$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa File: 7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa (raw, json) Hash identifier: 3AIcqXqi7XeMBcN2Cqtjg9cd5YH8OScfN1l0LU1Vui8= Subject key identifier: 12:55:84:32:D0:F7:89:52:AD:38:8C:C5:27:1C:ED:87:28:84:40:41 Certificate issuer: /CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Certificate serial: 010D0C9F4328584ACCA691F8ABF1B93ACD752A80 Authority key identifier: 85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 214483 IP address blocks: 23.138.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:91:f8:ab:f1:b9:3a:cd:75:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=a5625f9a-393d-4867-9024-4d33d1952fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b1:97:64:c2:f0:e9:b1:10:88:e5:0e:2c:4b: 28:7d:23:62:20:29:05:39:2c:5d:ba:91:66:4d:a3: 93:f3:fd:55:1a:fd:05:2a:58:2a:76:72:83:2b:b0: df:e2:21:a3:1c:2b:92:80:69:0c:67:f8:e7:18:1b: 43:68:b9:77:af:28:44:e6:8a:6c:cc:76:cb:46:62: bc:50:b9:28:ec:17:9d:20:89:17:9f:98:c9:42:0c: be:9f:a3:ff:2e:12:f7:2b:67:77:fc:29:e6:1f:83: 59:35:3b:48:60:cd:74:3d:70:c5:9e:1c:10:b2:f3: 0d:f0:c1:db:67:1f:d6:14:7e:8e:d6:90:72:f8:bd: f1:c7:9b:ea:c6:fc:c5:23:20:5a:31:ea:0c:70:43: ce:ac:29:97:20:a1:6f:6f:3e:5d:73:e1:f6:e5:2f: 72:d1:76:b1:33:57:16:94:f7:b4:22:7c:89:37:ef: b7:e9:e5:62:1f:9a:01:60:8e:66:59:33:69:e5:e4: c7:48:67:ad:3b:ef:f7:15:fd:04:5a:14:de:5e:04: 32:9a:90:b2:39:88:74:6d:32:38:6a:df:54:b9:23: 9b:4b:24:d2:8c:27:41:d6:73:a0:c2:bc:7c:89:29: 17:87:1e:cb:31:d5:c7:d6:d2:96:8e:f1:bf:09:bd: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:84:32:D0:F7:89:52:AD:38:8C:C5:27:1C:ED:87:28:84:40:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.crl X509v3 Authority Key Identifier: keyid:85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer sbgp-ipAddrBlock: critical IPv4: 23.138.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:82:4e:59:8c:bc:9f:a2:74:f2:b3:37:9a:d0:34:6b:f8:0a: 6b:79:ce:15:b3:9f:52:b6:6f:2f:79:73:45:d2:e7:ba:11:21: 1c:aa:d9:a9:ee:2f:dc:a7:00:55:67:35:f0:4b:62:46:43:ab: eb:6c:48:27:44:95:5c:ee:4f:79:4c:1c:e1:e5:6d:fe:72:9c: e3:72:d0:59:0c:c9:3d:5f:a4:e3:a0:a3:1e:bf:77:a0:2a:1c: 3e:45:3d:84:92:5d:42:22:f8:00:6e:4a:b6:fe:ab:ca:0a:c7: a7:2c:fd:03:4f:01:f5:73:91:c4:31:f7:ca:9a:9d:41:ca:cc: 7e:5d:25:3e:1b:18:f3:87:e2:57:5e:5f:e4:31:a1:88:c7:f3: c0:b8:c0:be:44:c7:11:7c:67:80:1c:55:85:e5:e3:de:a3:23: a4:a8:47:aa:1a:9b:47:02:ae:c0:c0:64:21:97:29:06:d9:68: ce:c3:11:db:af:26:16:11:5d:1b:c1:9d:d0:35:dc:ca:c9:c8: 3d:79:35:b1:80:f0:61:ad:70:07:30:49:0e:0c:50:8c:38:2a: 7a:d7:54:69:9c:96:4b:8d:a4:ce:5e:8f:2b:69:1d:58:52:8f: 8e:1c:b2:48:ab:5c:f4:3c:23:a8:94:bb:e2:5e:67:c2:1f:ff: ec:91:71:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMppH4q/G5Os11KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjN2U0ODQtNjRlNy00NmNiLWExNWMtMzYwYTYwYjM2 MmQ0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YTU2MjVmOWEtMzkzZC00ODY3LTkwMjQtNGQzM2QxOTUyZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rGXZMLw6bEQiOUOLEsofSNiICkFOSxdupFm TaOT8/1VGv0FKlgqdnKDK7Df4iGjHCuSgGkMZ/jnGBtDaLl3ryhE5opszHbLRmK8 ULko7BedIIkXn5jJQgy+n6P/LhL3K2d3/CnmH4NZNTtIYM10PXDFnhwQsvMN8MHb Zx/WFH6O1pBy+L3xx5vqxvzFIyBaMeoMcEPOrCmXIKFvbz5dc+H25S9y0XaxM1cW lPe0InyJN++36eViH5oBYI5mWTNp5eTHSGetO+/3Ff0EWhTeXgQympCyOYh0bTI4 at9UuSObSyTSjCdB1nOgwrx8iSkXhx7LMdXH1tKWjvG/Cb1YCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJVhDLQ94lSrTiMxScc7YcohEBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM3 ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBhNjBiMzYyZDQvNzcyMmI2ZmEtYmYxMy0z NDkyLTlmNDgtNmFjNmFlOTc2Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjN2U0ODQtNjRlNy00NmNiLWEx NWMtMzYwYTYwYjM2MmQ0LzJiYzdlNDg0LTY0ZTctNDZjYi1hMTVjLTM2MGE2MGIz NjJkNC5jcmwwHwYDVR0jBBgwFoAUhQJ9iFXNUhQLgB0LkveCdMAqWk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM3ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBh NjBiMzYyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4r8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuCTlmMvJ+idPKzN5rQNGv4Cmt5zhWzn1K2by95c0XS57oRIRyq2anu L9ynAFVnNfBLYkZDq+tsSCdElVzuT3lMHOHlbf5ynONy0FkMyT1fpOOgox6/d6Aq HD5FPYSSXUIi+ABuSrb+q8oKx6cs/QNPAfVzkcQx98qanUHKzH5dJT4bGPOH4lde X+QxoYjH88C4wL5ExxF8Z4AcVYXl496jI6SoR6oam0cCrsDAZCGXKQbZaM7DEduv JhYRXRvBndA13MrJyD15NbGA8GGtcAcwSQ4MUIw4KnrXVGmclkuNpM5ejytpHVhS j44cskirXPQ8I6iUu+JeZ8If/+yRcaI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:51:49 2025 by rpki-client