$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/c5e4f88d-2b48-3259-a1dc-3a1d758134d2.roa File: c5e4f88d-2b48-3259-a1dc-3a1d758134d2.roa (raw, json) Hash identifier: PETFB7RKIOkuCl1QFHO00tSCnA0m5rqacmGSni/Ly+U= Subject key identifier: DC:22:39:70:E2:17:E0:2E:EA:78:81:FD:8B:FD:16:EC:83:23:4D:C8 Certificate issuer: /CN=05e336d7-fd68-448f-97a9-1e062f1a6b56 Certificate serial: 010D0C9F4328584AB91B9E89CCE64DBDF30FCA00 Authority key identifier: F0:6A:81:19:4F:8E:3A:C2:D0:9B:49:21:60:40:EB:81:4C:2F:00:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/c5e4f88d-2b48-3259-a1dc-3a1d758134d2.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 31898 IP address blocks: 23.172.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:9e:89:cc:e6:4d:bd:f3:0f:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e336d7-fd68-448f-97a9-1e062f1a6b56 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=98f80117-a1cd-4a6a-b8c5-af47aba472da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:4f:b5:03:00:a1:8d:6f:17:7b:15:9c:ab: 0d:6f:86:ef:f6:4f:1d:d7:c6:be:b9:62:c0:dc:99: 61:d7:82:76:04:cc:37:1b:70:05:bb:1d:2d:07:6b: 62:bb:6a:dd:25:6b:47:b7:37:4d:de:78:4a:76:b4: 1a:4a:9a:86:9f:90:d2:66:3d:41:a2:5a:d2:42:96: 97:c4:3f:ce:95:bd:ef:c2:46:96:1a:cc:31:06:85: 83:4c:6d:84:37:06:68:e1:49:04:6a:0b:8b:14:1e: e6:24:7f:80:f3:b6:22:d3:8f:ca:7c:b1:bf:9d:b2: 08:33:c0:9e:88:4d:97:0f:8e:a6:8c:e5:5e:16:9c: fd:c7:76:c5:08:17:68:dd:ea:fb:41:c0:cb:ff:1e: fd:b3:3d:2d:76:74:8d:08:b1:08:b5:49:c6:3a:4b: c8:bb:7b:38:36:e3:e6:ff:b1:8a:73:ee:34:43:ec: 90:25:1d:21:49:a7:2d:69:01:92:48:a6:e0:fb:1a: a7:b9:6d:be:0f:a7:c2:a6:01:0c:a6:6b:74:96:79: 0f:61:ae:3f:ff:2d:81:5d:8c:91:bb:af:2a:95:35: a4:79:85:df:7a:d0:71:f4:be:03:27:6f:ea:17:2a: 67:c9:a1:e8:12:ab:04:f7:0b:10:57:43:bf:8b:1b: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:22:39:70:E2:17:E0:2E:EA:78:81:FD:8B:FD:16:EC:83:23:4D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/c5e4f88d-2b48-3259-a1dc-3a1d758134d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.crl X509v3 Authority Key Identifier: keyid:F0:6A:81:19:4F:8E:3A:C2:D0:9B:49:21:60:40:EB:81:4C:2F:00:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer sbgp-ipAddrBlock: critical IPv4: 23.172.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:56:5d:b9:16:68:fd:3c:0d:e8:4a:d1:b6:cd:ef:cf:74:1f: 8e:1d:f1:f9:c9:ba:63:78:90:d3:b3:84:6c:f9:62:15:0b:da: 8c:11:41:d8:25:b0:68:1a:c3:6d:84:0b:db:48:d8:a1:31:15: 1e:cb:4b:bf:66:73:fe:22:66:c7:99:a6:dd:51:b7:a8:37:4e: b3:d7:91:25:04:72:35:0a:e8:cd:d1:b6:88:c9:0c:12:81:41: f4:55:fb:77:05:ad:aa:fe:0c:12:8c:61:ba:98:7b:83:03:c7: 3b:c4:9a:2d:e1:0e:8a:39:bd:37:22:5d:85:ee:5e:a3:b2:9d: 3f:6d:a1:b3:c9:e8:d0:f0:74:b1:aa:4a:4d:5a:e5:61:e3:25: ef:f7:c7:07:d9:e6:cd:e5:dd:84:89:a3:d2:a6:d5:16:04:0c: ae:d0:51:fe:db:a3:b2:56:22:8d:2b:78:f5:e1:93:0e:fc:b7: a2:cc:f0:27:ad:1a:26:90:97:71:42:5a:81:03:70:63:7e:4d: 3d:a4:64:06:3f:ad:ae:94:3c:c9:87:10:4a:ff:f8:8b:ea:99: 27:de:45:41:27:0a:ef:cc:11:2a:33:c1:56:e7:70:74:6e:63: 58:da:00:ba:1a:30:d0:21:b1:11:28:fc:eb:34:50:49:ab:c6: 7e:8a:40:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G56JzOZNvfMPygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVlMzM2ZDctZmQ2OC00NDhmLTk3YTktMWUwNjJmMWE2 YjU2MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OThmODAxMTctYTFjZC00YTZhLWI4YzUtYWY0N2FiYTQ3MmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxytPtQMAoY1vF3sVnKsNb4bv9k8d18a+uWLA 3Jlh14J2BMw3G3AFux0tB2tiu2rdJWtHtzdN3nhKdrQaSpqGn5DSZj1BolrSQpaX xD/Olb3vwkaWGswxBoWDTG2ENwZo4UkEaguLFB7mJH+A87Yi04/KfLG/nbIIM8Ce iE2XD46mjOVeFpz9x3bFCBdo3er7QcDL/x79sz0tdnSNCLEItUnGOkvIu3s4NuPm /7GKc+40Q+yQJR0hSactaQGSSKbg+xqnuW2+D6fCpgEMpmt0lnkPYa4//y2BXYyR u68qlTWkeYXfetBx9L4DJ2/qFypnyaHoEqsE9wsQV0O/ixu9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwiOXDiF+Au6niB/Yv9FuyDI03IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wNWUz MzZkNy1mZDY4LTQ0OGYtOTdhOS0xZTA2MmYxYTZiNTYvYzVlNGY4OGQtMmI0OC0z MjU5LWExZGMtM2ExZDc1ODEzNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDVlMzM2ZDctZmQ2OC00NDhmLTk3 YTktMWUwNjJmMWE2YjU2LzA1ZTMzNmQ3LWZkNjgtNDQ4Zi05N2E5LTFlMDYyZjFh NmI1Ni5jcmwwHwYDVR0jBBgwFoAU8GqBGU+OOsLQm0khYEDrgUwvALowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wNWUzMzZkNy1mZDY4LTQ0OGYtOTdhOS0xZTA2 MmYxYTZiNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFWXbkWaP08DehK0bbN7890H44d8fnJumN4kNOzhGz5YhUL2owRQdgl sGgaw22EC9tI2KExFR7LS79mc/4iZseZpt1Rt6g3TrPXkSUEcjUK6M3RtojJDBKB QfRV+3cFrar+DBKMYbqYe4MDxzvEmi3hDoo5vTciXYXuXqOynT9tobPJ6NDwdLGq Sk1a5WHjJe/3xwfZ5s3l3YSJo9Km1RYEDK7QUf7bo7JWIo0rePXhkw78t6LM8Cet GiaQl3FCWoEDcGN+TT2kZAY/ra6UPMmHEEr/+IvqmSfeRUEnCu/MESozwVbncHRu Y1jaALoaMNAhsREo/Os0UEmrxn6KQAQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:14 2025 by rpki-client