$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa File: ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa (raw, json) Hash identifier: NTAZ+VKRrdknqM4ZgWmQ5GgK19l8Xll1X17/tDoHlT8= Subject key identifier: 5F:9F:72:31:BC:9E:EC:D2:74:8D:48:61:C9:AB:82:9F:88:24:5A:17 Certificate issuer: /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810 Certificate serial: 010D0C9F4328584A7E7B5F2E25B62CCD33948180 Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 63213 IP address blocks: 23.83.220.0/23 maxlen: 23 23.83.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5f:2e:25:b6:2c:cd:33:94:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=78817abb-3ef5-4325-8fe9-66d38f3afdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:8b:57:ee:f8:d4:8b:ea:a5:5a:13:2a:c3: ea:10:dd:f4:cd:ea:17:cc:4c:77:c6:23:0a:a0:86: 5d:86:d5:f0:20:ea:71:3b:71:06:74:ab:2d:b7:fa: 2d:2b:24:f6:a0:77:ae:f5:99:b2:89:b3:8a:c1:d4: 01:03:f5:6c:48:90:93:70:37:32:7d:83:a5:f7:89: 4b:d4:c3:85:24:84:c2:76:2b:7f:65:08:d0:97:5e: 0d:1c:bb:87:58:c8:55:07:df:ad:1d:63:12:fe:8f: d6:9e:cc:0e:61:34:2e:73:42:00:d1:a9:e8:c6:b6: 26:26:7e:c0:9b:c1:c1:67:c2:6d:10:df:e3:1e:f9: 8e:0d:f5:e7:ea:c8:c6:b7:9c:ee:6b:fe:d4:72:97: 88:bc:bf:35:e2:43:3f:70:69:85:cd:e4:9d:c7:4f: 92:c4:68:59:2a:10:85:cc:42:0c:c0:ad:32:94:86: 3f:a3:12:ef:86:3d:1f:23:48:21:51:82:77:c4:06: ad:6f:39:a9:49:8b:87:fa:01:b7:e8:08:9e:68:d7: 2f:0c:7c:fd:2e:ce:c7:75:0c:e4:2e:0a:d6:d0:10: f9:ea:5f:c4:59:1d:76:c5:ac:29:21:5d:65:ed:98: ff:3a:f1:0d:d8:b8:8a:34:e7:ea:53:63:14:d1:12: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9F:72:31:BC:9E:EC:D2:74:8D:48:61:C9:AB:82:9F:88:24:5A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl X509v3 Authority Key Identifier: keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer sbgp-ipAddrBlock: critical IPv4: 23.83.220.0-23.83.222.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b5:32:a9:cc:81:3d:90:3c:2d:2a:ad:91:cb:bd:85:9b:3c: 3d:d2:d3:9d:2a:6f:12:ee:8a:39:d3:76:1b:00:f2:56:b1:79: 39:86:20:08:55:56:bb:53:05:bd:60:e3:5c:e6:39:93:fd:36: 42:79:00:17:1f:b4:7c:85:b3:2a:44:ef:70:a5:02:ef:9f:f9: 8f:92:46:72:44:1a:c4:1d:3b:7e:42:d5:20:9b:c7:57:46:9a: e3:c1:0d:0d:7a:2a:e1:f5:63:76:cf:16:67:d6:a7:91:6d:ec: 7d:3b:07:24:62:4a:43:69:c3:ad:79:7c:8f:de:fc:bb:e0:df: e9:48:15:96:bf:45:da:f9:6f:e6:04:c8:ea:cd:c5:fd:b4:70: 2c:f5:30:dc:a4:06:0e:f3:b7:70:ac:c9:20:9d:92:f9:0c:c8: 47:54:83:ab:da:99:f1:22:83:75:90:fb:da:e2:34:43:e9:7f: 99:ca:5b:56:dc:11:05:6e:98:56:d7:2c:7f:91:a1:7e:5e:61: cc:75:b2:d2:33:3b:3e:3d:36:d7:3f:16:5a:96:da:5d:ea:7f: ce:ed:0b:4a:de:e1:af:00:43:28:5a:dc:33:9e:5d:b7:ec:98: f2:f0:05:57:e4:e6:36:77:ed:d9:c5:0c:5d:1e:90:48:2e:ee: 8d:5f:f5:91 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEp+e18uJbYszTOUgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJjMGYyZGItZWNiYy00Y2M3LTg4YWYtYWMxZThhNzdi ODEwMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk Nzg4MTdhYmItM2VmNS00MzI1LThmZTktNjZkMzhmM2FmZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTGLV+741IvqpVoTKsPqEN30zeoXzEx3xiMK oIZdhtXwIOpxO3EGdKstt/otKyT2oHeu9ZmyibOKwdQBA/VsSJCTcDcyfYOl94lL 1MOFJITCdit/ZQjQl14NHLuHWMhVB9+tHWMS/o/WnswOYTQuc0IA0anoxrYmJn7A m8HBZ8JtEN/jHvmODfXn6sjGt5zua/7UcpeIvL814kM/cGmFzeSdx0+SxGhZKhCF zEIMwK0ylIY/oxLvhj0fI0ghUYJ3xAatbzmpSYuH+gG36AieaNcvDHz9Ls7HdQzk LgrW0BD56l/EWR12xawpIV1l7Zj/OvEN2LiKNOfqU2MU0RKysQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFF+fcjG8nuzSdI1IYcmrgp+IJFoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YmMw ZjJkYi1lY2JjLTRjYzctODhhZi1hYzFlOGE3N2I4MTAvY2E1MmExZjctZDdjNC0z NzUwLWJkYTUtOWRkMTFkOGIyZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGJjMGYyZGItZWNiYy00Y2M3LTg4 YWYtYWMxZThhNzdiODEwLzhiYzBmMmRiLWVjYmMtNGNjNy04OGFmLWFjMWU4YTc3 YjgxMC5jcmwwHwYDVR0jBBgwFoAU/8Sy6E8z6ASyYbONggEDa75zzlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YmMwZjJkYi1lY2JjLTRjYzctODhhZi1hYzFl OGE3N2I4MTAuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIXU9wD BAAXU94wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnrUyqcyBPZA8LSqtkcu9hZs8PdLTnSpvEu6KOdN2GwDy VrF5OYYgCFVWu1MFvWDjXOY5k/02QnkAFx+0fIWzKkTvcKUC75/5j5JGckQaxB07 fkLVIJvHV0aa48ENDXoq4fVjds8WZ9ankW3sfTsHJGJKQ2nDrXl8j978u+Df6UgV lr9F2vlv5gTI6s3F/bRwLPUw3KQGDvO3cKzJIJ2S+QzIR1SDq9qZ8SKDdZD72uI0 Q+l/mcpbVtwRBW6YVtcsf5Ghfl5hzHWy0jM7Pj021z8WWpbaXep/zu0LSt7hrwBD KFrcM55dt+yY8vAFV+TmNnft2cUMXR6QSC7ujV/1kQ== -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:02 2025 by rpki-client