$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa File: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (raw, json) Hash identifier: AnSfzbUDqZnjTNnejVs7UgtGY4FZydhZTYYOaSvsnxs= Subject key identifier: D5:05:98:4A:F5:14:72:4B:17:52:B0:28:88:31:7F:33:20:6E:4B:69 Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F4328584A9E961B58F86D1B7328905280 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 393524 IP address blocks: 23.134.16.0/24 maxlen: 24 23.134.17.0/24 maxlen: 24 23.135.18.0/24 maxlen: 24 104.192.96.0/22 maxlen: 22 104.245.136.0/22 maxlen: 22 2602:ff44::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1b:58:f8:6d:1b:73:28:90:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=199149a6-93fe-4b68-af1a-8bf2719bd723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c0:94:48:96:47:2d:cc:a1:24:3d:fa:13:38: 64:62:85:b9:1f:56:6c:4f:7c:97:65:88:f1:cf:3c: 22:05:80:63:44:66:d6:74:9a:bf:b8:b6:67:a5:e0: 56:4a:2e:a8:1b:7b:0f:30:f8:cc:d4:e5:99:cd:6b: 05:80:41:3f:53:bc:8c:2e:c6:7c:2b:09:cf:29:c0: ab:f0:e3:bd:15:54:dd:ed:08:e1:91:0b:11:36:07: fa:e6:c7:12:87:bf:84:1f:c2:9e:32:d1:9f:1f:c8: 19:1e:10:0b:f3:92:90:3e:1d:89:0c:e3:4b:b5:b4: 26:ef:8f:5d:01:6d:e5:c6:11:b5:ad:24:70:8c:c7: d5:9b:7d:23:91:96:ea:ca:9a:30:76:92:0b:15:4b: a7:2e:ab:cb:0b:1e:3f:38:71:8a:58:3e:37:f2:99: 00:de:66:05:e9:9f:57:f5:ed:4d:cf:60:f1:6e:ad: 6c:24:d2:2d:89:5f:7a:da:38:a9:f0:73:3f:cb:f7: b6:87:9b:a5:d7:29:4b:a9:de:ed:39:45:0f:a7:ac: 12:46:cc:c4:d3:b7:1b:9a:59:8e:b8:9b:d8:52:8c: a8:83:b1:99:a6:84:6f:9f:3f:9f:03:fe:b6:80:a1: 19:cc:1c:60:fb:fc:ca:95:c4:57:b6:88:fa:c7:79: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:05:98:4A:F5:14:72:4B:17:52:B0:28:88:31:7F:33:20:6E:4B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: 23.134.16.0/23 23.135.18.0/24 104.192.96.0/22 104.245.136.0/22 IPv6: 2602:ff44::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:37:7d:5b:9e:28:61:88:30:67:8e:1b:cd:b7:67:91:48:0a: 28:68:b4:1e:e6:dc:0e:f3:de:5d:54:1d:b7:28:ce:0c:0b:ae: f9:1e:87:c6:f4:bd:af:ee:c7:93:e9:29:27:43:6b:68:9a:f8: 26:7e:35:39:31:1d:6c:99:ca:3c:ba:85:97:24:37:52:ac:e2: b0:59:17:43:ae:da:02:07:84:5b:83:99:07:69:59:6c:4a:08: c0:a4:ef:41:a8:1f:3a:89:8b:ea:b7:5d:97:74:a6:2c:64:92: 10:09:2c:7f:87:59:e0:19:a6:64:55:2c:5b:ef:e7:ce:2c:d0: 0a:25:ce:6c:87:ef:80:5a:d7:79:3e:84:5a:5d:84:8f:bc:1f: 7a:20:d7:a4:64:f6:ce:28:9b:91:43:e8:0f:84:a6:52:58:f1: 2c:d6:d5:ec:69:2a:e8:2c:9b:8d:01:d4:30:26:21:20:36:8d: 53:b9:c5:11:60:e2:d0:b4:5f:83:96:7b:f3:e4:e9:b6:f7:91: 2a:a5:d6:2c:c1:a9:ce:23:6a:dc:90:fb:8e:11:f2:bb:56:74: a5:cb:45:6d:77:4d:4f:c9:4d:d8:f7:81:0a:39:de:5f:85:77: f9:c2:ed:86:d3:a8:e9:36:e7:5f:91:83:18:84:6e:40:a8:dd: 94:3d:37:87 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEqelhtY+G0bcyiQUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTk5MTQ5YTYtOTNmZS00YjY4LWFmMWEtOGJmMjcxOWJkNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MCUSJZHLcyhJD36EzhkYoW5H1ZsT3yXZYjx zzwiBYBjRGbWdJq/uLZnpeBWSi6oG3sPMPjM1OWZzWsFgEE/U7yMLsZ8KwnPKcCr 8OO9FVTd7QjhkQsRNgf65scSh7+EH8KeMtGfH8gZHhAL85KQPh2JDONLtbQm749d AW3lxhG1rSRwjMfVm30jkZbqypowdpILFUunLqvLCx4/OHGKWD438pkA3mYF6Z9X 9e1Nz2Dxbq1sJNItiV962jip8HM/y/e2h5ul1ylLqd7tOUUPp6wSRszE07cbmlmO uJvYUoyog7GZpoRvnz+fA/62gKEZzBxg+/zKlcRXtoj6x3lbdwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFNUFmEr1FHJLF1KwKIgxfzMgbktpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMDdhZmRiNWItZjMzOS0z YTFmLTkwOGEtMmI1YzkyMDQ0ZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQBF4YQAwQA F4cSAwQCaMBgAwQCaPWIMA4EAgACMAgDBgQmAv9EADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8N31bnihh iDBnjhvNt2eRSAooaLQe5twO895dVB23KM4MC675HofG9L2v7seT6SknQ2tomvgm fjU5MR1smco8uoWXJDdSrOKwWRdDrtoCB4Rbg5kHaVlsSgjApO9BqB86iYvqt12X dKYsZJIQCSx/h1ngGaZkVSxb7+fOLNAKJc5sh++AWtd5PoRaXYSPvB96INekZPbO KJuRQ+gPhKZSWPEs1tXsaSroLJuNAdQwJiEgNo1TucURYOLQtF+Dlnvz5Om295Eq pdYswanOI2rckPuOEfK7VnSly0Vtd01PyU3Y94EKOd5fhXf5wu2G06jpNudfkYMY hG5AqN2UPTeH -----END CERTIFICATE-----Generated at Tue Aug 5 19:57:22 2025 by rpki-client