$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa File: db729622-f239-3542-a3b9-b05be8216524.roa (raw, json) Hash identifier: eWkWZypfd2NtSPAPLEXAGvW324W3f8ZVeb0v/x3F1gg= Subject key identifier: D5:FC:36:C7:86:5A:A6:67:3A:F6:71:16:C7:F2:37:89:DA:79:DE:93 Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584AF2568294C8C4DDC750FBF140 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 54696 IP address blocks: 23.148.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:82:94:c8:c4:dd:c7:50:fb:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=aa410b22-899d-4700-9204-3a5d736333aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:97:fa:8f:90:78:d5:73:ce:16:f6:db:f6: 91:07:12:37:69:bf:d8:ae:d5:b3:2f:f5:84:8f:bd: bd:f6:83:5b:53:ab:5c:f4:9e:f8:4c:76:f3:9d:a1: 7e:9d:c7:1d:eb:06:3b:d3:47:89:59:35:93:0a:f9: eb:27:70:13:20:6b:61:f7:58:fa:10:a3:15:6f:61: 20:cf:50:39:4f:2b:45:ba:14:04:f1:7b:23:7d:90: 95:d3:b8:fc:b5:e2:25:49:ae:d3:18:4b:7e:2c:8e: 56:cb:56:47:f7:3f:e5:d9:39:fc:ef:ba:62:be:1c: b2:5b:b2:97:aa:b6:55:61:07:4d:c4:5f:c5:b4:80: 48:2c:2b:8c:cf:b8:b9:1c:24:6f:1b:2c:86:f9:ca: fe:a0:e1:6f:ee:4b:03:54:46:f7:2b:a3:9e:9e:ec: 40:ec:56:5f:1d:db:2e:51:bb:63:9f:07:a7:62:5c: 91:d7:00:79:33:37:84:dc:31:93:70:26:46:31:ef: ef:ad:be:d9:6e:61:d1:25:3c:c7:3a:27:1c:b7:ad: 04:20:10:6b:d5:d3:cb:a3:b0:8e:4a:ac:83:9d:9f: bc:c6:53:48:c6:1d:d6:a7:56:3b:ae:fd:7d:57:1e: 67:02:ab:31:1d:9a:e3:10:e6:5c:df:87:c1:4a:10: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FC:36:C7:86:5A:A6:67:3A:F6:71:16:C7:F2:37:89:DA:79:DE:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:56:cc:d9:d5:5e:de:a3:81:90:ea:f0:9b:90:e2:48:c9:f6: 69:da:a6:2e:89:45:21:a7:11:13:80:56:de:ce:02:45:44:2f: e7:19:c7:14:7b:71:87:d3:b4:97:9b:94:fe:89:fd:10:a4:9d: 6e:a2:8b:bb:1c:4f:be:78:ac:c3:8d:c1:e2:ac:5f:7e:64:bd: c7:c4:9e:41:47:a8:81:52:f5:c6:e2:62:4a:63:08:fb:a3:94: e8:67:5d:30:0a:fd:64:0a:15:6c:33:9f:81:4b:fa:d8:19:0b: bc:e6:65:f9:66:c6:41:e3:1a:1d:59:b7:bb:42:44:96:fd:92: 5b:5d:39:35:a7:75:3f:5b:30:fa:8b:25:1c:f4:12:f5:a5:d4: ab:79:bf:a8:b9:36:98:cb:fa:ea:e2:56:e0:4f:64:45:6c:0f: 8a:9c:18:af:78:68:50:f5:ed:3d:6c:a0:a0:5a:7e:f3:f2:3b: 7c:0a:ac:7f:f7:1c:3f:48:c1:71:b3:1a:43:04:47:dc:be:15: ec:11:1a:85:b1:a9:78:ac:4e:21:f3:96:23:cc:0a:ff:06:fe: ed:15:40:36:7f:80:cb:a2:b5:c3:f6:5e:e5:22:8e:52:bf:17: 7d:bd:40:b1:a2:4b:8a:89:ab:19:08:b9:62:2c:0a:90:d9:d2: 05:79:72:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoKUyMTdx1D78UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YWE0MTBiMjItODk5ZC00NzAwLTkyMDQtM2E1ZDczNjMzM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnqX+o+QeNVzzhb22/aRBxI3ab/YrtWzL/WE j7299oNbU6tc9J74THbznaF+nccd6wY700eJWTWTCvnrJ3ATIGth91j6EKMVb2Eg z1A5TytFuhQE8XsjfZCV07j8teIlSa7TGEt+LI5Wy1ZH9z/l2Tn877pivhyyW7KX qrZVYQdNxF/FtIBILCuMz7i5HCRvGyyG+cr+oOFv7ksDVEb3K6OenuxA7FZfHdsu UbtjnwenYlyR1wB5MzeE3DGTcCZGMe/vrb7ZbmHRJTzHOicct60EIBBr1dPLo7CO SqyDnZ+8xlNIxh3Wp1Y7rv19Vx5nAqsxHZrjEOZc34fBShBacwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX8NseGWqZnOvZxFsfyN4naed6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvZGI3Mjk2MjItZjIzOS0z NTQyLWEzYjktYjA1YmU4MjE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNWzNnVXt6jgZDq8JuQ4kjJ9mnapi6JRSGnEROAVt7OAkVEL+cZxxR7 cYfTtJeblP6J/RCknW6ii7scT754rMONweKsX35kvcfEnkFHqIFS9cbiYkpjCPuj lOhnXTAK/WQKFWwzn4FL+tgZC7zmZflmxkHjGh1Zt7tCRJb9kltdOTWndT9bMPqL JRz0EvWl1Kt5v6i5NpjL+uriVuBPZEVsD4qcGK94aFD17T1soKBafvPyO3wKrH/3 HD9IwXGzGkMER9y+FewRGoWxqXisTiHzliPMCv8G/u0VQDZ/gMuitcP2XuUijlK/ F329QLGiS4qJqxkIuWIsCpDZ0gV5crY= -----END CERTIFICATE-----Generated at Sun Aug 24 06:43:30 2025 by rpki-client