$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa File: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (raw, json) Hash identifier: 2FE+W0Zho1ltZGVo0cTR7h/f1XgZ5XAGjCpLIqwg5VE= Subject key identifier: 3D:10:06:E7:4D:30:CF:AD:78:FE:E6:2C:BA:37:10:CF:6A:EA:9E:74 Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Certificate serial: 010D0C9F4328584AD3A0F09A61BDD4951077FC80 Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 397939 IP address blocks: 23.145.112.0/24 maxlen: 24 2605:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f0:9a:61:bd:d4:95:10:77:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=f26581dd-49b2-45ee-8ff5-3ad555830bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:0a:9f:94:0a:e3:4f:17:f8:b5:b8:f3:e5: c4:30:fa:c7:3f:e0:51:c5:b6:1b:db:5b:37:09:69: 1e:31:02:f6:7f:0d:e9:03:ca:bc:dc:82:11:5a:ee: 24:a2:94:12:7c:1b:89:b4:e3:01:7b:e1:00:bb:a6: f8:22:b9:0e:20:f3:0f:b1:a9:3a:7d:e1:c9:0c:1c: f8:38:d7:9f:49:31:82:80:74:f6:72:d5:61:df:c1: ad:70:93:25:51:73:68:26:05:d1:93:9a:81:5a:1a: a1:98:b4:70:01:47:65:3b:b6:2f:50:14:82:98:34: e4:11:99:98:18:f5:b9:50:52:b1:36:aa:9e:e6:72: 68:3c:3e:65:a5:8b:8d:8b:74:4f:81:25:16:52:5c: 69:ed:d4:6a:52:b8:e6:c3:d0:ec:99:d5:42:6c:bc: da:06:13:b9:c4:f2:f8:c2:a6:11:b8:02:d3:4f:34: f3:2a:ad:15:31:5a:a1:2f:a1:58:ae:3d:62:70:64: 73:6e:f3:bf:f4:c0:6d:bc:d7:b8:b1:3e:d2:ca:87: f1:72:d1:3b:b5:9f:13:1c:f3:5c:62:c3:bc:8a:9b: 85:e8:59:d6:54:c0:80:62:63:8c:1d:d6:92:21:95: 60:03:1b:d9:4f:1d:26:5d:cb:06:d3:e0:07:4e:e2: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:10:06:E7:4D:30:CF:AD:78:FE:E6:2C:BA:37:10:CF:6A:EA:9E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl X509v3 Authority Key Identifier: keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer sbgp-ipAddrBlock: critical IPv4: 23.145.112.0/24 IPv6: 2605:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:16:dc:b8:58:1f:16:0f:d4:ac:a4:7d:b1:32:ac:56:93:a4: f0:da:83:6d:63:41:ff:a3:aa:c2:87:d7:5e:a1:90:00:c5:a1: 56:fa:ec:de:a2:8e:b0:c0:cb:f4:ab:68:b3:63:67:08:c4:4a: d6:a7:5b:c4:cf:40:d7:f5:6d:d1:5b:c4:c7:25:42:ca:f6:76: 59:7c:3a:8a:ce:ab:05:62:36:ad:92:28:6d:f4:47:3c:70:1f: 63:1d:ea:21:09:2f:2c:16:0d:8b:73:86:15:e9:c3:d1:e4:a9: 60:bb:6a:58:9a:db:b9:6f:6b:92:3d:a3:10:41:ff:6e:59:c1: c6:93:50:80:1d:63:19:63:3e:82:e2:c8:8d:ec:a1:c2:ce:b6: f9:70:d3:df:5d:89:3c:c3:3f:93:8b:2a:75:15:35:dc:46:e9: cc:c9:47:43:2f:a2:99:f6:9c:33:05:71:86:84:5a:d0:65:06: a1:ce:97:6b:ae:1e:7b:f6:b6:19:11:44:34:e3:b7:09:6f:0f: 5a:9f:7f:0b:63:59:dd:c0:04:96:73:15:59:7c:d2:87:83:b1: 51:0b:a4:34:26:a9:21:a1:85:7f:31:0b:82:67:e7:bc:cd:15: b2:fc:6d:40:e4:7f:3c:10:8f:67:78:0a:6f:25:17:d9:a0:ea: df:eb:c8:9b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErToPCaYb3UlRB3/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1ZjhmZjgtNzdhMC00N2U5LWJhNzktY2NhZjE0N2Ey MDcxMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjI2NTgxZGQtNDliMi00NWVlLThmZjUtM2FkNTU1ODMwYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2sKn5QK408X+LW48+XEMPrHP+BRxbYb21s3 CWkeMQL2fw3pA8q83IIRWu4kopQSfBuJtOMBe+EAu6b4IrkOIPMPsak6feHJDBz4 ONefSTGCgHT2ctVh38GtcJMlUXNoJgXRk5qBWhqhmLRwAUdlO7YvUBSCmDTkEZmY GPW5UFKxNqqe5nJoPD5lpYuNi3RPgSUWUlxp7dRqUrjmw9DsmdVCbLzaBhO5xPL4 wqYRuALTTzTzKq0VMVqhL6FYrj1icGRzbvO/9MBtvNe4sT7SyofxctE7tZ8THPNc YsO8ipuF6FnWVMCAYmOMHdaSIZVgAxvZTx0mXcsG0+AHTuLQgQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFD0QBudNMM+teP7mLLo3EM9q6p50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVm OGZmOC03N2EwLTQ3ZTktYmE3OS1jY2FmMTQ3YTIwNzEvYTRlM2I2ZTItYzdkMC0z NDM0LWI3ZDItY2ViY2E2YzJlZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU1ZjhmZjgtNzdhMC00N2U5LWJh NzktY2NhZjE0N2EyMDcxLzFlNWY4ZmY4LTc3YTAtNDdlOS1iYTc5LWNjYWYxNDdh MjA3MS5jcmwwHwYDVR0jBBgwFoAUB5tPRFtgoPzbKEI3Im1tGLQcjrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVmOGZmOC03N2EwLTQ3ZTktYmE3OS1jY2Fm MTQ3YTIwNzEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5FwMA0E AgACMAcDBQAmBXNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABQW3LhYHxYP1KykfbEyrFaTpPDag21jQf+j qsKH116hkADFoVb67N6ijrDAy/SraLNjZwjEStanW8TPQNf1bdFbxMclQsr2dll8 OorOqwViNq2SKG30RzxwH2Md6iEJLywWDYtzhhXpw9HkqWC7alia27lva5I9oxBB /25ZwcaTUIAdYxljPoLiyI3socLOtvlw099diTzDP5OLKnUVNdxG6czJR0Mvopn2 nDMFcYaEWtBlBqHOl2uuHnv2thkRRDTjtwlvD1qffwtjWd3ABJZzFVl80oeDsVEL pDQmqSGhhX8xC4Jn57zNFbL8bUDkfzwQj2d4Cm8lF9mg6t/ryJs= -----END CERTIFICATE-----Generated at Wed Aug 20 19:07:14 2025 by rpki-client