$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/614cd895-dc9b-30df-8992-ecca998fa5ee.roa File: 614cd895-dc9b-30df-8992-ecca998fa5ee.roa (raw, json) Hash identifier: XYBbAcBW9An12tIwG8drxvbV4tQkFdBMCNmwk6TGZUU= Subject key identifier: 33:BD:4A:4D:99:01:4F:AF:86:59:EA:7D:9E:89:0B:02:AE:07:E5:9F Certificate issuer: /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d Certificate serial: 010D0C9F4328584ABD4BAD946C00E88D935D8D00 Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/614cd895-dc9b-30df-8992-ecca998fa5ee.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 147002 IP address blocks: 23.173.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:ad:94:6c:00:e8:8d:93:5d:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=28ba541f-1d3f-455a-b471-57e2f8340114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:0b:b0:bf:21:4b:38:9d:35:f3:36:13:74: 2a:fb:bf:c1:da:f0:62:ee:21:62:a5:e0:f0:7d:1e: a7:77:bd:b4:9d:af:ef:f0:8e:ac:ad:4c:b8:97:c8: 8a:fc:b9:c7:92:dd:58:1d:ac:67:22:fd:65:25:b7: 99:b7:08:b1:3d:55:76:2b:d6:5e:53:a8:4c:4d:96: d0:6a:51:a3:a0:90:85:c7:a8:1d:80:21:06:e3:7f: 7e:15:62:86:fb:6c:9d:90:57:1f:e6:f2:e2:2d:7a: 76:1d:9c:29:d4:c5:e4:0b:5a:0a:39:0a:a8:2c:df: c0:58:4c:dd:ae:7c:a9:c3:67:ed:83:5e:1d:ae:67: 2c:f9:be:4f:86:96:b6:0b:11:0e:59:d5:16:da:fd: 54:67:05:a8:d1:45:e1:04:87:7a:eb:f7:8f:af:e4: ee:05:a6:a7:2d:3e:ff:ba:5d:a9:e1:4f:fa:41:f4: 09:c2:c1:6f:67:05:19:63:b9:5d:61:b7:b7:55:d4: fb:3d:7f:b6:bd:66:5c:de:de:63:59:80:bd:ff:0e: d5:9a:d9:7a:95:15:ac:8c:77:58:28:d7:96:db:ad: 7f:b5:4b:28:5e:bd:ef:c5:73:b5:0e:d7:7a:1d:25: 1a:39:72:f0:d6:4c:e0:3f:40:ba:01:19:7b:f4:9e: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BD:4A:4D:99:01:4F:AF:86:59:EA:7D:9E:89:0B:02:AE:07:E5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/614cd895-dc9b-30df-8992-ecca998fa5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl X509v3 Authority Key Identifier: keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ac:a8:33:aa:de:53:63:3d:96:77:20:b7:b8:4e:36:f2:49: cb:5a:be:47:54:4f:a0:f5:e9:d3:5d:c3:8c:46:cb:1a:f1:d1: 6b:44:68:a1:13:fa:fd:4b:2f:11:e1:a3:5a:0c:04:06:0e:a7: ee:32:0d:3e:7f:3c:99:89:dd:3e:28:95:f2:ff:30:09:fb:25: 61:19:4d:43:d5:d3:53:c4:57:3d:93:09:80:40:93:ee:ef:f1: b0:be:e1:a0:8d:e0:ef:6a:40:5f:47:b8:10:d0:94:16:4b:bb: d6:cb:65:df:cd:c8:f7:a6:01:60:40:d8:aa:c5:69:b2:31:32: 4d:73:32:e9:7c:6a:cf:27:a7:cf:86:e8:b5:61:7a:42:54:6d: 44:5a:04:9f:79:31:76:a0:0b:7a:c1:f9:50:07:89:b8:97:01: d8:d2:d0:f9:da:96:fc:a9:da:12:6d:ff:5b:fb:ac:e9:de:48: fd:05:3a:00:8d:af:f2:08:f1:e6:f0:dc:c7:d8:fa:cb:f2:a5: 9a:f5:1b:e3:3b:c5:eb:df:04:2f:e8:56:f0:af:4c:8d:3e:ca: 89:51:1e:d8:23:19:af:de:d0:91:fa:38:d7:5c:d5:37:b5:3f: 09:53:33:a6:0d:2d:7c:5a:91:3f:75:d3:5a:67:b5:bc:9b:c7: 56:06:cf:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S62UbADojZNdjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1MTBiMWItNmEwZi00NmY5LTlhYjgtZjdmZTYzZmNi YTlkMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MjhiYTU0MWYtMWQzZi00NTVhLWI0NzEtNTdlMmY4MzQwMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj8LsL8hSzidNfM2E3Qq+7/B2vBi7iFipeDw fR6nd720na/v8I6srUy4l8iK/LnHkt1YHaxnIv1lJbeZtwixPVV2K9ZeU6hMTZbQ alGjoJCFx6gdgCEG439+FWKG+2ydkFcf5vLiLXp2HZwp1MXkC1oKOQqoLN/AWEzd rnypw2ftg14drmcs+b5Phpa2CxEOWdUW2v1UZwWo0UXhBId66/ePr+TuBaanLT7/ ul2p4U/6QfQJwsFvZwUZY7ldYbe3VdT7PX+2vWZc3t5jWYC9/w7Vmtl6lRWsjHdY KNeW261/tUsoXr3vxXO1Dtd6HSUaOXLw1kzgP0C6ARl79J7slQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO9Sk2ZAU+vhlnqfZ6JCwKuB+WfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZjUx MGIxYi02YTBmLTQ2ZjktOWFiOC1mN2ZlNjNmY2JhOWQvNjE0Y2Q4OTUtZGM5Yi0z MGRmLTg5OTItZWNjYTk5OGZhNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGY1MTBiMWItNmEwZi00NmY5LTlh YjgtZjdmZTYzZmNiYTlkLzBmNTEwYjFiLTZhMGYtNDZmOS05YWI4LWY3ZmU2M2Zj YmE5ZC5jcmwwHwYDVR0jBBgwFoAUldrP9s54qwhp1y+b54HgD0CNllMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZjUxMGIxYi02YTBmLTQ2ZjktOWFiOC1mN2Zl NjNmY2JhOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF63YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6sqDOq3lNjPZZ3ILe4TjbySctavkdUT6D16dNdw4xGyxrx0WtEaKET +v1LLxHho1oMBAYOp+4yDT5/PJmJ3T4olfL/MAn7JWEZTUPV01PEVz2TCYBAk+7v 8bC+4aCN4O9qQF9HuBDQlBZLu9bLZd/NyPemAWBA2KrFabIxMk1zMul8as8np8+G 6LVhekJUbURaBJ95MXagC3rB+VAHibiXAdjS0Pnalvyp2hJt/1v7rOneSP0FOgCN r/II8ebw3MfY+svypZr1G+M7xevfBC/oVvCvTI0+yolRHtgjGa/e0JH6ONdc1Te1 PwlTM6YNLXxakT9101pntbybx1YGz/A= -----END CERTIFICATE-----Generated at Mon Aug 4 19:09:07 2025 by rpki-client