$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa File: 032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (raw, json) Hash identifier: pHarQL6aX1SENF2qwdFgzg7PlRPw5ETBr8J5ZPLjfJ0= Subject key identifier: 31:96:BB:3C:17:B4:5A:C3:63:CF:7F:F8:11:61:76:2B:6E:01:F0:5D Certificate issuer: /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Certificate serial: 010D0C9F4328584A2ABADD2D9BD4DF670B13AF00 Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 22597 IP address blocks: 23.159.120.0/24 maxlen: 24 2607:5fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:dd:2d:9b:d4:df:67:0b:13:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=024240be-b713-470d-ad14-5a441d00a5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:89:c5:14:42:25:09:96:71:10:87:72:47: 40:9c:33:9e:29:4a:43:2c:c0:a3:bd:8d:32:64:9f: 20:42:93:01:40:c5:ea:22:05:4b:87:3f:35:ec:9b: 55:e0:02:eb:f2:6e:74:61:1f:ef:a7:72:a2:e4:cb: 6e:2a:4c:8e:10:0b:58:d3:7f:33:de:23:dc:c6:78: d8:20:0d:55:b8:36:51:76:50:0a:3f:22:c6:c5:ae: ab:1f:02:a6:52:0f:ba:a6:4b:16:78:b2:4b:82:4e: 10:77:6e:d6:26:85:db:80:c0:a5:7d:f0:76:e8:03: a6:91:67:ed:34:67:fc:f1:78:d0:71:d5:2c:a5:91: 4f:07:5a:4d:50:b7:34:b1:b3:82:8c:c3:89:34:be: e2:c6:cd:38:f4:84:73:e6:6b:31:eb:a6:2a:c8:d3: 8c:07:78:48:87:2a:60:95:d8:63:09:5e:54:11:3b: 69:35:a7:fc:2d:41:85:57:0a:99:d4:3e:80:06:be: 39:db:a9:9c:d5:b0:02:1a:1f:28:9c:f9:ca:87:70: bf:63:af:a5:1e:7f:b3:91:75:a7:b1:09:ee:7f:bf: 02:8f:0d:38:62:24:e0:59:de:17:b4:54:47:42:87: 08:87:fe:4c:b1:19:f5:e8:ae:94:6a:2e:0f:6d:a2: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:BB:3C:17:B4:5A:C3:63:CF:7F:F8:11:61:76:2B:6E:01:F0:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl X509v3 Authority Key Identifier: keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer sbgp-ipAddrBlock: critical IPv4: 23.159.120.0/24 IPv6: 2607:5fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:43:e0:fc:19:e8:d6:b8:3f:e0:20:13:8d:13:42:d9:12:bb: f1:a3:53:46:6a:64:ea:56:86:92:ec:6c:7c:2e:ea:b6:a7:59: 4e:23:99:c4:8a:cd:2e:e1:1a:3b:c2:5b:70:4f:27:8a:a8:ee: d8:fe:74:b4:65:8b:71:01:b4:b3:16:54:7d:30:a5:d1:fe:bd: 2a:eb:b0:f8:fe:0c:53:36:f7:24:79:be:56:36:7b:f1:e4:ba: ae:1b:6b:60:98:66:c0:be:c1:ef:e3:89:37:9d:d8:b1:53:a5: ae:4a:3f:8a:31:05:29:a6:43:19:f9:45:14:0d:a5:1e:15:84: 7d:1c:7d:99:9f:3e:f5:a4:6b:9d:47:a4:91:77:3f:64:32:4f: c3:0e:64:aa:e9:ed:12:b0:5d:43:21:72:5c:eb:50:07:91:95: b5:db:7a:c2:5f:99:1b:be:b1:32:92:96:68:d2:63:b2:dc:14: 8b:87:0b:3e:67:96:14:48:4f:ee:f1:48:eb:08:72:f9:5b:24: e6:18:d6:e6:75:8b:d9:ad:c5:7f:0d:85:e8:a3:d4:22:aa:10: 80:49:20:4f:32:b0:12:3d:3e:cd:f8:20:92:aa:53:10:43:d3: 3e:18:2b:8e:ab:85:d2:67:2e:cf:5b:54:73:69:a1:0d:6a:35: 95:68:41:c6 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEoqut0tm9TfZwsTrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQy OGY2MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MDI0MjQwYmUtYjcxMy00NzBkLWFkMTQtNWE0NDFkMDBhNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjGJxRRCJQmWcRCHckdAnDOeKUpDLMCjvY0y ZJ8gQpMBQMXqIgVLhz817JtV4ALr8m50YR/vp3Ki5MtuKkyOEAtY038z3iPcxnjY IA1VuDZRdlAKPyLGxa6rHwKmUg+6pksWeLJLgk4Qd27WJoXbgMClffB26AOmkWft NGf88XjQcdUspZFPB1pNULc0sbOCjMOJNL7ixs049IRz5msx66YqyNOMB3hIhypg ldhjCV5UETtpNaf8LUGFVwqZ1D6ABr4526mc1bACGh8onPnKh3C/Y6+lHn+zkXWn sQnuf78Cjw04YiTgWd4XtFRHQocIh/5MsRn16K6Uai4PbaKJywIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDGWuzwXtFrDY89/+BFhdituAfBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YWZk ODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvMDMyZmMxYjAtYjlhYy0z YzU0LWE2Y2ItYmRiNjQyYWMwMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGFmZDg4OTUtMTFlOS00M2Q0LWJi OWYtNjQwNDJiMWQyOGY2LzhhZmQ4ODk1LTExZTktNDNkNC1iYjlmLTY0MDQyYjFk MjhmNi5jcmwwHwYDVR0jBBgwFoAUGJWuJgDr5qBg6hkQe1mWeu7iWBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0 MmIxZDI4ZjYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF594MA0E AgACMAcDBQAmB1/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGlD4PwZ6Na4P+AgE40TQtkSu/GjU0ZqZOpW hpLsbHwu6ranWU4jmcSKzS7hGjvCW3BPJ4qo7tj+dLRli3EBtLMWVH0wpdH+vSrr sPj+DFM29yR5vlY2e/Hkuq4ba2CYZsC+we/jiTed2LFTpa5KP4oxBSmmQxn5RRQN pR4VhH0cfZmfPvWka51HpJF3P2QyT8MOZKrp7RKwXUMhclzrUAeRlbXbesJfmRu+ sTKSlmjSY7LcFIuHCz5nlhRIT+7xSOsIcvlbJOYY1uZ1i9mtxX8Nheij1CKqEIBJ IE8ysBI9Ps34IJKqUxBD0z4YK46rhdJnLs9bVHNpoQ1qNZVoQcY= -----END CERTIFICATE-----Generated at Mon Jun 16 15:39:03 2025 by rpki-client