$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa File: d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa (raw, json) Hash identifier: 3vTb6RG5Tf1FZPutDkMMFATR/BupY+HP+oub/nr4Wtc= Subject key identifier: 1B:29:01:AD:9E:11:89:92:62:5B:0A:48:31:97:73:F1:6F:57:E7:E8 Certificate issuer: /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3 Certificate serial: 010D0C9F4328584A5E606095A59BFB9304918C40 Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 394256 IP address blocks: 23.173.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:60:95:a5:9b:fb:93:04:91:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=adaebe4c-9e8a-4786-8437-bd8669b41980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:8f:53:0b:45:c7:1d:c8:d3:9b:f1:40:c9: c5:8f:4a:34:43:0c:63:82:30:20:4d:b8:2e:cd:c3: 4d:00:61:61:c6:77:dd:41:64:1d:54:0b:ac:8f:35: 3b:f7:51:e5:61:b0:11:01:5c:31:a2:53:ef:a8:65: 7e:22:cc:76:b1:60:66:b8:a1:7d:37:27:fa:a7:4b: 3c:e9:9f:f3:00:a5:44:76:bf:f5:26:ae:12:3e:b3: 28:74:f2:d6:41:14:86:0e:27:85:13:f1:32:76:97: 17:99:59:90:41:ec:76:56:c9:8f:83:c5:a3:47:1c: 20:73:0f:86:a9:bf:fe:e2:7a:30:25:1b:a0:80:91: ca:ae:a7:9b:f3:1f:e8:d6:84:82:7a:e7:31:4b:fa: c5:b2:2a:3d:9c:6f:47:c1:e0:85:27:51:e1:32:ef: 02:f9:dc:ce:a9:53:85:63:41:fc:25:a8:83:af:d9: 57:5f:82:64:15:28:b1:87:44:4d:b8:3d:fd:6c:5e: e9:c1:e2:e8:04:78:6f:6f:9a:35:81:d1:74:ca:63: f7:2c:23:45:88:44:2c:f8:f4:6e:5a:08:82:c4:0c: 1f:37:a5:95:0e:77:d4:0e:d5:05:06:f3:95:27:55: ff:dd:bc:2d:6c:ba:1b:d0:b8:57:d4:70:55:f9:3f: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:29:01:AD:9E:11:89:92:62:5B:0A:48:31:97:73:F1:6F:57:E7:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl X509v3 Authority Key Identifier: keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer sbgp-ipAddrBlock: critical IPv4: 23.173.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a9:29:00:23:35:9f:2c:c5:50:d5:d7:bb:70:e2:16:55:76: e9:ee:04:a5:e6:1d:1f:e8:5c:1b:00:3e:a4:48:c1:a5:5a:e6: d6:8d:84:07:15:4d:6f:f0:ec:61:25:80:c9:1d:cd:a1:4e:af: 7a:be:d4:70:2f:6c:ec:8f:84:e8:47:4d:78:29:b9:d5:85:1e: 02:55:39:0e:6e:92:c9:fd:fa:7c:62:17:89:29:b7:c1:bd:e8: 6a:77:c5:e1:f4:55:57:4f:95:aa:42:3c:59:76:ba:d8:3f:21: c3:02:82:33:9c:33:f4:ff:6d:88:1e:ec:d2:93:e1:0d:53:aa: 1c:45:88:fd:7e:e1:de:d1:7b:14:dc:ca:5e:e0:f9:e8:28:1b: eb:0d:a4:b6:56:29:e6:c7:79:b0:2f:a3:3e:5e:5d:95:77:02: d7:6c:fb:61:ad:64:3e:b1:a5:2d:ec:13:3b:0a:f4:30:5d:72: ed:91:c4:57:b3:42:1f:d1:dc:b4:4b:34:ea:67:b1:73:46:01: 7d:55:12:cd:ff:8c:8a:8d:11:54:25:a9:b9:03:8b:8a:7e:38: 5d:7c:e2:4c:79:99:f0:f4:22:40:55:a7:1e:36:c1:cb:3b:ad: 53:fa:20:ea:e1:bb:c8:ea:4e:d8:29:30:31:bf:e5:fd:89:bf: 1f:50:fb:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGCVpZv7kwSRjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRmNmRlNzQtOWFlZC00NzRkLWFlZDItYmE4YWIxM2E3 Y2YzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YWRhZWJlNGMtOWU4YS00Nzg2LTg0MzctYmQ4NjY5YjQxOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6ePUwtFxx3I05vxQMnFj0o0QwxjgjAgTbgu zcNNAGFhxnfdQWQdVAusjzU791HlYbARAVwxolPvqGV+Isx2sWBmuKF9Nyf6p0s8 6Z/zAKVEdr/1Jq4SPrModPLWQRSGDieFE/EydpcXmVmQQex2VsmPg8WjRxwgcw+G qb/+4nowJRuggJHKrqeb8x/o1oSCeucxS/rFsio9nG9HweCFJ1HhMu8C+dzOqVOF Y0H8JaiDr9lXX4JkFSixh0RNuD39bF7pweLoBHhvb5o1gdF0ymP3LCNFiEQs+PRu WgiCxAwfN6WVDnfUDtUFBvOVJ1X/3bwtbLob0LhX1HBV+T/ggQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBspAa2eEYmSYlsKSDGXc/FvV+foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGY2 ZGU3NC05YWVkLTQ3NGQtYWVkMi1iYThhYjEzYTdjZjMvZDBjOWRkZmItNzFiOC0z ZjFiLWE4ZDktNWJlZGVkZDUzMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRmNmRlNzQtOWFlZC00NzRkLWFl ZDItYmE4YWIxM2E3Y2YzLzJkZjZkZTc0LTlhZWQtNDc0ZC1hZWQyLWJhOGFiMTNh N2NmMy5jcmwwHwYDVR0jBBgwFoAUOHbPTq59AhW/BLdReMMbLZv9vOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGY2ZGU3NC05YWVkLTQ3NGQtYWVkMi1iYThh YjEzYTdjZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCpKQAjNZ8sxVDV17tw4hZVdunuBKXmHR/oXBsAPqRIwaVa5taNhAcV TW/w7GElgMkdzaFOr3q+1HAvbOyPhOhHTXgpudWFHgJVOQ5uksn9+nxiF4kpt8G9 6Gp3xeH0VVdPlapCPFl2utg/IcMCgjOcM/T/bYge7NKT4Q1TqhxFiP1+4d7RexTc yl7g+egoG+sNpLZWKebHebAvoz5eXZV3Atds+2GtZD6xpS3sEzsK9DBdcu2RxFez Qh/R3LRLNOpnsXNGAX1VEs3/jIqNEVQlqbkDi4p+OF184kx5mfD0IkBVpx42wcs7 rVP6IOrhu8jqTtgpMDG/5f2Jvx9Q+7Y= -----END CERTIFICATE-----Generated at Fri Jul 25 21:37:49 2025 by rpki-client