$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/e5b89183-d1b7-32fc-8eec-5189b9f2a4ac.roa File: e5b89183-d1b7-32fc-8eec-5189b9f2a4ac.roa (raw, json) Hash identifier: LlE8jW0/v+6f5aFzFw83DN5MGu5ne7wGAemE6HLQx+4= Subject key identifier: 2A:EC:97:8C:05:EF:7D:19:94:8E:D0:9F:6C:53:E4:29:50:CE:AC:BA Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584AF256827F1A2EC5E4E50ACA00 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/e5b89183-d1b7-32fc-8eec-5189b9f2a4ac.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 54696 IP address blocks: 23.148.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:82:7f:1a:2e:c5:e4:e5:0a:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=59cb31a9-ac42-458d-974c-29f060a63eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:96:71:0c:d3:24:94:30:55:3f:9a:7e:57: 48:df:68:be:49:fd:c7:3f:3a:f8:83:a0:17:89:bc: 02:56:d3:2a:88:fb:21:ec:80:19:40:48:ed:43:62: 1a:5b:9c:a3:37:a4:56:56:1f:88:8e:74:78:82:6f: d8:fa:cd:fe:76:7e:b9:b7:93:8b:ba:ac:fe:31:68: 2a:15:a7:c2:54:98:36:62:3f:45:3e:00:86:de:fa: e6:47:2b:df:b1:a2:1c:56:95:3c:11:f5:17:41:bc: 25:1b:4e:d8:93:2f:30:2f:5b:89:11:de:26:a0:03: e2:b1:31:14:f2:17:ca:6a:90:b2:30:ec:c8:c5:71: 2e:d5:c5:c4:42:e0:a4:54:2c:0a:35:2c:68:db:4e: e9:6e:a3:98:38:ce:79:a0:ee:88:7b:06:77:81:26: 6b:52:3a:ef:22:8b:db:4f:89:f3:ba:e9:c4:25:9c: 23:9e:74:9f:56:a7:d9:95:34:37:de:ee:a2:2c:b9: ad:a6:ba:71:d2:4e:ca:39:16:92:4b:0a:2f:35:aa: ef:7a:7e:67:92:b0:96:49:c9:a6:d9:d3:ab:2d:13: 3b:1b:3e:9f:68:07:f0:8b:e1:b2:98:46:e4:e7:48: 9c:63:a2:e0:49:51:36:5f:69:04:3d:e5:0f:ac:4d: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EC:97:8C:05:EF:7D:19:94:8E:D0:9F:6C:53:E4:29:50:CE:AC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/e5b89183-d1b7-32fc-8eec-5189b9f2a4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8c:0b:c6:a3:b3:68:58:9c:60:51:6e:62:7a:b2:db:08:54: fe:0d:a5:3b:50:f2:81:04:95:08:ba:69:cd:d1:4d:a3:38:84: 60:87:bd:09:44:b6:24:02:8e:b6:c3:c6:ae:ee:71:78:9b:0d: b8:52:81:47:a7:12:99:b4:6b:fd:d7:90:55:aa:0d:1a:d8:6a: f0:0f:04:28:e8:25:25:33:e3:24:73:77:c7:89:e5:0e:07:48: 32:34:eb:49:bc:1a:9c:2a:e3:85:73:cd:8e:92:69:6d:4e:22: 6e:65:ef:fc:28:c5:f7:83:46:c2:09:94:ce:08:78:b6:c9:65: 4f:9b:ba:b8:59:ea:da:6a:1b:ff:c0:ed:29:b7:bb:65:b5:6b: f0:cc:12:c8:3b:29:2f:70:7b:5c:40:70:87:ff:ec:38:56:75: 37:18:87:a6:c9:47:8d:5c:d2:4a:83:82:ab:25:31:b0:77:b0: f8:f8:da:03:06:2c:ef:c5:fc:88:94:f7:5f:59:49:66:d4:94: 23:34:a4:1a:a7:53:d2:89:bf:65:19:d1:3e:1b:7b:c4:b4:8c: 01:0f:32:03:c8:23:f4:4c:37:55:4a:c1:b4:61:78:70:93:83: 74:52:1f:8b:a5:a0:52:9c:c1:8b:0a:69:51:bc:38:74:68:68: e6:8b:8a:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoJ/Gi7F5OUKygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTljYjMxYTktYWM0Mi00NThkLTk3NGMtMjlmMDYwYTYzZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9aWcQzTJJQwVT+afldI32i+Sf3HPzr4g6AX ibwCVtMqiPsh7IAZQEjtQ2IaW5yjN6RWVh+IjnR4gm/Y+s3+dn65t5OLuqz+MWgq FafCVJg2Yj9FPgCG3vrmRyvfsaIcVpU8EfUXQbwlG07Yky8wL1uJEd4moAPisTEU 8hfKapCyMOzIxXEu1cXEQuCkVCwKNSxo207pbqOYOM55oO6IewZ3gSZrUjrvIovb T4nzuunEJZwjnnSfVqfZlTQ33u6iLLmtprpx0k7KORaSSwovNarven5nkrCWScmm 2dOrLRM7Gz6faAfwi+GymEbk50icY6LgSVE2X2kEPeUPrE3tAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrsl4wF730ZlI7Qn2xT5ClQzqy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvZTViODkxODMtZDFiNy0z MmZjLThlZWMtNTE4OWI5ZjJhNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWMC8ajs2hYnGBRbmJ6stsIVP4NpTtQ8oEElQi6ac3RTaM4hGCHvQlE tiQCjrbDxq7ucXibDbhSgUenEpm0a/3XkFWqDRrYavAPBCjoJSUz4yRzd8eJ5Q4H SDI060m8Gpwq44VzzY6SaW1OIm5l7/woxfeDRsIJlM4IeLbJZU+burhZ6tpqG//A 7Sm3u2W1a/DMEsg7KS9we1xAcIf/7DhWdTcYh6bJR41c0kqDgqslMbB3sPj42gMG LO/F/IiU919ZSWbUlCM0pBqnU9KJv2UZ0T4be8S0jAEPMgPII/RMN1VKwbRheHCT g3RSH4uloFKcwYsKaVG8OHRoaOaLivc= -----END CERTIFICATE-----Generated at Sun Aug 24 06:43:34 2025 by rpki-client