$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/954c50a4-bd0e-3297-895f-fd6430063eee.roa File: 954c50a4-bd0e-3297-895f-fd6430063eee.roa (raw, json) Hash identifier: qk9H6hyvCM0Qh9jW26VtZuun6F1aZPOB1t2l4ikwgqA= Subject key identifier: 81:46:39:50:A5:52:33:15:D2:81:B7:D1:DF:E4:60:B6:82:04:1F:9C Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584A7A0ACE68EDFE0368C9955EC0 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/954c50a4-bd0e-3297-895f-fd6430063eee.roa Signing time: Thu 10 Jul 2025 06:12:07 +0000 ROA not before: Thu 10 Jul 2025 06:12:07 +0000 ROA not after: Wed 08 Oct 2025 06:12:07 +0000 asID: 16509 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:0a:ce:68:ed:fe:03:68:c9:95:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Jul 10 06:12:07 2025 GMT Not After : Oct 8 06:12:07 2025 GMT Subject: CN=5a1b4882-69cf-4ef8-a512-a53807429f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:e4:66:5b:de:3c:f8:e8:a3:9a:e5:36:03: c0:d0:58:bc:d2:95:d9:90:1d:20:af:ed:9c:db:52: eb:e5:9f:36:78:c4:a5:94:d1:15:7e:c1:db:28:d7: b4:0e:45:05:f8:ec:6b:6e:ef:ee:36:d1:f8:fd:f1: 97:bf:b4:cc:66:99:c4:a1:93:44:4b:42:01:92:e9: 4c:cb:85:55:07:e4:6f:90:51:9f:e9:82:4b:2c:0e: 6e:a8:a8:d0:53:67:bf:9c:52:4b:eb:36:fa:07:8e: 71:b4:9e:d3:19:91:1b:7b:94:d1:17:24:7a:7e:15: 53:78:04:31:78:77:01:aa:ac:b1:69:f2:09:a0:02: e1:9e:6c:99:53:7d:07:de:9b:7b:72:1c:b4:95:b8: f3:fe:3c:e7:80:61:2a:3a:ea:52:de:96:1d:9d:4c: ef:f2:a9:e4:ec:79:17:a4:22:e7:0b:81:a3:3c:c3: 23:f7:fa:1e:0d:95:91:9e:d1:8d:95:5d:9a:c1:cd: 1c:fb:bd:47:bb:a4:8f:a4:7d:24:24:e6:c9:50:d9: ec:01:ec:54:ee:9c:70:f1:e1:f8:1b:b6:12:dc:91: 16:ef:ac:25:63:47:1e:df:b7:b6:fc:8c:1b:09:0f: 75:c3:60:09:f3:eb:82:eb:b2:dd:8a:67:f9:11:f8: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:46:39:50:A5:52:33:15:D2:81:B7:D1:DF:E4:60:B6:82:04:1F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/954c50a4-bd0e-3297-895f-fd6430063eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:900::/48 2602:f805:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:19:97:b9:d6:ec:b2:d5:75:db:1d:8a:ef:ce:b8:65:8d:5c: 39:b8:1e:b8:07:d6:91:28:4d:39:3d:ed:c2:b8:98:bd:4c:98: ca:83:f7:b5:0e:89:d6:22:0d:b6:e0:49:0f:54:a1:ec:04:b8: 1a:9e:b5:0e:06:82:24:8c:55:a8:1b:59:d5:71:81:15:d0:9c: 00:5c:94:1f:47:85:70:5c:df:7f:8e:76:56:fe:cf:a5:da:f0: 9b:2f:52:da:2a:7d:5f:e0:ef:3e:e8:e3:0b:45:12:71:65:89: 7d:c1:38:27:1f:8f:4e:39:ce:37:dc:d1:dd:a2:bb:3c:ef:4d: 90:16:25:53:a7:d3:ea:c9:7a:3a:e1:e9:dc:41:74:ae:5d:05: fe:d0:f6:5c:7d:cd:26:98:04:b9:ed:84:52:7b:a1:4d:6b:83: dd:ad:a8:1d:de:27:f7:0f:62:0c:67:98:de:dd:e7:5f:f9:71: 96:07:b8:18:fa:07:a0:ec:fb:00:67:d1:73:80:c6:00:3a:6b: 28:db:15:09:2f:2d:7f:dc:06:7e:52:22:8a:a8:cb:9d:34:6f: ae:35:09:c7:5c:1a:4c:4c:59:9c:8b:23:29:98:2f:71:58:54: 05:18:ec:6e:95:b5:e1:aa:0c:6d:ce:68:67:d6:f3:42:08:d3: 04:d4:8f:92 -----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgIUAQ0Mn0MoWEp6Cs5o7f4DaMmVXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MDcxMDA2MTIwN1oXDTI1MTAwODA2MTIwN1owLzEtMCsGA1UEAxMk NWExYjQ4ODItNjljZi00ZWY4LWE1MTItYTUzODA3NDI5ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfzkZlvePPjoo5rlNgPA0Fi80pXZkB0gr+2c 21Lr5Z82eMSllNEVfsHbKNe0DkUF+Oxrbu/uNtH4/fGXv7TMZpnEoZNES0IBkulM y4VVB+RvkFGf6YJLLA5uqKjQU2e/nFJL6zb6B45xtJ7TGZEbe5TRFyR6fhVTeAQx eHcBqqyxafIJoALhnmyZU30H3pt7chy0lbjz/jzngGEqOupS3pYdnUzv8qnk7HkX pCLnC4GjPMMj9/oeDZWRntGNlV2awc0c+71Hu6SPpH0kJObJUNnsAexU7pxw8eH4 G7YS3JEW76wlY0ce37e2/IwbCQ91w2AJ8+uC67Ldimf5EfgIcwIDAQABo4IDeDCC A3QwHQYDVR0OBBYEFIFGOVClUjMV0oG30d/kYLaCBB+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvOTU0YzUwYTQtYmQwZS0z Mjk3LTg5NWYtZmQ2NDMwMDYzZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAF714MCEE AgACMBsDBwAmAvgFAAADBwAmAvgFCQADBwAmAvgFDAAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZBmXudbs stV12x2K7864ZY1cObgeuAfWkShNOT3twriYvUyYyoP3tQ6J1iINtuBJD1Sh7AS4 Gp61DgaCJIxVqBtZ1XGBFdCcAFyUH0eFcFzff452Vv7Ppdrwmy9S2ip9X+DvPujj C0UScWWJfcE4Jx+PTjnON9zR3aK7PO9NkBYlU6fT6sl6OuHp3EF0rl0F/tD2XH3N JpgEue2EUnuhTWuD3a2oHd4n9w9iDGeY3t3nX/lxlge4GPoHoOz7AGfRc4DGADpr KNsVCS8tf9wGflIiiqjLnTRvrjUJx1waTExZnIsjKZgvcVhUBRjsbpW14aoMbc5o Z9bzQgjTBNSPkg== -----END CERTIFICATE-----Generated at Fri Jul 11 04:41:08 2025 by rpki-client