$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa File: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (raw, json) Hash identifier: PnedNOMYbm56SgCg4MBvk893lckGBWVUcgXOTm7cMQM= Subject key identifier: 29:79:B6:0F:08:04:E1:50:47:58:A4:7E:0D:37:5C:BA:A0:7E:88:3C Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F4328584AB4EB7F002A7BFE74E96EB6DE Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 40205 IP address blocks: 23.189.216.0/24 maxlen: 24 2620:cd:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7f:00:2a:7b:fe:74:e9:6e:b6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6eb1dbb6-cead-46d1-bf11-a190a2c10ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:a4:ae:bd:66:a2:02:7d:56:cf:83:e4:a3: 89:32:ea:32:5a:6c:18:ad:2d:7e:75:3f:d5:64:f4: c0:81:74:a3:c9:65:16:74:53:d6:52:21:ec:bd:96: 7a:6d:1f:44:b9:3e:f3:96:ba:fc:9d:1a:ba:07:7c: 76:60:d1:90:30:84:5b:0d:78:72:45:c9:77:b0:f5: 0e:57:9e:85:90:dc:01:13:e1:c5:91:f8:3a:d4:c1: 13:a6:98:39:ea:a3:fa:58:19:33:dc:f6:55:d1:9a: 14:96:b2:20:0e:da:da:48:46:47:e1:f6:13:f6:07: db:3a:ff:39:f7:69:6f:fc:36:9e:21:ea:b5:0c:c6: 7e:06:8e:c5:03:d5:16:1e:17:c6:34:10:44:d8:27: f4:19:5c:99:98:a4:0e:98:b9:c7:55:72:62:f8:39: c6:53:15:e3:52:3a:f8:bf:b0:28:4b:e3:f5:a1:ec: 23:71:85:30:e0:ab:43:f7:2a:ae:4b:6e:01:82:cb: 10:f5:bb:ad:fa:85:9a:02:9e:56:7b:44:9a:56:18: 2f:da:a6:9d:56:a8:6d:4b:13:30:c5:52:9a:de:c7: 18:4f:77:e2:92:cb:01:1b:25:93:62:9b:05:03:1c: d4:d7:58:6a:70:b8:d3:1e:67:8e:79:e6:b9:98:12: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:79:B6:0F:08:04:E1:50:47:58:A4:7E:0D:37:5C:BA:A0:7E:88:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: 23.189.216.0/24 IPv6: 2620:cd:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:bf:5b:55:84:bc:26:77:a0:8f:05:f3:6b:1f:87:f9:64:b3: 11:4d:ba:fd:47:b5:2c:aa:48:61:cf:94:e6:65:5f:23:75:a8: 29:40:c7:3c:6e:e5:f1:c1:f9:80:36:25:d1:d8:ac:ee:26:ef: d3:e6:3d:42:53:e0:b3:14:71:e6:17:c1:b8:0c:97:06:20:9b: 89:1f:76:0c:3d:b5:57:cd:c6:cc:c1:c4:51:b0:b8:2d:f8:ef: 66:41:03:b5:1a:fa:00:82:ef:18:cd:41:50:cd:6b:63:db:9b: ab:ed:01:ab:99:07:db:b3:30:81:8c:da:45:de:1b:8d:ae:c8: 2c:ef:9a:25:60:ed:f1:a4:b2:17:23:90:bc:54:c6:89:ba:1d: 48:93:88:bd:81:65:51:95:bc:12:b4:ac:42:a2:09:33:22:ad: e2:17:02:11:ca:8c:fc:3f:a7:14:3d:0d:2e:2f:4f:5b:6d:32: b0:de:e0:17:cc:11:ee:f9:74:10:fe:fe:f5:2e:63:4e:5d:e6: 4b:9f:ef:27:07:f7:82:f6:21:f9:2c:b0:f8:97:0c:34:5e:e5: 38:24:8b:0a:af:3d:63:9f:20:4d:1e:c3:7b:8b:f6:52:2d:e5: ca:77:7c:ed:4b:6b:9b:81:91:78:5a:c3:85:09:0f:84:f3:12: 1e:a9:0f:16 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq0638AKnv+dOlutt4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NmViMWRiYjYtY2VhZC00NmQxLWJmMTEtYTE5MGEyYzEwYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFakrr1mogJ9Vs+D5KOJMuoyWmwYrS1+dT/V ZPTAgXSjyWUWdFPWUiHsvZZ6bR9EuT7zlrr8nRq6B3x2YNGQMIRbDXhyRcl3sPUO V56FkNwBE+HFkfg61METppg56qP6WBkz3PZV0ZoUlrIgDtraSEZH4fYT9gfbOv85 92lv/DaeIeq1DMZ+Bo7FA9UWHhfGNBBE2Cf0GVyZmKQOmLnHVXJi+DnGUxXjUjr4 v7AoS+P1oewjcYUw4KtD9yquS24BgssQ9but+oWaAp5We0SaVhgv2qadVqhtSxMw xVKa3scYT3fikssBGyWTYpsFAxzU11hqcLjTHmeOeea5mBLeNQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCl5tg8IBOFQR1ikfg03XLqgfog8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMDU0NWM4ZDgtMmJlNS0z ODcyLThmYTEtNTU2NjhkMWYxOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF73YMA8E AgACMAkDBwAmIADNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT79bVYS8JnegjwXzax+H+WSzEU26/Ue1 LKpIYc+U5mVfI3WoKUDHPG7l8cH5gDYl0dis7ibv0+Y9QlPgsxRx5hfBuAyXBiCb iR92DD21V83GzMHEUbC4LfjvZkEDtRr6AILvGM1BUM1rY9ubq+0Bq5kH27MwgYza Rd4bja7ILO+aJWDt8aSyFyOQvFTGibodSJOIvYFlUZW8ErSsQqIJMyKt4hcCEcqM /D+nFD0NLi9PW20ysN7gF8wR7vl0EP7+9S5jTl3mS5/vJwf3gvYh+Syw+JcMNF7l OCSLCq89Y58gTR7De4v2Ui3lynd87Utrm4GReFrDhQkPhPMSHqkPFg== -----END CERTIFICATE-----Generated at Tue Aug 5 20:06:01 2025 by rpki-client