$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa File: d79abeda-0936-3a13-9b49-693cf7dce834.roa (raw, json) Hash identifier: TA1irsRFL0zImlxgylbUcC3jyMvpYP+UooLAyD1zaHc= Subject key identifier: 24:37:FC:85:E6:77:46:4F:ED:39:A4:C8:AA:05:72:50:4E:04:2D:36 Certificate issuer: /CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Certificate serial: 010D0C9F4328584B233181A78C0AE3F841E5AA40 Authority key identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 22679 IP address blocks: 23.172.152.0/24 maxlen: 24 2602:f971::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:81:a7:8c:0a:e3:f8:41:e5:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=2ac651a6-aec0-4194-9ec2-418f4c594f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:00:ee:fa:13:68:38:de:14:cd:2d:7c:c3: a4:d0:bb:20:e4:3e:d2:b8:ef:0a:ac:e6:05:d8:f6: 0c:29:60:01:57:89:aa:92:4f:02:59:14:bd:ff:24: 92:63:eb:1c:d1:dc:50:92:be:a4:7f:43:76:f8:6f: b0:ab:7b:5a:24:c9:23:69:52:10:b9:f7:0e:d3:52: a6:c2:18:b2:eb:69:e8:bf:3d:03:56:ab:72:59:7c: 46:ae:e5:2e:9c:33:49:95:e4:4d:d2:41:3f:6f:7a: 40:74:b7:3a:f3:25:7e:4d:07:14:82:8e:16:d4:76: dd:5b:30:72:07:5e:a0:26:d2:72:32:b6:53:a0:66: 7e:5b:5c:40:01:c0:72:d5:35:e3:6c:cb:42:b6:76: 7a:af:e9:63:66:92:4e:19:63:b8:53:0f:57:00:d2: cc:e2:c6:bd:ac:d1:60:96:37:ae:b4:df:94:5d:96: ea:da:4d:7b:62:15:a1:d0:03:b8:66:94:ec:cc:a3: 10:3e:38:c6:74:f0:20:d1:23:b1:a4:bc:f9:be:02: 76:99:17:4f:09:a3:c4:04:99:7f:5e:36:20:7f:80: 01:9f:17:55:15:a9:56:f8:e9:cd:82:32:7a:5e:41: 0e:02:73:eb:1c:31:5a:c3:f2:78:80:5a:07:dc:a1: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:37:FC:85:E6:77:46:4F:ED:39:A4:C8:AA:05:72:50:4E:04:2D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl X509v3 Authority Key Identifier: keyid:DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer sbgp-ipAddrBlock: critical IPv4: 23.172.152.0/24 IPv6: 2602:f971::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:06:08:8d:d5:bb:8d:46:31:59:86:be:3b:cf:6a:4a:5a:63: 72:d8:00:40:82:06:f8:38:de:eb:b3:cb:5b:80:3a:b7:6c:80: c8:4d:73:f9:5a:19:20:b1:14:ef:10:00:a7:42:37:c5:52:83: 9e:0d:79:9b:de:20:0b:79:a0:fe:82:0f:b3:7a:4d:1d:f8:bb: a1:59:fe:18:86:92:9f:b5:7a:f3:76:b3:f2:82:d6:57:a3:1f: 10:d4:50:65:32:50:ce:48:65:d4:3c:41:c5:7d:ab:e1:9d:3a: 71:ca:56:33:35:a5:79:c9:9c:d4:eb:c6:ec:dd:d4:c6:ec:36: 65:b3:46:0d:ae:db:5b:1d:53:83:21:d2:0e:01:f3:1a:e8:a1: f3:fc:c6:ea:5f:58:65:1a:2f:8c:66:25:85:18:f8:cf:53:16: 57:fe:0a:3e:12:4b:43:7f:f5:61:f3:77:96:8d:63:3c:8a:93: aa:c6:cf:28:32:de:1c:53:07:e2:6b:6c:cf:b8:82:62:35:52: 36:d3:b5:3c:50:04:9f:24:5b:cc:4c:8f:af:26:81:78:ca:81: 54:28:a7:30:31:b6:df:3f:83:b5:83:8d:1a:e3:6c:ac:d9:1f: 86:f2:fd:42:00:50:33:34:e4:63:5e:ac:35:ad:26:be:ab:b8: fc:29:4b:90 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsjMYGnjArj+EHlqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMxYjIyYTUtZjVlMi00MGQxLTg4MjctYTBjZjhiODU3 MmE1MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MmFjNjUxYTYtYWVjMC00MTk0LTllYzItNDE4ZjRjNTk0ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtQA7voTaDjeFM0tfMOk0Lsg5D7SuO8KrOYF 2PYMKWABV4mqkk8CWRS9/ySSY+sc0dxQkr6kf0N2+G+wq3taJMkjaVIQufcO01Km whiy62novz0DVqtyWXxGruUunDNJleRN0kE/b3pAdLc68yV+TQcUgo4W1HbdWzBy B16gJtJyMrZToGZ+W1xAAcBy1TXjbMtCtnZ6r+ljZpJOGWO4Uw9XANLM4sa9rNFg ljeutN+UXZbq2k17YhWh0AO4ZpTszKMQPjjGdPAg0SOxpLz5vgJ2mRdPCaPEBJl/ XjYgf4ABnxdVFalW+OnNgjJ6XkEOAnPrHDFaw/J4gFoH3KH7RwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCQ3/IXmd0ZP7TmkyKoFclBOBC02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzFi MjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4NTcyYTUvZDc5YWJlZGEtMDkzNi0z YTEzLTliNDktNjkzY2Y3ZGNlODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmMxYjIyYTUtZjVlMi00MGQxLTg4 MjctYTBjZjhiODU3MmE1L2JjMWIyMmE1LWY1ZTItNDBkMS04ODI3LWEwY2Y4Yjg1 NzJhNS5jcmwwHwYDVR0jBBgwFoAU3evDgXW+j7IrQNewmG/mTwVGOFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNm OGI4NTcyYTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6yYMA4E AgACMAgDBgQmAvlxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnBgiN1buNRjFZhr47z2pKWmNy2ABAggb4 ON7rs8tbgDq3bIDITXP5WhkgsRTvEACnQjfFUoOeDXmb3iALeaD+gg+zek0d+Luh Wf4YhpKftXrzdrPygtZXox8Q1FBlMlDOSGXUPEHFfavhnTpxylYzNaV5yZzU68bs 3dTG7DZls0YNrttbHVODIdIOAfMa6KHz/MbqX1hlGi+MZiWFGPjPUxZX/go+EktD f/Vh83eWjWM8ipOqxs8oMt4cUwfia2zPuIJiNVI207U8UASfJFvMTI+vJoF4yoFU KKcwMbbfP4O1g40a42ys2R+G8v1CAFAzNORjXqw1rSa+q7j8KUuQ -----END CERTIFICATE-----Generated at Wed Sep 17 20:32:37 2025 by rpki-client