$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa File: c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa (raw, json) Hash identifier: 8PZvTqBxDrdjbc8YfwK6GFEyblzOPk72gzL467U4bwE= Subject key identifier: BB:50:3B:A5:07:A9:5B:16:AD:CB:4F:8B:ED:DC:35:EF:BB:7C:4A:8A Certificate issuer: /CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d Certificate serial: 010D0C9F4328584AC711206E0C27AFB8ED3B3C70 Authority key identifier: A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 62646 IP address blocks: 23.92.0.0/20 maxlen: 24 2604:e280::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:20:6e:0c:27:af:b8:ed:3b:3c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=211bf40d-21bc-4f2d-85cf-4be7466a3cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e9:01:7e:4a:bd:26:d4:e8:38:81:17:99:7e: 84:83:6e:99:45:44:19:53:15:f8:e9:31:79:e1:e5: 66:6f:2c:d7:32:13:58:8e:36:fa:fb:e8:f3:90:e2: fc:4e:3e:b5:49:4a:90:22:80:26:72:14:00:c3:a3: 84:30:df:02:16:ce:c2:ef:28:22:fc:d2:ac:88:72: a4:07:f6:07:06:f6:e3:3d:5a:89:b4:92:6d:8a:bd: 0c:37:a5:35:ab:8a:dd:1e:0f:af:a6:09:b9:79:4a: f8:5c:ad:ab:d9:3e:6c:e6:97:4d:bb:06:4e:a4:b1: 53:56:68:ee:c6:ab:61:91:73:c5:74:a9:0a:96:60: de:e5:fb:1e:c5:16:98:d7:37:1c:9e:ca:ec:70:1b: e1:c3:84:4d:9f:d4:59:0d:75:eb:4e:ec:d0:3f:64: ad:42:f9:e5:3c:1e:07:81:00:67:42:b3:4a:91:3e: 90:57:c3:45:b4:37:e3:46:10:eb:8e:f8:70:1e:ad: f3:1b:30:a4:c1:2f:f7:05:cd:e1:92:25:4c:7b:54: 86:19:93:e9:84:e8:86:9a:1a:f3:34:c2:0f:93:0f: 2f:b1:bb:58:43:9f:37:0b:64:77:6f:d8:a8:dc:77: e4:cb:17:b3:e0:3e:23:5c:77:98:b2:cb:f0:0d:43: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:50:3B:A5:07:A9:5B:16:AD:CB:4F:8B:ED:DC:35:EF:BB:7C:4A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl X509v3 Authority Key Identifier: keyid:A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer sbgp-ipAddrBlock: critical IPv4: 23.92.0.0/20 IPv6: 2604:e280::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e7:24:c7:ef:fe:59:53:f5:6f:c9:f6:4f:91:9b:6f:51:31: 33:ff:0e:e4:6b:79:d3:67:32:38:a5:36:0b:71:63:f5:6b:ab: e0:5d:b4:e8:02:50:64:c1:75:6e:28:55:d7:20:c2:79:1e:cc: e0:db:14:c3:03:a6:cc:9b:66:39:8c:bd:6c:9f:5a:26:d1:67: 1d:07:ea:88:8d:31:78:56:58:f7:ec:5d:1f:dd:3c:29:24:1a: 56:13:de:67:76:ee:6b:b8:b5:c2:5b:97:df:78:2c:71:57:3d: 0b:d1:d5:e1:3a:ab:43:da:52:d7:29:88:db:92:90:91:9c:bf: 6f:51:9b:48:dc:56:cb:e7:da:43:b7:72:29:32:fa:97:91:18: 9f:3c:49:69:53:7d:9a:67:c1:aa:04:3b:86:fb:f6:25:5c:2f: 15:b4:41:ee:c6:42:cb:97:4f:e8:7c:9c:b0:ec:b2:c0:f9:b7: 4f:4e:46:05:49:1a:e8:7d:21:fc:43:9d:25:d9:a0:81:99:4e: c1:40:5f:5d:54:e9:ea:b8:11:b1:b4:d2:34:7e:10:63:41:0b: 37:e4:00:4b:82:18:e8:ee:5c:68:03:76:4b:8c:7b:82:06:1b: 8e:4d:8c:a8:02:52:e8:75:3f:18:86:6e:ef:f2:22:ad:af:d0: f3:81:4e:40 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErHESBuDCevuO07PHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE2OTZiNWUtZjgzYi00ZWU4LWIxYzgtODQ2MjE1Y2Q1 ZTRkMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjExYmY0MGQtMjFiYy00ZjJkLTg1Y2YtNGJlNzQ2NmEzY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOkBfkq9JtToOIEXmX6Eg26ZRUQZUxX46TF5 4eVmbyzXMhNYjjb6++jzkOL8Tj61SUqQIoAmchQAw6OEMN8CFs7C7ygi/NKsiHKk B/YHBvbjPVqJtJJtir0MN6U1q4rdHg+vpgm5eUr4XK2r2T5s5pdNuwZOpLFTVmju xqthkXPFdKkKlmDe5fsexRaY1zccnsrscBvhw4RNn9RZDXXrTuzQP2StQvnlPB4H gQBnQrNKkT6QV8NFtDfjRhDrjvhwHq3zGzCkwS/3Bc3hkiVMe1SGGZPphOiGmhrz NMIPkw8vsbtYQ583C2R3b9io3Hfkyxez4D4jXHeYssvwDUMcJwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFLtQO6UHqVsWrctPi+3cNe+7fEqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTY5 NmI1ZS1mODNiLTRlZTgtYjFjOC04NDYyMTVjZDVlNGQvYzNkNTE0ZWUtNWExMC0z OGY0LWEzMmItNmMwZTIxNjMyN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWE2OTZiNWUtZjgzYi00ZWU4LWIx YzgtODQ2MjE1Y2Q1ZTRkL2FhNjk2YjVlLWY4M2ItNGVlOC1iMWM4LTg0NjIxNWNk NWU0ZC5jcmwwHwYDVR0jBBgwFoAUqWA2m6XgUTVL+E/eDKAgdd6bZEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTY5NmI1ZS1mODNiLTRlZTgtYjFjOC04NDYy MTVjZDVlNGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEF1wAMA0E AgACMAcDBQQmBOKAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFPnJMfv/llT9W/J9k+Rm29RMTP/DuRredNn MjilNgtxY/Vrq+BdtOgCUGTBdW4oVdcgwnkezODbFMMDpsybZjmMvWyfWibRZx0H 6oiNMXhWWPfsXR/dPCkkGlYT3md27mu4tcJbl994LHFXPQvR1eE6q0PaUtcpiNuS kJGcv29Rm0jcVsvn2kO3ciky+peRGJ88SWlTfZpnwaoEO4b79iVcLxW0Qe7GQsuX T+h8nLDsssD5t09ORgVJGuh9IfxDnSXZoIGZTsFAX11U6eq4EbG00jR+EGNBCzfk AEuCGOjuXGgDdkuMe4IGG45NjKgCUuh1PxiGbu/yIq2v0POBTkA= -----END CERTIFICATE-----Generated at Fri Aug 22 05:11:12 2025 by rpki-client