$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa File: 9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa (raw, json) Hash identifier: 419FoXKjynnRTpwqRkyXG+Ey4nDYGvrJod9e7fZl/5Y= Subject key identifier: 56:AC:F6:56:84:7D:AD:DE:7C:40:04:BC:38:C8:5B:B2:56:5C:49:72 Certificate issuer: /CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b Certificate serial: 010D0C9F4328584AF52153A2DEE10EDCE4AE5030 Authority key identifier: E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 63023 IP address blocks: 23.168.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:53:a2:de:e1:0e:dc:e4:ae:50:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=0005a349-6bdd-4e2e-86e6-9fe59ec36579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:8f:97:a5:1e:6b:3f:dc:0a:03:9d:f8:45: f0:74:29:40:f1:d3:ee:28:14:0e:1c:7c:fc:74:40: d8:2c:a5:68:40:a7:f3:51:99:56:8b:e9:91:c1:57: fc:4c:a3:df:a3:e2:0d:9a:ce:5c:b7:ce:8e:c8:9f: 9c:11:9f:3e:1c:c8:71:d1:66:8a:69:c0:d6:9d:57: 21:f5:d9:e6:81:29:20:b4:4e:bc:17:9f:8d:12:c9: eb:79:de:94:1d:45:dc:7c:21:f0:20:ab:bc:0b:2f: 4d:b6:f0:79:c1:07:23:ab:ad:be:fc:00:a5:0d:dd: d3:c0:6e:83:7c:7d:8c:74:53:8d:19:ba:9a:d6:9b: 4b:5f:c0:93:50:14:a8:84:f3:67:fa:b9:01:54:d8: 85:d5:39:d2:e9:74:87:61:5f:3b:37:c7:7f:a4:e8: ef:fa:35:da:84:5b:6e:56:00:32:f2:57:ac:05:a7: 72:6f:60:bd:33:47:d9:30:63:c7:00:f9:24:b8:87: 1d:fd:96:fa:3a:3b:37:71:23:44:6b:6b:49:24:de: 73:07:19:75:f0:b2:01:79:64:0f:9e:2d:d9:e2:ff: 17:ff:39:ab:61:b1:8b:7a:bb:84:05:12:11:be:43: 94:c4:d6:ea:9d:ce:c7:8c:df:7d:bc:69:de:1e:63: 17:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AC:F6:56:84:7D:AD:DE:7C:40:04:BC:38:C8:5B:B2:56:5C:49:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl X509v3 Authority Key Identifier: keyid:E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer sbgp-ipAddrBlock: critical IPv4: 23.168.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:9b:ee:42:4e:60:c1:d2:1f:75:2f:2b:1d:8a:4c:c7:28:15: 9c:49:b0:88:74:16:f8:4f:bc:d6:b8:72:03:bc:c3:97:fb:7a: 9e:71:3b:02:9b:b5:cf:46:a7:b0:78:9c:f2:f1:6c:86:71:c1: 27:97:17:ac:c0:8a:3c:20:b3:2a:79:b3:05:69:87:df:1b:e6: 64:8e:ee:a4:f5:6b:3c:ed:c5:c8:6f:a8:19:44:31:dd:5d:d1: be:bb:bf:7a:41:19:b3:9a:10:0d:2a:dd:ac:81:ef:f6:29:4e: a4:53:c8:54:99:3d:4d:a3:0f:66:37:59:c7:33:f9:74:e7:61: 25:b3:4e:65:40:89:3f:50:3e:f2:ac:91:ff:0a:f5:bc:01:e0: fd:13:f9:2a:2e:84:03:53:10:8b:d1:6a:19:6d:5b:8c:9f:94: 41:aa:dc:af:be:82:d7:b5:9b:6a:61:12:ee:e2:00:02:e3:9f: 53:a8:c8:93:10:d6:e0:ae:f5:b5:9a:7e:78:19:18:d4:52:22: 46:e1:27:6e:2e:e5:4c:39:8f:eb:f2:6a:b2:66:f9:e0:50:08: 6d:42:40:c3:2c:fa:27:97:02:d1:8a:2f:bd:83:50:28:ce:47: 09:40:38:a5:1d:87:5f:8d:6c:d0:3c:a2:ee:d9:e9:1b:9d:f7: 5d:80:88:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVOi3uEO3OSuUDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3ZmYzZDMtMmYxOS00M2E0LWEzNmQtZWNlMWVlMDUw NTViMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDAwNWEzNDktNmJkZC00ZTJlLTg2ZTYtOWZlNTllYzM2NTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPuPl6Ueaz/cCgOd+EXwdClA8dPuKBQOHHz8 dEDYLKVoQKfzUZlWi+mRwVf8TKPfo+INms5ct86OyJ+cEZ8+HMhx0WaKacDWnVch 9dnmgSkgtE68F5+NEsnred6UHUXcfCHwIKu8Cy9NtvB5wQcjq62+/AClDd3TwG6D fH2MdFONGbqa1ptLX8CTUBSohPNn+rkBVNiF1TnS6XSHYV87N8d/pOjv+jXahFtu VgAy8lesBadyb2C9M0fZMGPHAPkkuIcd/Zb6Ojs3cSNEa2tJJN5zBxl18LIBeWQP ni3Z4v8X/zmrYbGLeruEBRIRvkOUxNbqnc7HjN99vGneHmMXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFas9laEfa3efEAEvDjIW7JWXElyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm ZjNkMy0yZjE5LTQzYTQtYTM2ZC1lY2UxZWUwNTA1NWIvOTIyMWM5YjItMjFlNS0z NGU1LWFlOTAtZTVhMDFkY2NlZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZmYzZDMtMmYxOS00M2E0LWEz NmQtZWNlMWVlMDUwNTViLzRhN2ZmM2QzLTJmMTktNDNhNC1hMzZkLWVjZTFlZTA1 MDU1Yi5jcmwwHwYDVR0jBBgwFoAU56FueZOtHDWx7mQtJb5nXQKd7XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTdmZjNkMy0yZjE5LTQzYTQtYTM2ZC1lY2Ux ZWUwNTA1NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCb7kJOYMHSH3UvKx2KTMcoFZxJsIh0FvhPvNa4cgO8w5f7ep5xOwKb tc9Gp7B4nPLxbIZxwSeXF6zAijwgsyp5swVph98b5mSO7qT1azztxchvqBlEMd1d 0b67v3pBGbOaEA0q3ayB7/YpTqRTyFSZPU2jD2Y3Wccz+XTnYSWzTmVAiT9QPvKs kf8K9bwB4P0T+SouhANTEIvRahltW4yflEGq3K++gte1m2phEu7iAALjn1OoyJMQ 1uCu9bWafngZGNRSIkbhJ24u5Uw5j+vyarJm+eBQCG1CQMMs+ieXAtGKL72DUCjO RwlAOKUdh1+NbNA8ou7Z6Rud912AiGo= -----END CERTIFICATE-----Generated at Sun Sep 7 12:33:38 2025 by rpki-client