$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa File: a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa (raw, json) Hash identifier: 20jCdpfcGEi1mlHT5UYbG9EcMRYr1QLDO3k3aibmrlQ= Subject key identifier: E2:FD:4A:74:59:89:C3:9D:82:30:1C:B2:FE:24:61:6F:1B:C3:84:94 Certificate issuer: /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Certificate serial: 010D0C9F4328584A5335A49581E65F02DB163F00 Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 6145 IP address blocks: 23.157.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a4:95:81:e6:5f:02:db:16:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=5ce0a879-1b3d-45a6-be10-d3162f944e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:df:18:d5:24:f6:b8:ec:62:6e:26:bb:ae:ba: 50:ad:9f:b0:58:b9:2a:e1:2e:ad:44:be:98:2e:5e: 74:c7:09:36:32:17:96:bb:36:5d:84:10:9b:86:49: 92:32:96:93:dd:23:64:cd:78:55:02:0d:bd:bc:8c: 43:b7:48:83:0d:e4:92:68:08:6f:0b:a0:b9:d2:77: 2c:c7:35:9c:42:33:3d:92:f7:a4:d0:77:6b:ac:c7: 86:ec:7e:74:b7:6f:63:01:8b:53:ed:7a:57:d3:15: 35:9d:01:3d:08:5d:c3:25:e6:8e:d9:1b:e2:e8:2d: 63:d2:c6:5d:63:20:3d:34:21:f9:3a:75:3a:34:36: 9e:8f:55:b4:63:e4:1d:f7:47:b4:f2:e0:13:c6:32: 1d:a0:e4:b3:bd:64:17:37:f0:b7:b5:db:cc:d9:19: 27:f9:47:db:2e:c2:e0:f2:5f:0a:65:fe:39:fa:c0: 2d:db:12:9d:b6:d2:1d:64:86:be:18:6e:95:10:46: d1:53:bc:29:a3:b9:0a:8c:e7:30:8c:3f:15:db:7b: 8e:30:e6:c1:f1:7e:0d:61:cd:05:7a:85:34:bb:03: 0b:d2:fe:56:30:24:d0:6c:a0:89:98:63:d9:1f:db: 68:02:58:eb:b9:fa:e1:dd:22:ec:fe:9d:1e:c3:d2: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FD:4A:74:59:89:C3:9D:82:30:1C:B2:FE:24:61:6F:1B:C3:84:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl X509v3 Authority Key Identifier: keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer sbgp-ipAddrBlock: critical IPv4: 23.157.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1b:c4:4e:34:e4:93:eb:d9:17:e8:ba:4e:85:8e:33:a1:e3: b2:6f:22:30:1a:70:53:99:a5:30:93:18:14:d2:0a:ff:53:83: 47:17:bb:58:80:00:10:b3:ae:87:4b:85:9c:7c:6b:b7:22:3e: 68:de:49:fe:49:16:44:64:d8:32:07:29:98:3e:da:22:f5:60: fb:83:c1:a7:aa:cd:3c:47:9e:7b:4e:2a:92:80:9a:77:76:9a: 41:06:f4:d8:c4:fb:31:6a:5b:77:77:27:9b:2c:97:d4:22:d4: ef:f0:96:eb:d9:fe:7d:ef:f6:a7:38:ed:b2:7f:91:a7:a8:50: c3:9d:62:c8:c8:c0:52:bb:d9:e8:bd:76:df:b1:72:5f:d9:3e: 84:46:89:24:35:cb:94:3b:b5:55:b3:89:77:e4:72:d6:5d:87: f6:60:af:58:00:11:61:94:d2:63:52:0c:0d:23:95:18:21:03: fb:77:ac:6e:fe:68:b4:27:c2:43:88:13:47:07:ca:d8:c2:e0: 09:a6:51:55:1a:fa:59:eb:fd:a3:88:37:db:ab:88:95:25:45: 41:2c:c3:51:2e:fa:72:26:dc:fa:54:e9:20:5d:50:b5:86:5d: a9:46:ba:d9:25:0a:06:b8:ca:46:bc:19:72:1c:39:49:06:b7: 20:1d:3d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaSVgeZfAtsWPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyMDZiZDAtZTk3Zi00YmM0LTllMDYtZTFiYjliMzgz NjI0MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk NWNlMGE4NzktMWIzZC00NWE2LWJlMTAtZDMxNjJmOTQ0ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd8Y1ST2uOxibia7rrpQrZ+wWLkq4S6tRL6Y Ll50xwk2MheWuzZdhBCbhkmSMpaT3SNkzXhVAg29vIxDt0iDDeSSaAhvC6C50ncs xzWcQjM9kvek0HdrrMeG7H50t29jAYtT7XpX0xU1nQE9CF3DJeaO2Rvi6C1j0sZd YyA9NCH5OnU6NDaej1W0Y+Qd90e08uATxjIdoOSzvWQXN/C3tdvM2Rkn+UfbLsLg 8l8KZf45+sAt2xKdttIdZIa+GG6VEEbRU7wpo7kKjOcwjD8V23uOMObB8X4NYc0F eoU0uwML0v5WMCTQbKCJmGPZH9toAljrufrh3SLs/p0ew9IFIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL9SnRZicOdgjAcsv4kYW8bw4SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIw NmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJiOWIzODM2MjQvYTA0ZDhhODMtOTNlNS0z YWVjLTgwNWUtYmZlY2IzZmM1MGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTYyMDZiZDAtZTk3Zi00YmM0LTll MDYtZTFiYjliMzgzNjI0L2E2MjA2YmQwLWU5N2YtNGJjNC05ZTA2LWUxYmI5YjM4 MzYyNC5jcmwwHwYDVR0jBBgwFoAUAxSBE7w8TnHynd1jBoL0eB9h75swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIwNmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJi OWIzODM2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0bxE405JPr2Rfouk6FjjOh47JvIjAacFOZpTCTGBTSCv9Tg0cXu1iA ABCzrodLhZx8a7ciPmjeSf5JFkRk2DIHKZg+2iL1YPuDwaeqzTxHnntOKpKAmnd2 mkEG9NjE+zFqW3d3J5ssl9Qi1O/wluvZ/n3v9qc47bJ/kaeoUMOdYsjIwFK72ei9 dt+xcl/ZPoRGiSQ1y5Q7tVWziXfkctZdh/Zgr1gAEWGU0mNSDA0jlRghA/t3rG7+ aLQnwkOIE0cHytjC4AmmUVUa+lnr/aOIN9uriJUlRUEsw1Eu+nIm3PpU6SBdULWG XalGutklCga4yka8GXIcOUkGtyAdPU0= -----END CERTIFICATE-----Generated at Sun Jun 29 12:29:49 2025 by rpki-client