$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/10dafcae-2808-3d23-96e1-f7fd650705f9.roa File: 10dafcae-2808-3d23-96e1-f7fd650705f9.roa (raw, json) Hash identifier: qXpGEKiVJR9f7Ve4PC1o/ZrVJo8Kt4Oo0j0bbviBuxg= Subject key identifier: CF:85:1A:E7:62:BB:83:8F:CA:7D:D1:6E:63:9A:EE:D5:B6:89:23:C5 Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Certificate serial: 010D0C9F4328584A9E96168836B37C1E95140F40 Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/10dafcae-2808-3d23-96e1-f7fd650705f9.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 32595 IP address blocks: 23.129.68.0/24 maxlen: 24 2602:f7a7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:16:88:36:b3:7c:1e:95:14:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=7720b0f7-2e2a-4db1-8953-6884de4d61dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:55:b1:41:b9:83:06:dd:63:17:80:50:e6: c3:31:9f:95:fc:18:14:a6:c5:7c:d1:c0:42:06:26: 07:54:f2:f2:ee:fb:8a:da:b8:83:dd:9b:0d:19:e8: 2d:7a:ca:89:06:cb:4d:16:88:bf:1d:a8:ec:db:3f: 5e:6f:bb:bd:03:c9:c1:d7:ea:a7:4d:6a:6d:93:1d: ac:22:5d:5c:77:f3:26:25:76:f8:21:59:a0:ef:d7: 14:5d:42:18:74:d0:5a:b8:91:a9:4d:55:b0:64:44: 87:55:6c:d9:a2:fb:04:b3:26:b2:e8:b9:04:c4:2d: 8a:66:41:bf:6b:92:30:9c:75:68:14:92:52:8f:82: ad:c7:e5:e7:26:a2:3b:35:f2:44:9f:cb:c8:5f:ca: 79:30:9e:e4:e0:22:24:81:cd:52:62:ed:bf:d9:e4: ab:97:6b:d2:06:7a:d1:85:13:9f:f3:9a:2a:12:30: fb:64:88:5c:60:3e:2e:7c:b3:2b:f6:e1:d6:65:38: 4f:af:c1:12:86:c1:24:15:a5:fe:4f:74:a3:b5:d3: db:e7:c9:50:75:18:b9:fb:0c:73:39:07:22:4b:3e: 88:e8:1d:ca:9d:8e:6f:f1:ca:ff:c9:ad:ba:4c:37: 8a:4c:ef:4c:5a:9e:17:37:29:64:53:f2:c6:75:a3: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:85:1A:E7:62:BB:83:8F:CA:7D:D1:6E:63:9A:EE:D5:B6:89:23:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/10dafcae-2808-3d23-96e1-f7fd650705f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl X509v3 Authority Key Identifier: keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer sbgp-ipAddrBlock: critical IPv4: 23.129.68.0/24 IPv6: 2602:f7a7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ae:85:29:59:a9:24:57:8c:d6:b7:0a:0a:86:ea:c9:d0:69: 15:6c:5d:5e:26:f2:74:17:b1:ec:9b:15:dc:08:90:54:7a:6d: 3d:63:63:ba:5b:42:d1:e4:3c:9d:d5:e9:7e:95:ef:be:75:7b: 82:0a:d4:fb:71:f1:39:31:ed:94:a5:96:97:54:a0:1d:46:14: 59:c2:6a:9f:80:dd:df:4d:0c:ec:16:be:bd:e0:b5:56:6a:63: 7e:0a:64:d1:a8:7b:83:42:e8:34:05:04:56:22:26:5b:db:84: 93:9b:b3:1a:f7:7d:1a:93:d0:65:6a:b7:64:19:d9:1c:ac:71: 38:23:fd:82:d8:22:7a:c7:9c:40:35:f5:0d:c3:47:67:18:22: 6c:4b:56:2e:f5:87:6b:3b:c2:8a:32:dd:7f:7f:a5:76:81:b5: 66:26:8e:11:1a:a5:c5:66:79:1d:fe:14:2e:11:50:3e:06:a9: d9:ab:68:55:f3:5a:b7:14:f2:3b:f1:ed:72:9f:df:9b:04:30: 83:bc:b3:61:d0:8c:97:85:31:a0:29:f2:11:12:76:dd:e3:e6: 3a:96:eb:c5:5b:65:bc:6e:1b:e9:42:e9:ab:38:93:52:e7:94: 6d:36:44:4b:03:f9:8d:98:cf:4e:30:64:4d:e3:8f:bb:21:2f: 67:60:5a:21 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqelhaINrN8HpUUD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0 NmNjMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NzcyMGIwZjctMmUyYS00ZGIxLTg5NTMtNjg4NGRlNGQ2MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijFVsUG5gwbdYxeAUObDMZ+V/BgUpsV80cBC BiYHVPLy7vuK2riD3ZsNGegtesqJBstNFoi/Hajs2z9eb7u9A8nB1+qnTWptkx2s Il1cd/MmJXb4IVmg79cUXUIYdNBauJGpTVWwZESHVWzZovsEsyay6LkExC2KZkG/ a5IwnHVoFJJSj4Ktx+XnJqI7NfJEn8vIX8p5MJ7k4CIkgc1SYu2/2eSrl2vSBnrR hROf85oqEjD7ZIhcYD4ufLMr9uHWZThPr8EShsEkFaX+T3SjtdPb58lQdRi5+wxz OQciSz6I6B3KnY5v8cr/ya26TDeKTO9MWp4XNylkU/LGdaOWJwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFM+FGudiu4OPyn3RbmOa7tW2iSPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvMTBkYWZjYWUtMjgwOC0z ZDIzLTk2ZTEtZjdmZDY1MDcwNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5 NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm YWMzOTQ2Y2MuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4FEMA4E AgACMAgDBgAmAvenADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEroUpWakkV4zWtwoKhurJ0GkVbF1eJvJ0 F7HsmxXcCJBUem09Y2O6W0LR5Dyd1el+le++dXuCCtT7cfE5Me2UpZaXVKAdRhRZ wmqfgN3fTQzsFr694LVWamN+CmTRqHuDQug0BQRWIiZb24STm7Ma930ak9Blardk GdkcrHE4I/2C2CJ6x5xANfUNw0dnGCJsS1Yu9YdrO8KKMt1/f6V2gbVmJo4RGqXF Znkd/hQuEVA+BqnZq2hV81q3FPI78e1yn9+bBDCDvLNh0IyXhTGgKfIREnbd4+Y6 luvFW2W8bhvpQumrOJNS55RtNkRLA/mNmM9OMGRN44+7IS9nYFoh -----END CERTIFICATE-----Generated at Sat Jul 26 11:34:51 2025 by rpki-client