$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa File: 7c20deec-1152-3c56-8ea4-d899a929dad8.roa (raw, json) Hash identifier: pC8wbyeG8wpw441VKcT6Vpt3uI44fvHTC7hHBW5UNlU= Subject key identifier: 27:C3:7A:15:A9:33:00:BC:BB:F7:D8:9F:EB:05:D9:C5:DF:23:FA:5B Certificate issuer: /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Certificate serial: 010D0C9F4328584AD23BB0A6D29AB1EA8DF9E080 Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 398193 IP address blocks: 23.165.112.0/24 maxlen: 24 148.59.95.0/24 maxlen: 24 2602:fd18::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b0:a6:d2:9a:b1:ea:8d:f9:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=11ca60ce-2741-4cf0-a081-18a7f8a55e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:4d:d4:c4:37:88:bd:7b:e6:29:d7:02:93: b3:cf:41:db:14:d8:87:46:51:a9:88:32:27:4b:76: 4d:aa:36:89:f8:09:c6:fa:31:5b:87:81:99:b3:dc: 99:57:4f:65:8a:56:a3:b3:3a:bd:6a:1b:62:b7:ea: 45:4b:0b:7e:75:db:30:7d:69:7f:f6:67:4a:72:b4: 0e:8b:45:01:9f:c7:f2:df:d3:b7:16:ce:3f:b7:3f: 6a:f9:27:1f:25:1c:43:c1:53:2c:26:d2:70:8d:18: 1d:62:58:4e:b5:1c:06:bc:77:5e:e3:c0:c3:9b:67: 0a:0b:69:22:58:ce:28:51:3a:db:88:da:09:d4:a4: b9:01:4f:72:9a:0d:a1:67:60:34:3a:5d:d9:08:e8: b3:6f:9b:4b:2f:7d:91:fc:83:99:cf:2f:9e:5f:80: c3:fb:e9:6e:3f:2f:44:6b:dd:25:ae:d3:b5:33:5c: db:0b:a5:36:d5:68:cd:e8:e0:18:7d:6b:f0:15:a4: ae:b1:23:b9:54:0f:24:e9:5e:67:32:55:31:b1:4b: 85:cd:4a:79:47:4d:2a:a1:a2:17:39:ba:cd:8b:97: ed:00:bb:19:b8:6f:ef:f8:2c:fd:fa:13:46:3a:15: ff:8b:c1:79:05:92:74:a8:e9:7c:e5:16:06:29:15: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C3:7A:15:A9:33:00:BC:BB:F7:D8:9F:EB:05:D9:C5:DF:23:FA:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl X509v3 Authority Key Identifier: keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.112.0/24 148.59.95.0/24 IPv6: 2602:fd18::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:22:7e:6d:6a:28:a7:59:c0:a7:99:9f:3d:b0:52:e3:c2:3a: 3a:2a:64:89:fa:c9:bf:ac:8c:52:d9:a2:2a:c5:c0:40:16:5a: 5b:e7:d6:59:e7:cb:14:3e:48:8e:12:de:9c:fa:93:94:da:eb: 3a:3d:05:b9:85:47:4c:f1:97:00:cd:2b:f9:7d:24:50:67:fd: b3:87:5f:81:66:ca:d4:16:e1:74:fa:72:3a:1b:51:63:16:3b: 6d:e5:83:aa:ef:fe:aa:99:8f:fd:46:45:b3:72:cd:02:21:cd: 37:94:52:e1:86:a2:7d:3c:40:3d:ef:04:8d:82:7c:87:bc:ee: 55:8f:54:d3:43:9a:e1:58:d4:16:0f:cf:74:2e:68:b5:2c:62: d4:eb:c9:87:2f:2b:f2:53:be:22:92:c2:03:37:77:ce:be:9f: 84:37:0c:5d:a3:5a:6e:59:9c:df:76:48:b8:1c:93:20:2d:bb: 03:9e:d6:fb:75:fe:0a:de:6c:f4:c9:aa:a1:cf:2b:6e:3b:fd: 9d:66:56:de:05:24:be:72:81:93:72:93:f0:9a:18:52:14:da: df:2a:9f:c7:50:a6:d1:bb:27:6c:ee:54:67:e2:99:39:a6:29: 1e:aa:b6:ec:cb:59:a7:f2:40:b5:1a:90:87:b8:da:87:7e:19: a3:52:12:fc -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWErSO7Cm0pqx6o354IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmYjdiNGMtMDhjYy00ZDc2LWFkYTItYjU3MmEyZDIz M2E5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTFjYTYwY2UtMjc0MS00Y2YwLWEwODEtMThhN2Y4YTU1ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVBN1MQ3iL175inXApOzz0HbFNiHRlGpiDIn S3ZNqjaJ+AnG+jFbh4GZs9yZV09lilajszq9ahtit+pFSwt+ddswfWl/9mdKcrQO i0UBn8fy39O3Fs4/tz9q+ScfJRxDwVMsJtJwjRgdYlhOtRwGvHde48DDm2cKC2ki WM4oUTrbiNoJ1KS5AU9ymg2hZ2A0Ol3ZCOizb5tLL32R/IOZzy+eX4DD++luPy9E a90lrtO1M1zbC6U21WjN6OAYfWvwFaSusSO5VA8k6V5nMlUxsUuFzUp5R00qoaIX ObrNi5ftALsZuG/v+Cz9+hNGOhX/i8F5BZJ0qOl85RYGKRU2jQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFCfDehWpMwC8u/fYn+sF2cXfI/pbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZi N2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJkMjMzYTkvN2MyMGRlZWMtMTE1Mi0z YzU2LThlYTQtZDg5OWE5MjlkYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFmYjdiNGMtMDhjYy00ZDc2LWFk YTItYjU3MmEyZDIzM2E5L2RhZmI3YjRjLTA4Y2MtNGQ3Ni1hZGEyLWI1NzJhMmQy MzNhOS5jcmwwHwYDVR0jBBgwFoAUNX/ggAcTwJH090DQumO5Cuj1sxEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcy YTJkMjMzYTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6VwAwQA lDtfMA4EAgACMAgDBgQmAv0YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIIn5taiinWcCnmZ89sFLjwjo6 KmSJ+sm/rIxS2aIqxcBAFlpb59ZZ58sUPkiOEt6c+pOU2us6PQW5hUdM8ZcAzSv5 fSRQZ/2zh1+BZsrUFuF0+nI6G1FjFjtt5YOq7/6qmY/9RkWzcs0CIc03lFLhhqJ9 PEA97wSNgnyHvO5Vj1TTQ5rhWNQWD890Lmi1LGLU68mHLyvyU74iksIDN3fOvp+E Nwxdo1puWZzfdki4HJMgLbsDntb7df4K3mz0yaqhzytuO/2dZlbeBSS+coGTcpPw mhhSFNrfKp/HUKbRuyds7lRn4pk5pikeqrbsy1mn8kC1GpCHuNqHfhmjUhL8 -----END CERTIFICATE-----Generated at Wed Aug 20 23:31:38 2025 by rpki-client