$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa File: 4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa (raw, json) Hash identifier: NMa02QcFAknQ0fQhts5PTvqOpk3iklLzjH8QUIt0+lY= Subject key identifier: 98:0F:03:E7:AC:4F:EE:E9:E1:44:D7:84:3D:ED:ED:CA:C2:0C:DA:30 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584A19FAB6454DD746F3599C5E80 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 26548 IP address blocks: 23.156.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:b6:45:4d:d7:46:f3:59:9c:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=fbff44e8-a4fa-4977-93c0-6e44277fa60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:e7:63:44:f5:ba:6d:18:4d:64:f7:de:9a: 45:fa:4f:8e:55:19:8e:78:a5:06:96:73:19:42:c1: 0b:1b:4a:0e:0a:c4:3c:2b:2d:1f:84:f6:13:77:89: e5:ad:48:02:8b:22:23:b9:a1:5b:cb:ed:26:5c:9c: 0c:19:3a:9f:5c:aa:15:5f:75:50:ca:70:e8:bf:de: 79:38:6e:b0:b3:8f:5e:5d:6b:eb:c6:a1:d5:94:87: e9:ee:7e:76:24:a1:a9:02:aa:15:47:77:fe:65:ad: 25:40:da:3a:81:85:bc:a6:e4:c6:16:fc:3a:80:6d: e1:20:48:7f:13:39:59:1c:37:79:33:66:dd:b4:22: ee:27:06:57:bd:97:78:34:e3:44:63:7c:ec:58:a7: a7:af:a0:d5:4d:d1:0b:e8:eb:fa:e7:55:36:ff:f9: a6:c5:d1:78:ad:6e:90:41:48:1e:4c:bb:9b:98:d1: 8c:53:8c:34:a7:71:86:55:57:9a:5e:96:34:46:4a: 18:11:67:33:05:f7:99:1c:a9:ce:a9:d7:ac:2f:c8: 13:be:e7:ac:59:a6:8f:77:d6:06:1d:6c:09:49:4c: ed:90:b3:8a:94:89:6d:ba:c9:50:13:e4:73:5b:e7: da:0e:79:6c:a2:97:a7:12:a9:e8:07:83:5f:91:ce: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0F:03:E7:AC:4F:EE:E9:E1:44:D7:84:3D:ED:ED:CA:C2:0C:DA:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 23.156.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0f:97:ac:43:74:4e:85:25:8d:05:81:a4:90:0c:80:a6:39: 6b:24:d8:49:9e:75:f8:15:cc:e0:27:f1:ae:7d:36:66:9c:18: db:2d:bb:8a:ce:30:dd:03:92:3c:6e:f0:e1:3e:ab:f5:b4:5c: c3:90:2c:3b:e7:d1:12:0b:d8:eb:62:03:5e:b4:1f:8f:71:17: ff:41:20:a1:ba:3a:85:b2:c7:8c:b4:61:5a:d5:0c:1d:e6:d0: 44:79:a3:b5:9d:0b:ff:26:f6:fc:6a:05:7a:16:c3:72:78:86: 13:de:d8:02:9f:8e:81:dd:62:ab:c6:21:50:c2:a3:f0:df:3a: 45:71:8f:7d:b9:17:63:de:15:c4:b1:06:4a:09:4a:8d:dd:2f: 34:8a:dd:1e:6f:6c:bc:e6:bc:6e:e5:9e:30:8e:76:90:15:c5: 9f:ac:78:3d:2c:f8:8d:dd:3e:e2:65:50:06:07:61:19:1e:b3: 1a:8a:74:48:9f:21:a3:32:3f:98:7a:bb:4e:11:c0:cd:09:76: 51:de:1d:aa:ca:41:f8:d3:8c:14:f4:b0:33:e4:ac:4d:07:cb: 8f:74:bb:5e:23:8d:37:2c:29:7e:52:da:d6:2a:89:15:db:49: 18:51:da:23:37:ab:3a:af:07:24:81:8a:f7:a0:2c:56:73:5c: c8:b6:e9:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+rZFTddG81mcXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk ZmJmZjQ0ZTgtYTRmYS00OTc3LTkzYzAtNmU0NDI3N2ZhNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE/nY0T1um0YTWT33ppF+k+OVRmOeKUGlnMZ QsELG0oOCsQ8Ky0fhPYTd4nlrUgCiyIjuaFby+0mXJwMGTqfXKoVX3VQynDov955 OG6ws49eXWvrxqHVlIfp7n52JKGpAqoVR3f+Za0lQNo6gYW8puTGFvw6gG3hIEh/ EzlZHDd5M2bdtCLuJwZXvZd4NONEY3zsWKenr6DVTdEL6Ov651U2//mmxdF4rW6Q QUgeTLubmNGMU4w0p3GGVVeaXpY0RkoYEWczBfeZHKnOqdesL8gTvuesWaaPd9YG HWwJSUztkLOKlIltuslQE+RzW+faDnlsopenEqnoB4Nfkc5KowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgPA+esT+7p4UTXhD3t7crCDNowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNDUwNGMzOWMtMjJkMS0z ZWRiLWIyYWEtN2NmMGNmNmM2YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMPl6xDdE6FJY0FgaSQDICmOWsk2EmedfgVzOAn8a59NmacGNstu4rO MN0Dkjxu8OE+q/W0XMOQLDvn0RIL2OtiA160H49xF/9BIKG6OoWyx4y0YVrVDB3m 0ER5o7WdC/8m9vxqBXoWw3J4hhPe2AKfjoHdYqvGIVDCo/DfOkVxj325F2PeFcSx BkoJSo3dLzSK3R5vbLzmvG7lnjCOdpAVxZ+seD0s+I3dPuJlUAYHYRkesxqKdEif IaMyP5h6u04RwM0JdlHeHarKQfjTjBT0sDPkrE0Hy490u14jjTcsKX5S2tYqiRXb SRhR2iM3qzqvBySBivegLFZzXMi26fs= -----END CERTIFICATE-----Generated at Sun Jun 29 11:25:53 2025 by rpki-client