$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa File: 13156011-7624-36a7-93ec-fb2c055d8fd0.roa (raw, json) Hash identifier: xekijFa6llnRH2hzZbuJuf7IxQGNSBLlDv/I1fsFrsM= Subject key identifier: B8:70:DF:35:49:23:9E:31:BF:62:AE:85:E2:42:D0:35:D9:E0:65:F9 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584AC7111FEA50C30D05C198BA78 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 55799 IP address blocks: 23.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:1f:ea:50:c3:0d:05:c1:98:ba:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=08da6188-6e27-4d46-95de-f48ffc9341b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d7:f1:28:75:5c:e7:86:df:11:2f:a9:70:36: 88:a7:da:db:07:4e:ce:f9:3f:cd:ef:b8:e4:b6:93: 27:32:6a:47:7d:35:cd:80:67:b2:f7:29:6c:81:54: 57:fa:70:12:33:a3:b9:b3:74:88:c1:06:71:47:d0: 96:ad:d3:12:66:9b:61:9e:e9:c1:82:30:a9:15:66: b4:3d:72:1b:54:43:c6:ea:f3:5f:fd:0a:46:3c:4d: cc:52:37:4c:50:59:d5:a5:4e:e3:b8:56:e0:1a:2a: 3a:b8:6b:b7:f4:4f:51:fe:8a:fc:d9:b9:80:44:e1: 83:2d:4a:30:69:ee:bd:50:8b:43:6c:c9:23:42:14: 5a:4d:71:43:0c:c2:e9:ca:ab:ab:fd:2d:9a:bd:ff: 57:d6:6a:93:74:e6:eb:5f:5d:2b:1e:27:57:f2:f2: 29:47:6d:35:14:13:ce:9d:81:72:9a:8a:86:0a:6a: 15:86:fb:55:df:7d:48:b9:08:0c:78:d7:1a:87:15: 81:d1:4c:7f:14:88:90:24:80:46:ed:e5:2a:58:b3: db:fe:10:88:ec:90:50:a8:c5:6c:17:c6:80:63:86: 4c:ba:4c:66:2e:dd:eb:81:af:e7:fc:50:8a:61:21: c2:a6:d7:a8:fe:b3:2d:62:a7:db:4a:94:34:cb:92: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:70:DF:35:49:23:9E:31:BF:62:AE:85:E2:42:D0:35:D9:E0:65:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 23.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8d:2d:76:80:5b:82:d0:4e:62:20:c9:0c:1c:d7:43:fd:69: f7:87:84:13:b9:46:a3:50:82:6e:e9:a6:31:bf:36:6a:82:a3: f6:46:b6:96:24:6e:a5:48:28:fc:7c:00:4d:82:df:41:8e:86: f4:81:99:a1:ae:1a:0e:e5:59:0c:ba:50:c0:85:67:d2:a0:8d: 2f:d1:7a:6a:0d:a4:43:a7:84:0e:0d:d1:52:0c:78:b1:a4:df: 17:b2:56:7b:fa:38:3e:b1:06:dd:25:c2:6d:66:04:fd:26:8f: d7:cd:f9:2b:0b:8d:5f:ef:e6:23:c4:e7:7e:98:e0:e0:ee:ea: 6b:24:3f:97:c8:3d:99:09:20:63:82:c1:a2:af:d1:2b:91:ed: 79:4d:e4:b0:a6:8c:ee:15:be:43:93:19:f5:00:76:85:d5:eb: 25:4c:9d:c1:0f:bd:c0:52:76:01:74:43:4a:14:ce:e6:86:c5: e7:de:03:09:5f:33:f5:6c:6c:be:94:f2:a2:5a:4b:99:0c:02: f9:21:82:a2:cd:2a:56:33:05:d0:d7:96:05:60:c2:40:d5:68: 6a:e1:41:8a:48:3e:1b:be:7b:13:a1:c1:a5:8e:26:b9:8e:74: 5b:1c:e4:5d:a6:4f:60:d6:0a:4f:c6:ca:d2:b2:2d:ba:ff:0e: 39:c2:cb:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHER/qUMMNBcGYungwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MDhkYTYxODgtNmUyNy00ZDQ2LTk1ZGUtZjQ4ZmZjOTM0MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktfxKHVc54bfES+pcDaIp9rbB07O+T/N77jk tpMnMmpHfTXNgGey9ylsgVRX+nASM6O5s3SIwQZxR9CWrdMSZpthnunBgjCpFWa0 PXIbVEPG6vNf/QpGPE3MUjdMUFnVpU7juFbgGio6uGu39E9R/or82bmAROGDLUow ae69UItDbMkjQhRaTXFDDMLpyqur/S2avf9X1mqTdObrX10rHidX8vIpR201FBPO nYFymoqGCmoVhvtV331IuQgMeNcahxWB0Ux/FIiQJIBG7eUqWLPb/hCI7JBQqMVs F8aAY4ZMukxmLt3rga/n/FCKYSHCpteo/rMtYqfbSpQ0y5J0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhw3zVJI54xv2KuheJC0DXZ4GX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvMTMxNTYwMTEtNzYyNC0z NmE3LTkzZWMtZmIyYzA1NWQ4ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6NLXaAW4LQTmIgyQwc10P9afeHhBO5RqNQgm7ppjG/NmqCo/ZGtpYk bqVIKPx8AE2C30GOhvSBmaGuGg7lWQy6UMCFZ9KgjS/RemoNpEOnhA4N0VIMeLGk 3xeyVnv6OD6xBt0lwm1mBP0mj9fN+SsLjV/v5iPE536Y4ODu6mskP5fIPZkJIGOC waKv0SuR7XlN5LCmjO4VvkOTGfUAdoXV6yVMncEPvcBSdgF0Q0oUzuaGxefeAwlf M/VsbL6U8qJaS5kMAvkhgqLNKlYzBdDXlgVgwkDVaGrhQYpIPhu+exOhwaWOJrmO dFsc5F2mT2DWCk/GytKyLbr/DjnCy9A= -----END CERTIFICATE-----Generated at Sat Aug 23 19:54:28 2025 by rpki-client