$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7/45e0cacc-8ba8-3bf2-a259-53984dd4d46d.roa File: 45e0cacc-8ba8-3bf2-a259-53984dd4d46d.roa (raw, json) Hash identifier: LN1vNUDc6NC2x2NNODFZ9YqLUEH8yYWO1vGA9JFBKOs= Subject key identifier: 29:1A:D8:E3:94:E7:0F:CD:79:3B:E2:53:B1:E1:97:E3:6E:C0:7C:81 Certificate issuer: /CN=a18e5147-2db8-4bd3-976c-5ad595bc04f7 Certificate serial: 010D0C9F4328584AF95137C718F1EE36BC61B080 Authority key identifier: 70:92:1B:BA:A0:43:9B:12:EF:86:18:B9:0E:B3:AA:7B:FF:DE:A5:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7/45e0cacc-8ba8-3bf2-a259-53984dd4d46d.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 401614 IP address blocks: 23.132.236.0/24 maxlen: 24 2602:f722::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7/a18e5147-2db8-4bd3-976c-5ad595bc04f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7/a18e5147-2db8-4bd3-976c-5ad595bc04f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:37:c7:18:f1:ee:36:bc:61:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18e5147-2db8-4bd3-976c-5ad595bc04f7 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=0517adb9-06f0-4598-88bb-bc76c1f44280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:db:d9:52:2e:be:a2:89:29:58:76:b3:b5:76: 36:b2:e7:51:14:57:77:fd:9d:c8:16:94:23:aa:fd: 34:8e:5c:c2:46:46:60:14:6d:79:1f:b8:bc:ab:7d: 59:45:aa:09:a6:5c:c6:24:91:2a:6a:7e:8a:a6:f9: 10:3b:ac:f0:d9:39:a7:a0:89:5a:3b:35:71:e8:ae: a7:c7:b2:2a:ae:39:2c:6c:7f:ec:53:c1:30:9d:78: 5f:4e:18:2d:9e:ec:57:4f:67:4d:a2:bb:7b:40:f7: 58:4a:e8:3f:88:7a:9c:d1:19:dd:23:93:94:df:8d: 0f:f5:4c:b2:9d:fb:4f:16:10:19:6a:94:0b:1e:eb: fb:1a:a4:bf:66:a1:8d:04:09:6e:41:2a:10:ab:fc: 05:ce:eb:6c:8c:d6:19:40:6d:bf:d4:ea:c7:05:e3: 18:30:f9:e5:53:c1:57:22:26:b9:1c:65:31:5d:90: e8:90:7c:c9:d9:15:c9:37:e3:33:82:55:0f:0a:1e: 75:2c:95:ed:17:98:2a:bd:c3:b2:52:fb:fd:38:a8: d2:c3:19:9d:1c:25:41:66:f3:90:f1:7e:40:87:5c: 23:bb:f8:fd:63:d9:5b:bb:d0:2f:80:02:7d:02:b5: 69:f1:55:fa:35:b7:5e:9f:ba:86:dc:92:27:8a:af: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:D8:E3:94:E7:0F:CD:79:3B:E2:53:B1:E1:97:E3:6E:C0:7C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7/45e0cacc-8ba8-3bf2-a259-53984dd4d46d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7/a18e5147-2db8-4bd3-976c-5ad595bc04f7.crl X509v3 Authority Key Identifier: keyid:70:92:1B:BA:A0:43:9B:12:EF:86:18:B9:0E:B3:AA:7B:FF:DE:A5:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a18e5147-2db8-4bd3-976c-5ad595bc04f7.cer sbgp-ipAddrBlock: critical IPv4: 23.132.236.0/24 IPv6: 2602:f722::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f0:c1:d5:78:f1:95:e9:b1:0a:32:29:89:74:ba:e0:e8:de: 28:d1:f2:85:e4:16:de:bd:95:a9:23:17:a1:4b:38:43:ec:05: 0d:77:cf:f9:a9:d8:31:b8:8f:48:89:7f:fd:d6:ad:d2:9f:cd: b4:ba:40:07:b7:aa:c5:de:17:d0:52:ca:3a:ac:34:02:b0:8b: 67:d0:95:ac:3b:7a:9e:a4:5e:00:c1:ae:0d:11:6f:d2:ea:69: 90:cd:50:3b:63:ab:99:25:bc:53:06:76:8c:ed:95:de:39:1e: bd:f5:b8:9a:f4:b6:19:6a:d3:26:5c:03:6e:93:20:cc:67:fa: 31:d5:d7:a3:d6:be:ad:14:68:e1:19:11:33:2e:fb:b5:8a:5e: c3:c4:d7:87:b9:22:ee:60:50:dd:1e:0e:8b:cc:51:76:96:dc: b5:e3:9f:a0:d3:3a:76:c4:0f:f6:1d:12:35:8d:3b:92:a2:5e: 4e:af:73:10:ff:44:1d:ff:18:83:2d:51:7c:dd:cb:e3:49:92: 70:19:22:4e:51:9d:b0:51:62:05:63:01:0f:9b:45:73:83:0d: 55:f0:c6:e0:a5:11:f0:ad:ef:2f:92:6e:6b:74:2e:6e:6c:3c: 2b:d0:43:5b:0a:cf:e0:0b:71:ef:b6:2b:07:43:38:d1:44:5c: 5d:59:6a:e9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr5UTfHGPHuNrxhsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE4ZTUxNDctMmRiOC00YmQzLTk3NmMtNWFkNTk1YmMw NGY3MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDUxN2FkYjktMDZmMC00NTk4LTg4YmItYmM3NmMxZjQ0MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdvZUi6+ookpWHaztXY2sudRFFd3/Z3IFpQj qv00jlzCRkZgFG15H7i8q31ZRaoJplzGJJEqan6KpvkQO6zw2TmnoIlaOzVx6K6n x7IqrjksbH/sU8EwnXhfThgtnuxXT2dNort7QPdYSug/iHqc0RndI5OU340P9Uyy nftPFhAZapQLHuv7GqS/ZqGNBAluQSoQq/wFzutsjNYZQG2/1OrHBeMYMPnlU8FX Iia5HGUxXZDokHzJ2RXJN+MzglUPCh51LJXtF5gqvcOyUvv9OKjSwxmdHCVBZvOQ 8X5Ah1wju/j9Y9lbu9AvgAJ9ArVp8VX6Nbden7qG3JIniq9hUwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCka2OOU5w/NeTviU7Hhl+NuwHyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMThl NTE0Ny0yZGI4LTRiZDMtOTc2Yy01YWQ1OTViYzA0ZjcvNDVlMGNhY2MtOGJhOC0z YmYyLWEyNTktNTM5ODRkZDRkNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTE4ZTUxNDctMmRiOC00YmQzLTk3 NmMtNWFkNTk1YmMwNGY3L2ExOGU1MTQ3LTJkYjgtNGJkMy05NzZjLTVhZDU5NWJj MDRmNy5jcmwwHwYDVR0jBBgwFoAUcJIbuqBDmxLvhhi5DrOqe//epbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMThlNTE0Ny0yZGI4LTRiZDMtOTc2Yy01YWQ1 OTViYzA0ZjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4TsMA4E AgACMAgDBgAmAvciADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB08MHVePGV6bEKMimJdLrg6N4o0fKF5Bbe vZWpIxehSzhD7AUNd8/5qdgxuI9IiX/91q3Sn820ukAHt6rF3hfQUso6rDQCsItn 0JWsO3qepF4Awa4NEW/S6mmQzVA7Y6uZJbxTBnaM7ZXeOR699bia9LYZatMmXANu kyDMZ/ox1dej1r6tFGjhGREzLvu1il7DxNeHuSLuYFDdHg6LzFF2lty145+g0zp2 xA/2HRI1jTuSol5Or3MQ/0Qd/xiDLVF83cvjSZJwGSJOUZ2wUWIFYwEPm0Vzgw1V 8MbgpRHwre8vkm5rdC5ubDwr0ENbCs/gC3HvtisHQzjRRFxdWWrp -----END CERTIFICATE-----Generated at Tue Aug 26 09:25:44 2025 by rpki-client