$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa File: 07cd9fc5-1051-39bc-bd56-dadd655c312e.roa (raw, json) Hash identifier: 8JAGI8kbSVe5zl8CR67TlFIyT8M9+oubSB0O0QsfdHw= Subject key identifier: 11:F8:F4:F4:03:E6:13:D4:A0:50:35:11:6E:7A:D4:18:7A:72:6E:B9 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584A94D0D2E396EDF63054C1CE40 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 400226 IP address blocks: 23.128.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d2:e3:96:ed:f6:30:54:c1:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=9d406ca5-219b-4033-a9f4-e8543e85d54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:69:1e:55:15:35:02:c7:ed:4f:dd:4f:24: 3f:c9:93:9f:f0:79:5d:41:85:a7:74:7c:b9:0d:e9: fc:11:f4:85:6b:c3:bd:dc:16:8f:5e:f3:dd:e0:94: 10:2b:78:0c:c5:d8:3a:03:e1:1a:be:83:b8:7f:ca: c5:09:68:60:fa:d5:4a:2c:2a:80:11:db:5f:d5:8b: 59:10:04:27:62:f2:29:14:6f:11:ce:4f:88:a9:e9: b1:73:6c:ff:f7:4c:31:d3:1f:20:b7:d0:82:81:10: a7:ab:b2:8b:31:89:d7:e9:6e:5c:85:03:87:2f:0b: a3:fd:67:e0:ed:7f:39:48:3d:75:0f:c9:56:3b:23: 7c:7c:33:4b:bc:8c:7c:d2:c7:91:d4:ab:10:f6:f4: 0d:59:12:54:86:82:ee:1d:63:ed:dc:b3:d8:f4:e4: f2:49:5d:d9:5d:0f:87:ca:e9:5d:3f:29:61:e3:8f: 18:71:f2:ad:69:c8:d4:ca:7f:f7:5c:93:fd:33:b0: e8:a6:cc:c8:92:0a:25:95:0f:f3:74:ab:f9:c6:7d: df:0f:d4:a3:89:0b:37:e3:a7:6f:3f:40:10:89:07: ad:e6:0c:7f:05:b4:13:a2:19:e6:cd:68:6c:59:d7: 35:da:49:85:38:16:e5:56:d9:3c:a6:7e:93:b9:1c: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F8:F4:F4:03:E6:13:D4:A0:50:35:11:6E:7A:D4:18:7A:72:6E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:78:d2:3d:c4:01:c2:1d:8f:64:62:d9:16:d0:77:c9:bc:bf: 64:fe:b4:22:53:8b:1b:9c:20:50:e6:43:66:21:57:c5:1d:6c: bb:81:22:54:36:1d:08:c7:68:c1:56:7c:65:b5:17:83:01:6f: 52:3e:6a:fc:07:a2:4e:b9:cf:49:df:10:8f:04:b2:41:cb:d3: ab:f7:e6:ed:a4:23:6b:b9:82:92:b6:8d:75:87:b8:9c:15:25: 73:6d:81:46:84:9a:0d:19:7b:a7:c0:ab:7b:ce:ee:58:80:38: 25:0f:e3:4f:fb:96:4d:16:4b:d8:64:bb:8a:87:af:7e:c7:43: 0a:41:55:73:8d:5f:19:b9:17:8f:8f:07:55:0e:02:4f:ad:43: b3:cc:72:04:71:96:92:09:df:31:49:33:94:ff:2c:dd:d0:71: 77:10:ac:d5:ae:8c:8c:4e:35:1d:f3:5a:04:fb:52:b5:29:74: c2:3b:f1:90:e0:39:e6:5d:46:16:12:6d:00:04:ab:48:76:4c: 09:e2:15:54:09:79:ad:8d:e2:b9:f0:ce:20:13:b5:4e:c5:a3: 1a:ee:46:fd:25:0c:60:0d:5f:cd:84:62:aa:42:0e:45:7a:87: 50:af:be:18:1a:8d:ce:2d:5c:70:d1:ac:bd:15:e8:9f:5d:fb: 40:41:c9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NLjlu32MFTBzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk OWQ0MDZjYTUtMjE5Yi00MDMzLWE5ZjQtZTg1NDNlODVkNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHhpHlUVNQLH7U/dTyQ/yZOf8HldQYWndHy5 Den8EfSFa8O93BaPXvPd4JQQK3gMxdg6A+EavoO4f8rFCWhg+tVKLCqAEdtf1YtZ EAQnYvIpFG8Rzk+Iqemxc2z/90wx0x8gt9CCgRCnq7KLMYnX6W5chQOHLwuj/Wfg 7X85SD11D8lWOyN8fDNLvIx80seR1KsQ9vQNWRJUhoLuHWPt3LPY9OTySV3ZXQ+H yuldPylh448YcfKtacjUyn/3XJP9M7DopszIkgollQ/zdKv5xn3fD9SjiQs346dv P0AQiQet5gx/BbQTohnmzWhsWdc12kmFOBblVtk8pn6TuRx5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH49PQD5hPUoFA1EW561Bh6cm65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMDdjZDlmYzUtMTA1MS0z OWJjLWJkNTYtZGFkZDY1NWMzMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKt40j3EAcIdj2Ri2RbQd8m8v2T+tCJTixucIFDmQ2YhV8UdbLuBIlQ2 HQjHaMFWfGW1F4MBb1I+avwHok65z0nfEI8EskHL06v35u2kI2u5gpK2jXWHuJwV JXNtgUaEmg0Ze6fAq3vO7liAOCUP40/7lk0WS9hku4qHr37HQwpBVXONXxm5F4+P B1UOAk+tQ7PMcgRxlpIJ3zFJM5T/LN3QcXcQrNWujIxONR3zWgT7UrUpdMI78ZDg OeZdRhYSbQAEq0h2TAniFVQJea2N4rnwziATtU7FoxruRv0lDGANX82EYqpCDkV6 h1Cvvhgajc4tXHDRrL0V6J9d+0BByeM= -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:22 2025 by rpki-client