrBlock: critical IPv4: 23.154.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a3:8c:13:56:ef:b7:d7:1b:ad:f6:7d:3e:c2:f4:24:b0:0f: 71:d2:1c:4c:86:10:d5:1c:3c:6a:b3:09:83:27:55:5e:31:09: c7:92:8d:09:3f:3a:04:be:ee:d6:a2:18:20:e2:65:fe:5f:aa: 6d:56:47:ab:d2:05:6b:65:8e:c7:46:04:ec:f3:fc:68:8a:e2: 46:3f:a6:7f:84:79:bf:34:04:ca:86:bd:17:d3:9c:c8:bc:fd: f4:70:35:da:da:80:12:df:30:59:69:63:3b:c7:eb:5d:f2:46: b8:4f:6f:aa:83:ef:99:12:1f:ff:1b:16:98:12:ad:7c:ea:3b: 3e:de:cc:01:40:56:6d:44:03:c2:94:30:27:37:ea:ee:d2:4a: 01:e3:7a:d5:dd:2b:36:e5:6b:1f:be:46:ea:8d:65:af:f9:14: 99:5e:f2:c7:d5:76:91:e5:b0:d4:28:f8:bf:02:45:f0:a8:84: 1c:ac:d6:4d:3a:7e:37:c6:d6:9f:6c:c1:80:6d:f8:c6:1d:51: 01:c0:b2:4a:9c:76:16:23:48:58:b9:00:0c:4c:d7:3a:2f:50: 36:6f:f2:c6:38:b0:55:0b:4c:fc:72:67:e8:ea:ce:3e:26:e5: 0e:5f:c2:3a:76:6e:cd:27:a6:db:e3:33:f0:82:3b:0c:18:38: 04:f3:5c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6GTgKP8OFxUovAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDYzMDFiOTMtN2FjYi00NDk0LWIwN2ItYTc5ZjhkNzc0 MGVhMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YmUzNjYwZjgtOWUxMy00OTZmLWFlYjMtZTU5YzcwYWNiODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhceFaNjfu/yGsabm1YjK4yJe7O0L1I4lkzoW zdXuj+NLDBB0BXP2rrpGgHKMfsgMj3Jfs/RwM8R3mL8BXK4mt7lAy2nzmPz/Qf4M 3VdTKrANM+zhGibRiptpTl+QALdss8iJf0n/GnVyJEj4/gal1ohusjK2cbijjl7H k4Eooe0322SApSZvCll7Hqr4qBux5fnSc/Luyn0G5WCSMddGUxborO8spNaFSTNT +DKNdQ5nrWHj5CpAMujHaw0xmKRvih3osS85kNxfGTT/SOBph7Mg1G4MjpRs0fKx N6CVpN9yDw3b7bqm9XwmUk29p9ePkXN0rcML1HT4f3NfZLCBHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrUe2ij8RuI/fzC44ASlQsdiFd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNjMw MWI5My03YWNiLTQ0OTQtYjA3Yi1hNzlmOGQ3NzQwZWEvNTcxY2JmYWItNDZkYi0z OGM5LTllNmMtYTZkOWI3NzYwMDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDYzMDFiOTMtN2FjYi00NDk0LWIw N2ItYTc5ZjhkNzc0MGVhL2Q2MzAxYjkzLTdhY2ItNDQ5NC1iMDdiLWE3OWY4ZDc3 NDBlYS5jcmwwHwYDVR0jBBgwFoAUycU8NOgCb+IFH+NKU+mFZ9+3LdQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNjMwMWI5My03YWNiLTQ0OTQtYjA3Yi1hNzlm OGQ3NzQwZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmjjBNW77fXG632fT7C9CSwD3HSHEyGENUcPGqzCYMnVV4xCceSjQk/ OgS+7taiGCDiZf5fqm1WR6vSBWtljsdGBOzz/GiK4kY/pn+Eeb80BMqGvRfTnMi8 /fRwNdragBLfMFlpYzvH613yRrhPb6qD75kSH/8bFpgSrXzqOz7ezAFAVm1EA8KU MCc36u7SSgHjetXdKzblax++RuqNZa/5FJle8sfVdpHlsNQo+L8CRfCohBys1k06 fjfG1p9swYBt+MYdUQHAskqcdhYjSFi5AAxM1zovUDZv8sY4sFULTPxyZ+jqzj4m 5Q5fwjp2bs0nptvjM/CCOwwYOATzXOQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:07 2025 by rpki-client