$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa File: d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa (raw, json) Hash identifier: pSmIds5m3l8yw5nRG0YggFjqmjyxO7pxejY9JZXKMEk= Subject key identifier: 87:48:69:BD:07:B8:46:97:E4:72:9E:41:15:28:16:9A:4F:55:FA:D5 Certificate issuer: /CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7 Certificate serial: 010D0C9F4328584AC5ABB0D872579FCA8B03C2C0 Authority key identifier: 6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 14691 IP address blocks: 23.135.100.0/24 maxlen: 24 2620:d4:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:b0:d8:72:57:9f:ca:8b:03:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=0ad1117b-ce8e-4c76-88ca-c39e1c2f7979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:25:bd:93:c0:7d:9b:6a:e5:00:83:73:3e:49: 4c:80:86:b4:20:17:66:61:7d:eb:04:e9:92:f5:d1: 2b:53:03:99:6d:d6:db:8e:f1:fd:de:84:3b:d7:0c: e7:7a:e1:dc:29:b1:f0:85:59:36:e6:00:96:e0:27: a8:93:7b:eb:8a:59:5e:dd:69:2d:9b:48:0d:19:c1: 5c:30:46:51:8e:34:62:ea:b2:09:31:e2:fd:1c:84: 23:c6:87:90:35:0f:b9:8f:86:54:a0:83:68:aa:a2: 94:20:ab:c1:99:e6:ed:cb:ad:5e:68:95:6e:d4:5c: cc:2a:a9:f7:ab:63:80:cc:0c:fd:a2:d3:41:93:4c: f2:ae:a0:2a:9f:24:55:7d:9d:dd:e8:fa:10:f0:cf: 55:ef:16:a2:8d:0e:59:70:32:f4:ef:cd:e6:9b:53: 84:cc:9a:9c:a2:49:16:3d:5c:e0:4e:02:fe:4c:0c: db:cf:2e:ba:35:85:58:07:31:3e:e1:81:2b:b3:64: 98:30:15:e7:8d:3b:d9:2f:fb:eb:db:07:9f:7f:bd: b4:97:0b:3d:b0:7e:d8:3c:b3:ed:85:21:08:ed:d9: ee:4f:3c:b5:95:c0:98:05:cf:b2:a1:74:bc:f3:16: 83:cb:d9:a9:59:72:e5:4b:b9:d0:5d:2a:d1:2e:ef: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:69:BD:07:B8:46:97:E4:72:9E:41:15:28:16:9A:4F:55:FA:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.crl X509v3 Authority Key Identifier: keyid:6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer sbgp-ipAddrBlock: critical IPv4: 23.135.100.0/24 IPv6: 2620:d4:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:fa:1e:10:62:fe:5e:4a:a4:a8:b8:f6:05:5c:f3:db:8c:3d: e4:1a:47:8f:48:fd:17:f9:42:35:b9:1c:71:a8:46:09:b1:74: 38:c8:de:d3:23:25:2b:fa:08:f8:d9:24:39:79:51:45:a9:9a: 4d:6d:14:63:19:03:82:6a:4a:af:01:f9:cf:aa:eb:f3:5a:ca: 6e:48:9e:5a:be:e8:a2:46:53:3b:c4:8f:53:d4:5f:bd:0b:a6: 12:dc:43:e6:79:7e:b3:23:82:7d:0b:a2:b0:a5:47:4f:dd:4d: 58:ce:4c:08:c3:02:c4:b2:4c:fb:de:d4:26:e2:f6:74:6e:15: 5b:e4:4f:32:1a:74:ed:58:c9:2c:7d:6e:0e:03:2c:5a:42:a2: 80:b7:89:5b:a8:1f:80:53:21:b2:33:d1:da:30:b3:8e:0a:7d: 3a:f9:c3:24:ca:7f:ec:f1:64:f8:b1:e5:cb:ff:8a:8c:af:19: f4:a0:11:e6:42:2a:9a:14:b2:a5:ca:1a:54:d9:db:81:d2:2c: 86:79:3a:dd:c2:b5:ea:02:db:55:0e:d8:b5:78:37:21:3d:71: 62:c8:38:34:bd:d5:fd:97:60:01:37:48:4b:8a:64:3d:95:f6: 06:29:aa:7b:3a:36:55:8f:a8:49:17:78:c7:a5:df:dd:d3:e0: 41:6c:95:0c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErFq7DYclefyosDwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkxZjY3ZWItNGJmOS00NWJiLWE1OTEtNmIyMmFjZmQz MGM3MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MGFkMTExN2ItY2U4ZS00Yzc2LTg4Y2EtYzM5ZTFjMmY3OTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SW9k8B9m2rlAINzPklMgIa0IBdmYX3rBOmS 9dErUwOZbdbbjvH93oQ71wzneuHcKbHwhVk25gCW4Ceok3vrille3Wktm0gNGcFc MEZRjjRi6rIJMeL9HIQjxoeQNQ+5j4ZUoINoqqKUIKvBmebty61eaJVu1FzMKqn3 q2OAzAz9otNBk0zyrqAqnyRVfZ3d6PoQ8M9V7xaijQ5ZcDL0783mm1OEzJqcokkW PVzgTgL+TAzbzy66NYVYBzE+4YErs2SYMBXnjTvZL/vr2weff720lws9sH7YPLPt hSEI7dnuTzy1lcCYBc+yoXS88xaDy9mpWXLlS7nQXSrRLu891wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIdIab0HuEaX5HKeQRUoFppPVfrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTFm NjdlYi00YmY5LTQ1YmItYTU5MS02YjIyYWNmZDMwYzcvZDJiMWEzYTAtM2Q3OC0z OTE2LWJiMjAtNTY1MWRjZWM3OWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjkxZjY3ZWItNGJmOS00NWJiLWE1 OTEtNmIyMmFjZmQzMGM3L2I5MWY2N2ViLTRiZjktNDViYi1hNTkxLTZiMjJhY2Zk MzBjNy5jcmwwHwYDVR0jBBgwFoAUbHRYNrqh7dHKxIpJmCU7X5B1XYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTFmNjdlYi00YmY5LTQ1YmItYTU5MS02YjIy YWNmZDMwYzcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4dkMA8E AgACMAkDBwAmIADUIAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALfoeEGL+XkqkqLj2BVzz24w95BpHj0j9 F/lCNbkccahGCbF0OMje0yMlK/oI+NkkOXlRRamaTW0UYxkDgmpKrwH5z6rr81rK bkieWr7ookZTO8SPU9RfvQumEtxD5nl+syOCfQuisKVHT91NWM5MCMMCxLJM+97U JuL2dG4VW+RPMhp07VjJLH1uDgMsWkKigLeJW6gfgFMhsjPR2jCzjgp9OvnDJMp/ 7PFk+LHly/+KjK8Z9KAR5kIqmhSypcoaVNnbgdIshnk63cK16gLbVQ7YtXg3IT1x Ysg4NL3V/ZdgATdIS4pkPZX2Bimqezo2VY+oSRd4x6Xf3dPgQWyVDA== -----END CERTIFICATE-----Generated at Thu Aug 21 12:43:05 2025 by rpki-client