$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa File: 8459abed-f045-31a6-8fe6-16d82354e576.roa (raw, json) Hash identifier: sYajMeKHmY0jWGpYZHd85spj37KOZCbTUdSiqzyeROs= Subject key identifier: 10:1D:7C:D4:B4:5F:34:1A:60:62:C7:09:3E:67:4B:5D:6D:FA:72:6C Certificate issuer: /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c Certificate serial: 010D0C9F43285849CE9A58C7423F91451CADFF10 Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 399976 IP address blocks: 23.153.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:58:c7:42:3f:91:45:1c:ad:ff:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=a25a19d4-2a0b-4514-82a6-6dc2f9922bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:e0:e2:0b:d9:2e:96:e5:26:8c:82:15:ce: bd:f3:3e:56:75:8e:c9:18:ac:86:e6:c6:e3:56:d3: ee:05:bb:0a:98:d0:07:bc:c0:a8:da:5e:c2:3b:2d: 41:8a:56:12:8f:03:a8:74:33:07:1c:32:31:ec:a5: b4:1e:99:51:29:64:b2:f0:a3:2e:9e:36:b7:e8:72: 0b:e4:c0:92:0e:39:13:8c:32:d0:30:cc:f7:d0:d4: 32:1f:43:f4:a3:89:16:f1:ec:4b:e1:8a:e8:dd:24: da:ed:55:ac:22:16:f1:40:56:10:99:80:08:c5:d7: a5:83:05:03:92:86:2f:f4:11:f3:8f:90:14:29:89: 6a:34:33:1e:23:f3:ff:4a:b2:8c:2c:80:b1:dc:4b: 0f:f6:b1:ad:10:90:fe:db:8b:c9:55:8a:8e:a3:54: f2:47:c4:1d:6d:d1:d8:88:5e:5e:a4:4c:e8:35:a2: 2d:0e:ec:de:12:25:13:c3:e7:f8:4b:8b:fd:41:d1: ce:40:b3:65:d7:24:ab:84:05:33:3d:f2:c1:82:0a: 7f:a6:2d:9f:b2:50:e0:a5:77:ba:81:57:0b:30:e4: fa:16:ce:d1:8a:0f:51:aa:fb:45:e6:b0:6e:5e:61: 46:fd:e6:b7:62:36:74:5d:55:a1:38:8c:21:14:7b: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1D:7C:D4:B4:5F:34:1A:60:62:C7:09:3E:67:4B:5D:6D:FA:72:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl X509v3 Authority Key Identifier: keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer sbgp-ipAddrBlock: critical IPv4: 23.153.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c9:23:f3:60:b0:a7:74:66:1a:90:1d:e4:b3:b5:84:2d:7f: 11:81:4a:80:d1:ae:c6:d9:ec:cc:bc:25:54:c6:a7:ce:48:da: d9:08:66:15:ab:bc:07:ba:aa:15:4b:b1:2e:31:c8:91:1a:95: db:77:4c:2e:d7:7e:0f:c3:48:88:e1:a8:7e:a4:c2:45:85:90: 86:26:c5:ae:4e:fe:86:d7:db:09:58:93:35:f5:33:52:d5:7d: 36:cb:99:53:99:23:64:03:e9:c7:da:67:2a:e8:e3:72:dc:2f: bb:02:17:a5:f8:60:33:1f:31:d3:4d:55:cc:ab:bd:e2:e5:57: c7:c8:ca:2a:42:59:b1:3c:0b:9f:d7:d9:25:b4:76:1a:d5:62: 95:96:ce:51:e9:2e:c6:a9:c4:0f:a5:7a:d2:b3:a9:c1:4b:be: 16:b4:10:bd:8b:ef:eb:62:81:bd:5f:0b:cf:cd:ca:d6:21:85: 78:28:ba:9c:2e:09:e6:fe:6e:e0:b9:d4:f0:8d:46:4c:99:0e: 61:06:61:ad:84:4b:4a:d8:a4:a3:62:23:3d:61:6b:d7:b0:f1: a0:c2:25:16:f9:a0:75:95:b2:d9:ef:12:97:8f:ce:44:29:e8: 0b:26:14:71:9b:b7:d0:22:f3:9d:ca:e5:3d:37:ab:d0:76:9e: 53:40:2b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmljHQj+RRRyt/xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxOTJmNTMtOGIwNy00YzNmLWE2YjAtZTllNDIyOTJk MzFjMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YTI1YTE5ZDQtMmEwYi00NTE0LTgyYTYtNmRjMmY5OTIyYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dLg4gvZLpblJoyCFc698z5WdY7JGKyG5sbj VtPuBbsKmNAHvMCo2l7COy1BilYSjwOodDMHHDIx7KW0HplRKWSy8KMunja36HIL 5MCSDjkTjDLQMMz30NQyH0P0o4kW8exL4Yro3STa7VWsIhbxQFYQmYAIxdelgwUD koYv9BHzj5AUKYlqNDMeI/P/SrKMLICx3EsP9rGtEJD+24vJVYqOo1TyR8QdbdHY iF5epEzoNaItDuzeEiUTw+f4S4v9QdHOQLNl1ySrhAUzPfLBggp/pi2fslDgpXe6 gVcLMOT6Fs7Rig9RqvtF5rBuXmFG/ea3YjZ0XVWhOIwhFHumewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAdfNS0XzQaYGLHCT5nS11t+nJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTE5 MmY1My04YjA3LTRjM2YtYTZiMC1lOWU0MjI5MmQzMWMvODQ1OWFiZWQtZjA0NS0z MWE2LThmZTYtMTZkODIzNTRlNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUxOTJmNTMtOGIwNy00YzNmLWE2 YjAtZTllNDIyOTJkMzFjLzY1MTkyZjUzLThiMDctNGMzZi1hNmIwLWU5ZTQyMjky ZDMxYy5jcmwwHwYDVR0jBBgwFoAUQl+d++OdFI0HxDUWzuUlDTj2FOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTE5MmY1My04YjA3LTRjM2YtYTZiMC1lOWU0 MjI5MmQzMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5mIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3JI/NgsKd0ZhqQHeSztYQtfxGBSoDRrsbZ7My8JVTGp85I2tkIZhWr vAe6qhVLsS4xyJEaldt3TC7Xfg/DSIjhqH6kwkWFkIYmxa5O/obX2wlYkzX1M1LV fTbLmVOZI2QD6cfaZyro43LcL7sCF6X4YDMfMdNNVcyrveLlV8fIyipCWbE8C5/X 2SW0dhrVYpWWzlHpLsapxA+letKzqcFLvha0EL2L7+tigb1fC8/NytYhhXgoupwu Ceb+buC51PCNRkyZDmEGYa2ES0rYpKNiIz1ha9ew8aDCJRb5oHWVstnvEpePzkQp 6AsmFHGbt9Ai853K5T03q9B2nlNAK3k= -----END CERTIFICATE-----Generated at Sun May 11 08:14:13 2025 by rpki-client