$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa File: c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa (raw, json) Hash identifier: rlsYyG+cjkcsEIjrqKHGIbf84lN+foaEd9z0IBBVHbg= Subject key identifier: FC:C2:A4:1A:F7:60:B7:0B:45:7C:9F:03:76:F5:BD:90:FD:24:BE:A8 Certificate issuer: /CN=55263d01-2075-432b-94d1-01f0c1c34295 Certificate serial: 010D0C9F4328584A6F207615E266A1ADC30EBD80 Authority key identifier: 2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 401631 IP address blocks: 23.133.68.0/24 maxlen: 24 2602:f71f::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:76:15:e2:66:a1:ad:c3:0e:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55263d01-2075-432b-94d1-01f0c1c34295 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=cf2950a2-e9b5-4c08-85fd-13a5978db657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:c2:f4:d0:b5:d0:40:6d:41:da:d9:26:8d: 2f:7a:1d:d9:2c:f2:6f:ae:b1:dc:ab:41:12:43:ed: 3a:80:58:e9:68:5d:7d:ce:c5:09:ef:44:e6:7c:66: 9b:ba:df:f0:54:7a:0e:d5:08:27:7b:6f:75:33:40: 19:bf:2f:a6:33:be:04:8f:60:47:28:d4:98:53:48: 78:15:63:5f:11:f6:57:b7:7c:79:16:f8:e5:b0:e1: 36:17:4c:51:79:ea:e7:59:49:f9:c8:97:d6:af:07: 34:13:ba:5a:d8:b4:bd:aa:4f:f4:5e:05:6c:c4:d9: 8a:a5:df:aa:de:7c:d3:a8:7c:a4:fe:e0:d1:75:8b: fd:ca:22:f9:b7:b8:fd:57:50:b7:bc:b7:91:4a:94: bc:cd:f1:48:94:f1:3b:ea:37:b4:1a:3a:45:9f:ee: 82:b7:c4:36:97:5f:63:35:bc:f4:17:4c:dc:74:7f: 24:5b:83:76:a8:45:4b:a1:42:52:e4:84:15:95:d6: 74:9e:ad:13:28:e1:ab:e8:37:05:e8:b5:ec:d6:e0: e4:b4:af:7a:26:b1:a0:76:95:b2:04:2a:d4:98:f0: 3b:4b:e2:85:b4:cf:9e:e3:55:cc:15:d7:0f:da:6c: 0c:be:88:b4:58:78:a9:e9:6b:29:89:7b:bc:a5:e4: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C2:A4:1A:F7:60:B7:0B:45:7C:9F:03:76:F5:BD:90:FD:24:BE:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl X509v3 Authority Key Identifier: keyid:2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer sbgp-ipAddrBlock: critical IPv4: 23.133.68.0/24 IPv6: 2602:f71f::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:10:e1:2a:c2:6e:56:6c:6c:f2:72:da:e5:15:ba:c0:c9:46: 6b:d7:02:2e:22:ee:fc:a3:ad:41:f5:04:23:e9:d9:17:44:16: d4:00:f5:fd:71:f4:29:2e:95:43:36:23:ad:de:c3:58:37:a3: af:fa:b8:cc:87:30:71:7f:3f:2f:15:ad:96:f1:bf:cd:3e:85: 14:74:5e:c9:13:94:91:42:18:e3:c6:5f:52:e8:5e:e1:f3:bc: b5:74:6d:6b:63:e8:ca:56:63:1b:92:81:93:b8:c0:28:ed:68: 22:87:3d:92:b7:7d:bc:57:ba:0d:23:ea:07:d5:ff:e6:3d:82: 6e:fc:5d:3b:dc:e4:fa:1e:32:23:c5:67:7e:f3:c8:4e:ea:8d: 63:bc:01:b6:8c:19:a1:b8:f1:f8:52:df:e7:5b:3c:14:45:9e: 12:08:c9:b5:91:a1:bb:98:a2:97:b2:72:d4:a4:9a:c7:82:0f: be:be:fc:ef:28:d9:e0:70:a1:fa:a6:19:a4:eb:3c:fa:d9:c4: 53:9b:37:37:81:67:54:38:cf:86:d2:52:1f:ca:e2:fc:8d:c9: b6:19:35:a0:f3:6d:59:d4:b6:a1:1e:d2:5b:94:c7:bc:45:6f: be:b9:0c:7e:37:e9:1e:20:82:33:ef:f9:8a:d7:52:91:f4:72: 7a:d8:f7:7c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpvIHYV4mahrcMOvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyNjNkMDEtMjA3NS00MzJiLTk0ZDEtMDFmMGMxYzM0 Mjk1MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk Y2YyOTUwYTItZTliNS00YzA4LTg1ZmQtMTNhNTk3OGRiNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS3C9NC10EBtQdrZJo0veh3ZLPJvrrHcq0ES Q+06gFjpaF19zsUJ70TmfGabut/wVHoO1Qgne291M0AZvy+mM74Ej2BHKNSYU0h4 FWNfEfZXt3x5FvjlsOE2F0xReernWUn5yJfWrwc0E7pa2LS9qk/0XgVsxNmKpd+q 3nzTqHyk/uDRdYv9yiL5t7j9V1C3vLeRSpS8zfFIlPE76je0GjpFn+6Ct8Q2l19j Nbz0F0zcdH8kW4N2qEVLoUJS5IQVldZ0nq0TKOGr6DcF6LXs1uDktK96JrGgdpWy BCrUmPA7S+KFtM+e41XMFdcP2mwMvoi0WHip6WspiXu8peSU8wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPzCpBr3YLcLRXyfA3b1vZD9JL6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81NTI2 M2QwMS0yMDc1LTQzMmItOTRkMS0wMWYwYzFjMzQyOTUvYzQxZTA3YTUtZGUyZi0z NTY3LWFlNGMtN2U4YTJlMmYwMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTUyNjNkMDEtMjA3NS00MzJiLTk0 ZDEtMDFmMGMxYzM0Mjk1LzU1MjYzZDAxLTIwNzUtNDMyYi05NGQxLTAxZjBjMWMz NDI5NS5jcmwwHwYDVR0jBBgwFoAULcAuJ7fIO0x8TjVZZKbOhicbgZ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81NTI2M2QwMS0yMDc1LTQzMmItOTRkMS0wMWYw YzFjMzQyOTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VEMA4E AgACMAgDBgQmAvcfADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATEOEqwm5WbGzyctrlFbrAyUZr1wIuIu78 o61B9QQj6dkXRBbUAPX9cfQpLpVDNiOt3sNYN6Ov+rjMhzBxfz8vFa2W8b/NPoUU dF7JE5SRQhjjxl9S6F7h87y1dG1rY+jKVmMbkoGTuMAo7Wgihz2St328V7oNI+oH 1f/mPYJu/F073OT6HjIjxWd+88hO6o1jvAG2jBmhuPH4Ut/nWzwURZ4SCMm1kaG7 mKKXsnLUpJrHgg++vvzvKNngcKH6phmk6zz62cRTmzc3gWdUOM+G0lIfyuL8jcm2 GTWg821Z1LahHtJblMe8RW++uQx+N+keIIIz7/mK11KR9HJ62Pd8 -----END CERTIFICATE-----Generated at Wed Jul 9 11:52:55 2025 by rpki-client