$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa File: bc521612-402f-3148-b03a-d1bb55015d7a.roa (raw, json) Hash identifier: 0fRlI1Gl6y3PxBW1mbB7JkhwkZjmZGY1pmEmODk2uck= Subject key identifier: B1:C2:6A:97:EC:6B:E3:DB:89:80:56:B7:83:65:5C:72:05:3C:8D:B8 Certificate issuer: /CN=52fb91a6-cd61-4d3a-a409-799dd96b3d14 Certificate serial: 010D0C9F4328584AE5FC6074ED533CBC49798880 Authority key identifier: 8D:06:2A:56:E4:4B:F4:A4:7C:6B:03:11:79:A1:BF:99:A6:97:13:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa Signing time: Mon 18 Aug 2025 14:49:23 +0000 ROA not before: Mon 18 Aug 2025 14:49:23 +0000 ROA not after: Sun 16 Nov 2025 15:49:23 +0000 asID: 7029 IP address blocks: 23.143.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:fc:60:74:ed:53:3c:bc:49:79:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fb91a6-cd61-4d3a-a409-799dd96b3d14 Validity Not Before: Aug 18 14:49:23 2025 GMT Not After : Nov 16 15:49:23 2025 GMT Subject: CN=ebefc5a5-cba4-4c5e-9ddb-3e7a84c27a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:7e:f3:45:06:38:af:98:6a:ad:f5:37:1c: 42:19:31:92:fc:85:d3:db:08:3a:95:a0:9b:28:7c: 4c:0d:31:0c:71:51:01:6c:ea:a7:05:e6:55:f4:e3: 1f:1c:54:29:1c:b6:c7:f5:e0:d5:12:d2:71:87:ef: c5:e2:01:3d:c9:d2:3c:94:dd:7e:16:df:ad:6e:cb: cd:e4:86:b3:a8:a3:ce:f0:35:e4:2d:2a:10:fa:22: ff:ca:a5:e2:93:ff:27:69:7f:3d:2d:d0:93:e9:80: 2f:38:c7:3a:fa:a9:14:75:20:a4:1f:52:70:98:c3: f0:83:4c:b2:cf:7c:90:e6:10:ad:ee:89:00:94:14: e8:87:65:f2:29:7c:7b:df:13:99:13:6a:b1:81:db: 95:af:73:de:b8:88:f7:d8:9f:a8:3d:8a:b7:25:d9: 92:2c:a5:4a:62:04:1b:86:3c:33:6b:fc:a5:67:66: 2b:3f:f1:74:91:77:d4:95:a2:8f:7c:12:b8:e1:7c: 70:51:15:55:4f:9b:cf:f8:44:41:1f:77:d6:14:61: 96:b8:02:fb:37:71:c7:78:03:41:e1:b4:e3:28:c4: 02:f6:1c:7e:3a:b8:78:36:46:42:a9:b7:a0:e7:5c: e5:0d:57:95:30:c6:17:64:3a:11:70:57:5f:88:b5: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C2:6A:97:EC:6B:E3:DB:89:80:56:B7:83:65:5C:72:05:3C:8D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/bc521612-402f-3148-b03a-d1bb55015d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.crl X509v3 Authority Key Identifier: keyid:8D:06:2A:56:E4:4B:F4:A4:7C:6B:03:11:79:A1:BF:99:A6:97:13:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer sbgp-ipAddrBlock: critical IPv4: 23.143.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:08:74:3c:e3:97:b3:6a:71:30:6e:54:20:e4:27:f0:41:5d: db:1f:86:8a:0f:b9:65:d3:4d:1a:24:61:89:d7:93:fc:59:a7: e3:88:9c:4f:82:33:14:7d:51:f4:01:11:d5:26:2a:ea:54:98: 10:b3:7b:aa:47:8d:eb:fd:31:2e:0e:45:4f:db:89:4f:37:4f: 9b:9a:ef:4f:0c:38:af:9f:2f:81:91:5d:17:cf:9a:f9:8e:9e: 4a:57:45:5a:03:22:e7:f7:ef:1f:5c:17:9f:af:7d:d1:d5:82: b2:01:bf:96:a8:1f:50:a5:a5:04:ee:ff:7b:46:71:b5:de:3f: d1:37:1c:56:b9:84:ea:17:6e:67:13:98:af:4e:95:dc:0d:49: 4d:2f:51:f2:cb:15:18:2b:cb:f8:87:bf:c5:ab:be:c3:7e:a7: 96:56:7d:77:3c:e4:29:e2:da:41:41:63:0b:3b:f1:27:ba:5e: 46:06:ac:06:d7:8c:b5:1d:50:57:7a:f3:8c:56:b4:dc:f2:f7: 1d:9d:13:dc:3c:f1:a6:e0:af:89:5d:30:26:32:49:a5:b3:42: 83:c0:b4:bd:27:8c:63:2e:0a:42:52:1e:94:bb:47:05:0d:0b: b8:29:c2:fb:72:e4:d3:af:99:ec:04:96:d5:8c:83:58:0a:ab: 5f:3e:57:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErl/GB07VM8vEl5iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYjkxYTYtY2Q2MS00ZDNhLWE0MDktNzk5ZGQ5NmIz ZDE0MB4XDTI1MDgxODE0NDkyM1oXDTI1MTExNjE1NDkyM1owLzEtMCsGA1UEAxMk ZWJlZmM1YTUtY2JhNC00YzVlLTlkZGItM2U3YTg0YzI3YTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UZ+80UGOK+Yaq31NxxCGTGS/IXT2wg6laCb KHxMDTEMcVEBbOqnBeZV9OMfHFQpHLbH9eDVEtJxh+/F4gE9ydI8lN1+Ft+tbsvN 5IazqKPO8DXkLSoQ+iL/yqXik/8naX89LdCT6YAvOMc6+qkUdSCkH1JwmMPwg0yy z3yQ5hCt7okAlBToh2XyKXx73xOZE2qxgduVr3PeuIj32J+oPYq3JdmSLKVKYgQb hjwza/ylZ2YrP/F0kXfUlaKPfBK44XxwURVVT5vP+ERBH3fWFGGWuAL7N3HHeANB 4bTjKMQC9hx+Orh4NkZCqbeg51zlDVeVMMYXZDoRcFdfiLUb/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHCapfsa+PbiYBWt4NlXHIFPI24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81MmZi OTFhNi1jZDYxLTRkM2EtYTQwOS03OTlkZDk2YjNkMTQvYmM1MjE2MTItNDAyZi0z MTQ4LWIwM2EtZDFiYjU1MDE1ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTJmYjkxYTYtY2Q2MS00ZDNhLWE0 MDktNzk5ZGQ5NmIzZDE0LzUyZmI5MWE2LWNkNjEtNGQzYS1hNDA5LTc5OWRkOTZi M2QxNC5jcmwwHwYDVR0jBBgwFoAUjQYqVuRL9KR8awMReaG/maaXEwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81MmZiOTFhNi1jZDYxLTRkM2EtYTQwOS03OTlk ZDk2YjNkMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAIdDzjl7NqcTBuVCDkJ/BBXdsfhooPuWXTTRokYYnXk/xZp+OInE+C MxR9UfQBEdUmKupUmBCze6pHjev9MS4ORU/biU83T5ua708MOK+fL4GRXRfPmvmO nkpXRVoDIuf37x9cF5+vfdHVgrIBv5aoH1ClpQTu/3tGcbXeP9E3HFa5hOoXbmcT mK9OldwNSU0vUfLLFRgry/iHv8WrvsN+p5ZWfXc85Cni2kFBYws78Se6XkYGrAbX jLUdUFd684xWtNzy9x2dE9w88abgr4ldMCYySaWzQoPAtL0njGMuCkJSHpS7RwUN C7gpwvty5NOvmewEltWMg1gKq18+V4A= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:16 2025 by rpki-client