$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa File: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (raw, json) Hash identifier: c0dBnZD6ZTJ7N83SNxak6He8AiAc8HCCpScXYO8mqCg= Subject key identifier: E8:B9:7E:9A:3C:AB:D4:97:64:89:C2:1B:A2:EC:2A:41:12:34:27:63 Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F4328584AB4EB79BD9FD4CBEE110FE600 Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 55077 IP address blocks: 23.128.208.0/24 maxlen: 24 103.25.230.0/24 maxlen: 24 104.36.4.0/22 maxlen: 22 198.44.204.0/22 maxlen: 22 2602:ff31::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:79:bd:9f:d4:cb:ee:11:0f:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=033b772e-4525-46fd-88c9-132a30c90666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:ce:35:23:bd:44:ee:e9:4a:a6:fe:d1:93: 61:1e:c6:90:7f:46:45:52:3f:0b:a2:ec:30:8c:14: 6e:bc:74:2d:fa:a4:6e:b4:c1:f5:61:a7:a7:4a:94: 18:0f:db:c4:10:f0:a4:f8:6f:37:5e:67:d4:4b:0f: cd:0c:f5:59:e8:d4:74:20:9b:89:a7:01:52:29:d7: 8c:65:a6:48:4f:e2:c4:7c:cd:ee:c5:e1:cd:d4:fc: b5:d6:02:40:66:ec:ea:a3:3b:c0:7a:1e:2f:1a:08: 27:1e:1e:1f:0e:e6:d3:07:39:77:16:b4:72:26:ed: 88:14:0b:af:b4:bf:6b:a1:8c:cd:fd:c5:ec:4f:3b: 53:07:24:e2:d3:82:f9:52:05:58:bd:49:0a:a0:69: 04:8e:ce:b3:ce:96:e4:df:0b:f1:74:62:21:76:f6: ee:85:ad:20:74:93:c0:da:8a:dd:87:e5:a6:3f:c8: 9f:9f:aa:eb:37:02:2a:44:b7:e4:14:21:24:4a:01: 71:1c:d6:89:29:5a:49:ee:65:6d:ec:00:09:77:bb: 03:76:18:13:ab:2b:da:19:f6:f6:1f:5c:c1:0c:5c: c4:1f:72:ee:16:d2:e0:14:6e:a3:5d:5c:58:32:9e: dc:4b:b1:83:95:5d:e1:7a:ee:06:de:7c:9b:9f:0b: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B9:7E:9A:3C:AB:D4:97:64:89:C2:1B:A2:EC:2A:41:12:34:27:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: 23.128.208.0/24 103.25.230.0/24 104.36.4.0/22 198.44.204.0/22 IPv6: 2602:ff31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:56:ce:cf:89:52:68:d4:ba:17:f6:ea:01:fc:ff:fd:98:a6: fd:b6:23:1a:94:11:b0:cc:55:77:c6:d4:91:1f:56:dc:44:d0: 00:05:b7:68:fb:b6:f8:00:14:e2:2c:7a:ff:41:06:e8:50:10: fe:29:23:04:d6:80:f4:8e:a6:3a:32:a3:66:ee:e1:98:2a:e6: d2:95:7b:9a:6f:69:3e:ca:fc:92:3c:7a:4d:09:85:c5:fc:ee: bc:ae:c3:5d:f0:64:02:12:d6:fc:56:5a:80:90:d1:c9:36:35: 53:70:be:5d:87:e2:18:8f:4a:9a:7a:56:49:dc:e8:2b:ee:f1: 57:0f:6c:ca:4d:68:21:99:9a:85:20:49:4d:a3:aa:90:98:b0: 5b:6c:70:fe:34:6d:9c:b4:a2:e0:20:7b:15:19:d1:82:35:41: a3:f0:04:ea:77:2d:ba:70:7d:8f:d2:a3:2a:49:3b:72:d6:bd: a8:82:6e:5f:cc:84:7d:23:53:09:d6:40:db:da:cd:19:02:00: 54:bd:fb:c9:0d:08:eb:89:c9:23:43:3d:a7:4e:7f:7e:cf:1c: d4:13:4f:18:57:a0:35:1b:d4:68:ac:a7:e0:a0:bf:cd:62:2f: f0:b7:b9:9c:e7:a9:b5:ae:50:a1:8c:4e:45:64:29:64:2e:bd: 8c:5b:07:40 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEq063m9n9TL7hEP5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDMzYjc3MmUtNDUyNS00NmZkLTg4YzktMTMyYTMwYzkwNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhjONSO9RO7pSqb+0ZNhHsaQf0ZFUj8Louww jBRuvHQt+qRutMH1YaenSpQYD9vEEPCk+G83XmfUSw/NDPVZ6NR0IJuJpwFSKdeM ZaZIT+LEfM3uxeHN1Py11gJAZuzqozvAeh4vGggnHh4fDubTBzl3FrRyJu2IFAuv tL9roYzN/cXsTztTByTi04L5UgVYvUkKoGkEjs6zzpbk3wvxdGIhdvbuha0gdJPA 2ordh+WmP8ifn6rrNwIqRLfkFCEkSgFxHNaJKVpJ7mVt7AAJd7sDdhgTqyvaGfb2 H1zBDFzEH3LuFtLgFG6jXVxYMp7cS7GDlV3heu4G3nybnwtPNwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFOi5fpo8q9SXZInCG6LsKkESNCdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvOTFlYzFiOWEtNTMxOC0z YjBiLThkMGQtMTgxODNlNzFlOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQAF4DQAwQA ZxnmAwQCaCQEAwQCxizMMA4EAgACMAgDBgQmAv8xADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCVs7PiVJo 1LoX9uoB/P/9mKb9tiMalBGwzFV3xtSRH1bcRNAABbdo+7b4ABTiLHr/QQboUBD+ KSME1oD0jqY6MqNm7uGYKubSlXuab2k+yvySPHpNCYXF/O68rsNd8GQCEtb8VlqA kNHJNjVTcL5dh+IYj0qaelZJ3Ogr7vFXD2zKTWghmZqFIElNo6qQmLBbbHD+NG2c tKLgIHsVGdGCNUGj8ATqdy26cH2P0qMqSTty1r2ogm5fzIR9I1MJ1kDb2s0ZAgBU vfvJDQjrickjQz2nTn9+zxzUE08YV6A1G9RorKfgoL/NYi/wt7mc56m1rlChjE5F ZClkLr2MWwdA -----END CERTIFICATE-----Generated at Sun Aug 10 03:45:26 2025 by rpki-client