$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa File: 5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa (raw, json) Hash identifier: V32TYbnuaJTWBLarR5x1x5wBIWGnXQN0Nk4U6misj+M= Subject key identifier: 79:65:0C:87:72:D5:40:A2:3C:52:3C:AA:F0:80:57:FD:75:16:FB:C8 Certificate issuer: /CN=5b2bf8b3-cffe-422e-a79e-1c1abbe251b2 Certificate serial: 010D0C9F4328584AD6F1BC737E7D03C4A4CD9880 Authority key identifier: 29:D8:D7:83:17:A1:72:24:E1:67:59:C0:C8:D7:77:C7:AF:F9:D6:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa Signing time: Wed 13 Aug 2025 05:30:49 +0000 ROA not before: Wed 13 Aug 2025 05:30:49 +0000 ROA not after: Tue 11 Nov 2025 06:30:49 +0000 asID: 7029 IP address blocks: 23.143.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:f1:bc:73:7e:7d:03:c4:a4:cd:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2bf8b3-cffe-422e-a79e-1c1abbe251b2 Validity Not Before: Aug 13 05:30:49 2025 GMT Not After : Nov 11 06:30:49 2025 GMT Subject: CN=1d3e8e8a-2f5d-4756-87b6-2abea1d3b8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:91:70:d2:90:97:02:51:8c:99:5a:fd:c8: 02:67:15:af:bf:b9:8f:0a:a3:62:f4:33:d3:23:df: 8e:14:84:ef:8e:69:90:3e:35:bb:e9:ab:7f:65:60: 7d:3a:53:e2:be:87:75:f0:12:9a:10:d8:63:0a:90: bb:43:94:bd:dc:f5:b5:e5:5f:ea:5f:3a:67:2a:03: fe:70:f2:40:9b:bc:cc:f2:d9:08:b0:bf:6c:9e:a9: 80:d1:fe:2f:2c:5b:52:08:45:fc:b3:9f:8d:5c:59: 73:58:fe:ae:66:77:a3:f3:ed:53:ed:63:ab:d0:1b: 48:ff:bc:ab:b3:4f:12:60:3f:0c:05:f6:1e:57:88: 9d:56:68:2c:f1:06:54:e5:c3:4c:c2:31:6f:98:8c: fa:35:ba:0c:c8:d1:39:81:ca:d8:0d:4b:9e:4c:3c: 19:ba:37:a1:ec:6d:dc:48:7d:77:46:3e:95:5f:07: 50:ca:37:68:32:91:f7:d4:27:cd:9f:a8:05:4e:7e: 9d:fc:10:b4:e0:66:4a:6f:f2:bd:cc:05:03:5d:e8: a8:2d:72:17:29:27:ce:c5:73:04:2c:4c:b1:e0:1a: a1:ee:45:c6:ec:84:be:37:07:25:43:14:b2:0f:12: db:c7:ff:09:3a:5d:e3:ff:64:96:3d:a2:ca:1e:26: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:65:0C:87:72:D5:40:A2:3C:52:3C:AA:F0:80:57:FD:75:16:FB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl X509v3 Authority Key Identifier: keyid:29:D8:D7:83:17:A1:72:24:E1:67:59:C0:C8:D7:77:C7:AF:F9:D6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer sbgp-ipAddrBlock: critical IPv4: 23.143.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:fc:dd:4e:a1:1d:3c:b1:7f:65:5f:2b:66:44:56:7c:0f:d3: 31:bb:7b:59:27:94:04:b3:68:3e:97:62:f4:60:70:8e:46:be: 80:b5:d0:1d:ee:ff:c1:5f:27:91:6e:71:30:24:cf:f8:a3:95: 9f:2a:f6:2d:ea:9e:c1:0a:6a:32:e8:f1:20:b6:fe:d7:e8:0a: 09:4d:5e:fa:4a:e1:98:33:10:82:e6:7f:d6:86:ee:44:1e:1d: 1a:60:98:d6:16:8f:20:f7:3f:5c:e0:98:44:a4:53:79:75:ee: ae:e6:92:62:ab:e4:4b:38:6f:d8:4b:39:77:e9:23:7a:eb:5a: 0d:c3:66:83:00:0f:89:6b:db:b9:c5:36:25:47:eb:cf:f2:0d: b7:91:06:e2:4a:02:ed:fb:08:70:7e:8b:3d:3d:be:1a:f3:e0: 82:e5:d4:53:7f:0a:6e:ef:54:82:6b:08:66:a5:20:6f:a6:72: 25:28:6c:86:67:3a:06:66:a5:81:cc:62:f8:d1:b3:92:5a:75: d5:18:3c:f7:3b:b2:7a:8f:c2:c0:9b:04:58:46:62:6b:57:21: 00:63:a6:47:19:b2:cb:23:13:5e:f8:05:c9:b6:11:3b:d0:8c: 30:87:99:8e:db:1c:a0:0f:f7:5a:aa:75:4e:1b:9b:8c:73:6a: 38:21:5f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErW8bxzfn0DxKTNmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWIyYmY4YjMtY2ZmZS00MjJlLWE3OWUtMWMxYWJiZTI1 MWIyMB4XDTI1MDgxMzA1MzA0OVoXDTI1MTExMTA2MzA0OVowLzEtMCsGA1UEAxMk MWQzZThlOGEtMmY1ZC00NzU2LTg3YjYtMmFiZWExZDNiOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH+RcNKQlwJRjJla/cgCZxWvv7mPCqNi9DPT I9+OFITvjmmQPjW76at/ZWB9OlPivod18BKaENhjCpC7Q5S93PW15V/qXzpnKgP+ cPJAm7zM8tkIsL9snqmA0f4vLFtSCEX8s5+NXFlzWP6uZnej8+1T7WOr0BtI/7yr s08SYD8MBfYeV4idVmgs8QZU5cNMwjFvmIz6NboMyNE5gcrYDUueTDwZujeh7G3c SH13Rj6VXwdQyjdoMpH31CfNn6gFTn6d/BC04GZKb/K9zAUDXeioLXIXKSfOxXME LEyx4Bqh7kXG7IS+NwclQxSyDxLbx/8JOl3j/2SWPaLKHiY+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHllDIdy1UCiPFI8qvCAV/11FvvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjJi ZjhiMy1jZmZlLTQyMmUtYTc5ZS0xYzFhYmJlMjUxYjIvNWEwNGNjNzgtNmRmNC0z YjYxLWJjYTUtZmI4MWIzYTgzOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWIyYmY4YjMtY2ZmZS00MjJlLWE3 OWUtMWMxYWJiZTI1MWIyLzViMmJmOGIzLWNmZmUtNDIyZS1hNzllLTFjMWFiYmUy NTFiMi5jcmwwHwYDVR0jBBgwFoAUKdjXgxehciThZ1nAyNd3x6/51nMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YjJiZjhiMy1jZmZlLTQyMmUtYTc5ZS0xYzFh YmJlMjUxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT83U6hHTyxf2VfK2ZEVnwP0zG7e1knlASzaD6XYvRgcI5GvoC10B3u /8FfJ5FucTAkz/ijlZ8q9i3qnsEKajLo8SC2/tfoCglNXvpK4ZgzEILmf9aG7kQe HRpgmNYWjyD3P1zgmESkU3l17q7mkmKr5Es4b9hLOXfpI3rrWg3DZoMAD4lr27nF NiVH68/yDbeRBuJKAu37CHB+iz09vhrz4ILl1FN/Cm7vVIJrCGalIG+mciUobIZn OgZmpYHMYvjRs5JaddUYPPc7snqPwsCbBFhGYmtXIQBjpkcZsssjE174Bcm2ETvQ jDCHmY7bHKAP91qqdU4bm4xzajghXzA= -----END CERTIFICATE-----Generated at Thu Aug 21 11:03:43 2025 by rpki-client