$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa File: 1af27fcc-c087-3992-bbed-aa65a2857848.roa (raw, json) Hash identifier: FaHf4+TPD2QPRW6bnI63iAcL7ryMTWbVYLAtP+UD36E= Subject key identifier: 5E:50:6A:78:CC:90:70:89:BB:39:6D:36:E1:21:95:BB:89:8E:E0:C3 Certificate issuer: /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Certificate serial: 010D0C9F4328584ACCA659DEBF52B37A912FF780 Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 23297 IP address blocks: 23.130.44.0/24 maxlen: 24 2602:f780::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:59:de:bf:52:b3:7a:91:2f:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=2fbeb072-73f3-44bd-b0d6-b28f4a71cff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:a5:0e:0f:af:18:ab:31:a1:95:9a:53:9e: de:b9:3f:b0:14:de:b1:b6:47:24:43:15:23:f8:13: 65:6d:61:5b:e7:b7:47:a5:7e:aa:6f:5c:b8:d3:12: 43:0e:fa:b3:af:16:d3:a8:b2:09:7e:45:a7:6d:60: 5d:d1:67:e5:74:23:49:03:e9:0f:61:eb:dc:f0:24: 0d:43:2c:b4:fe:2b:cf:e1:c2:cd:23:10:d1:6c:98: c8:7d:4d:3c:fe:5b:14:22:cc:ee:c0:24:de:fc:fe: 2d:ce:02:a9:45:ee:39:79:bf:8d:b3:05:71:c2:06: 7f:2d:c4:63:07:c4:6a:fa:89:72:1f:22:9e:91:8a: e2:ed:23:d1:0a:c2:45:2c:67:75:32:47:69:86:4a: 4a:4d:d2:31:95:95:ca:b3:3e:0c:39:e3:c1:c4:69: d7:03:c9:58:5d:43:e6:e7:99:53:7f:ed:b8:5b:be: 3f:fc:a0:d9:66:6d:41:50:0f:93:37:af:f1:a1:6b: eb:a4:1c:f4:e3:ef:d1:fe:5a:91:36:69:a5:36:9f: a7:6b:b4:9d:be:66:2b:36:cd:3f:a2:d0:05:1f:bb: eb:03:0a:a1:2f:bd:32:6b:60:08:4a:bd:60:92:f2: 2f:fc:8f:63:d2:70:5b:90:6b:d2:36:ee:4d:51:3c: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:50:6A:78:CC:90:70:89:BB:39:6D:36:E1:21:95:BB:89:8E:E0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl X509v3 Authority Key Identifier: keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer sbgp-ipAddrBlock: critical IPv4: 23.130.44.0/24 IPv6: 2602:f780::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:bc:2d:1a:30:42:1e:cd:41:d3:ac:19:2a:ca:52:8e:cd:e4: b5:47:ec:82:b6:8d:ef:86:77:e8:72:63:54:ed:7d:7c:dd:d1: 4a:d9:cd:f3:4a:ca:fa:55:71:67:3c:95:18:bc:47:69:1d:10: b6:27:35:03:b1:1d:f1:ce:d0:19:4d:9a:bb:76:9c:46:65:c7: 0d:c2:65:06:9c:4a:2c:aa:02:b2:e8:18:81:59:3f:22:0e:80: f0:2d:44:d5:94:39:d1:60:f9:bb:47:b6:11:c1:d5:83:a1:40: ab:f7:25:d1:b5:fa:4a:f8:e7:36:32:c3:bd:c0:08:64:4c:33: 4d:6a:9f:51:a7:77:09:4b:e5:f1:7f:9a:72:01:89:cd:a8:94: e5:65:ae:fe:d7:86:ed:d9:66:64:fe:45:ee:8a:f3:48:6d:6e: 64:00:f5:af:00:3b:2b:60:4a:56:10:23:96:ec:db:b4:5d:34: 96:3d:e3:0a:19:e7:9c:62:b3:29:79:0e:0e:fb:98:ac:85:f7: 4e:7c:a8:e8:ec:da:57:d0:93:76:6c:e8:83:0d:90:ee:14:17: 0d:94:78:8e:3a:d8:a8:e7:ce:0a:a7:55:10:0b:cd:86:79:50: 28:e9:97:1a:b7:b8:9c:73:8e:97:3a:64:a4:74:05:47:e3:60: 3e:94:ac:0b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErMplnev1KzepEv94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTVi MjUxMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmZiZWIwNzItNzNmMy00NGJkLWIwZDYtYjI4ZjRhNzFjZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/SlDg+vGKsxoZWaU57euT+wFN6xtkckQxUj +BNlbWFb57dHpX6qb1y40xJDDvqzrxbTqLIJfkWnbWBd0WfldCNJA+kPYevc8CQN Qyy0/ivP4cLNIxDRbJjIfU08/lsUIszuwCTe/P4tzgKpRe45eb+NswVxwgZ/LcRj B8Rq+olyHyKekYri7SPRCsJFLGd1MkdphkpKTdIxlZXKsz4MOePBxGnXA8lYXUPm 55lTf+24W74//KDZZm1BUA+TN6/xoWvrpBz04+/R/lqRNmmlNp+na7SdvmYrNs0/ otAFH7vrAwqhL70ya2AISr1gkvIv/I9j0nBbkGvSNu5NUTyaoQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFF5QanjMkHCJuzltNuEhlbuJjuDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5 NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvMWFmMjdmY2MtYzA4Ny0z OTkyLWJiZWQtYWE2NWEyODU3ODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI1OTQ3ZTQtNjFlNi00ZGRmLThj MmUtMGI4NDgyMTViMjUxLzJiNTk0N2U0LTYxZTYtNGRkZi04YzJlLTBiODQ4MjE1 YjI1MS5jcmwwHwYDVR0jBBgwFoAUxuUzm27bDltZqbZkAm6OGJo8kNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0 ODIxNWIyNTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4IsMA4E AgACMAgDBgQmAveAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmvC0aMEIezUHTrBkqylKOzeS1R+yCto3v hnfocmNU7X183dFK2c3zSsr6VXFnPJUYvEdpHRC2JzUDsR3xztAZTZq7dpxGZccN wmUGnEosqgKy6BiBWT8iDoDwLUTVlDnRYPm7R7YRwdWDoUCr9yXRtfpK+Oc2MsO9 wAhkTDNNap9Rp3cJS+Xxf5pyAYnNqJTlZa7+14bt2WZk/kXuivNIbW5kAPWvADsr YEpWECOW7Nu0XTSWPeMKGeecYrMpeQ4O+5ishfdOfKjo7NpX0JN2bOiDDZDuFBcN lHiOOtio584Kp1UQC82GeVAo6Zcat7icc46XOmSkdAVH42A+lKwL -----END CERTIFICATE-----Generated at Wed Aug 20 23:31:23 2025 by rpki-client