$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa File: bcc02f4b-8494-3205-a39a-df56acb1455b.roa (raw, json) Hash identifier: IZemhQcJUZP+IdVYdy0WmW/egDjVpJfGZp27OUNokw0= Subject key identifier: 6A:59:77:B2:73:7A:0F:C3:E4:9B:93:AF:30:89:DF:7F:A3:24:F8:8E Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584AB650F91471F757AE8499F840 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 210110 IP address blocks: 23.247.132.0/22 maxlen: 24 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f9:14:71:f7:57:ae:84:99:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=526f6189-1232-4e3f-bd4c-f17c9106150a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:d8:79:d6:0a:01:5a:57:e7:4d:dd:5b:0d: a6:a1:f0:ce:93:66:5c:68:31:ad:d6:40:65:5e:f0: 3c:a4:4d:7b:e8:22:f0:bf:9d:c8:eb:e3:a8:39:41: 22:a8:b8:26:e2:da:c7:cf:6c:ec:b1:b9:f9:0e:46: 61:69:c3:e0:6b:7b:f8:08:a7:7e:5a:cd:64:9d:42: 7f:23:2e:46:c6:01:21:b4:8b:28:2c:67:05:bc:ff: 8f:bd:3c:d4:4d:8c:f6:36:b1:ae:af:43:b1:ef:e3: 5e:44:32:e4:e3:44:f2:71:1b:77:1b:29:13:18:3d: e8:8f:be:d7:0d:40:d4:7e:62:63:8d:4e:a2:22:4a: 40:cd:4b:50:26:e9:b1:f9:75:ee:f4:92:c9:2f:18: aa:80:45:d8:46:88:bb:40:ba:d5:32:29:85:c1:93: 08:27:49:02:b1:67:6b:6a:13:72:85:56:55:fa:ed: 32:e2:c2:ab:18:26:61:b3:92:83:83:d3:e6:40:12: e7:61:e2:ba:12:51:bd:65:e7:56:fe:3e:24:33:f2: 13:01:07:a4:ac:01:b9:46:a6:09:41:7c:9c:ba:12: 4e:ae:09:84:04:0e:93:3b:79:70:88:ed:3a:aa:75: b6:f7:ad:d3:3a:b3:a2:d0:64:39:93:97:23:75:72: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:59:77:B2:73:7A:0F:C3:E4:9B:93:AF:30:89:DF:7F:A3:24:F8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/bcc02f4b-8494-3205-a39a-df56acb1455b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 23.247.132.0/22 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:bd:fc:4e:06:ef:ef:b0:a0:48:74:35:84:1f:1a:7c:50:a2: 7d:37:ea:32:80:d6:b7:d7:4a:ec:26:85:d6:f6:1c:a4:79:79: f3:2b:ed:be:de:bf:09:c5:a7:23:21:ae:66:1a:93:33:b5:c7: ba:95:c5:b0:4b:82:21:84:e1:84:ef:ed:70:6a:9c:3f:75:e5: a8:5d:81:a5:be:12:08:0c:bf:d8:66:07:20:2f:c9:d5:84:ed: db:82:ea:13:8b:5b:7b:c2:c7:31:23:2d:20:e4:07:39:26:13: d2:7b:56:b6:b0:e7:ce:09:d7:1d:83:9e:08:01:22:fe:0b:a5: f4:33:50:0f:48:c0:ff:69:be:4a:bf:df:1c:02:82:73:c2:f2: 34:89:a0:d2:5d:99:ba:c4:ee:8d:d4:79:e1:86:05:e2:27:1a: 76:12:f9:2e:0c:2f:c5:51:79:f8:5a:82:56:24:03:41:25:87: bd:c8:e5:5e:82:a6:2f:85:a8:c4:04:b0:7f:8a:a7:bd:a4:40: cd:51:85:17:0a:fb:52:eb:32:5d:04:90:61:07:99:2e:c2:cf: d4:25:f5:af:a5:05:d9:80:76:25:ad:d7:3d:51:c4:8d:a9:8f: e2:85:d5:d9:27:fa:28:cf:25:9d:45:ce:9a:5c:f0:4a:00:57: d3:8a:53:dd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEq2UPkUcfdXroSZ+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NTI2ZjYxODktMTIzMi00ZTNmLWJkNGMtZjE3YzkxMDYxNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08vYedYKAVpX503dWw2mofDOk2ZcaDGt1kBl XvA8pE176CLwv53I6+OoOUEiqLgm4trHz2zssbn5DkZhacPga3v4CKd+Ws1knUJ/ Iy5GxgEhtIsoLGcFvP+PvTzUTYz2NrGur0Ox7+NeRDLk40TycRt3GykTGD3oj77X DUDUfmJjjU6iIkpAzUtQJumx+XXu9JLJLxiqgEXYRoi7QLrVMimFwZMIJ0kCsWdr ahNyhVZV+u0y4sKrGCZhs5KDg9PmQBLnYeK6ElG9ZedW/j4kM/ITAQekrAG5RqYJ QXycuhJOrgmEBA6TO3lwiO06qnW2963TOrOi0GQ5k5cjdXJcLwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGpZd7Jzeg/D5JuTrzCJ33+jJPiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvYmNjMDJmNGItODQ5NC0z MjA1LWEzOWEtZGY1NmFjYjE0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF/eEAwQC aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFe9/E4G7++woEh0NYQfGnxQon036jKA1rfXSuwmhdb2HKR5 efMr7b7evwnFpyMhrmYakzO1x7qVxbBLgiGE4YTv7XBqnD915ahdgaW+EggMv9hm ByAvydWE7duC6hOLW3vCxzEjLSDkBzkmE9J7Vraw584J1x2DnggBIv4LpfQzUA9I wP9pvkq/3xwCgnPC8jSJoNJdmbrE7o3UeeGGBeInGnYS+S4ML8VRefhaglYkA0El h73I5V6Cpi+FqMQEsH+Kp72kQM1RhRcK+1LrMl0EkGEHmS7Cz9Ql9a+lBdmAdiWt 1z1RxI2pj+KF1dkn+ijPJZ1Fzppc8EoAV9OKU90= -----END CERTIFICATE-----Generated at Mon Aug 4 14:51:42 2025 by rpki-client