$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa File: 23efa9ca-27b1-3dec-8ab8-434288fce699.roa (raw, json) Hash identifier: Bu2fj9yb4apVmz4RQCnmUM1imjuzAo6aKICa8TsbTSQ= Subject key identifier: 50:38:0C:5D:D7:52:D1:DF:53:23:F7:62:C0:2D:55:33:C9:9C:DB:A7 Certificate issuer: /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Certificate serial: 010D0C9F4328584A7A4B41F5112263AADC83ED10 Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 31919 IP address blocks: 162.250.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:41:f5:11:22:63:aa:dc:83:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=5659f95d-0bdc-44f2-b74d-6a486595c990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:06:cf:2f:d7:66:33:95:93:62:5c:32:53:38: 8b:54:f4:11:05:73:86:12:21:37:c9:a4:ff:3b:30: 4f:6c:75:a7:36:1f:19:28:89:ee:8b:53:7b:61:5d: ee:f2:54:3e:ac:69:32:03:00:7f:bb:35:20:32:c6: 0e:77:18:9f:57:90:93:fe:cb:45:84:8d:b8:d9:bf: b0:8a:b3:5c:d3:88:79:5e:eb:20:79:fe:fa:64:18: d7:aa:20:7c:33:25:da:8c:b6:5f:bc:59:36:cb:50: 7f:bf:6a:cb:3f:3c:c9:86:1d:99:4e:03:79:68:11: e6:1a:36:6e:a3:23:81:d3:b0:06:fc:d6:51:bb:4b: 1a:a9:84:00:9d:76:6f:af:a3:33:57:e7:71:e2:75: 08:6d:b0:37:08:ec:40:cd:9b:db:04:de:22:49:53: 5f:aa:ff:04:49:eb:52:03:89:03:dc:37:99:e4:26: 5c:96:6e:37:50:69:fb:c5:8d:87:91:35:b8:03:7b: 17:5c:f2:7c:3d:7b:5d:96:84:4f:42:c6:cd:ef:e1: 98:49:a5:15:5c:fc:1c:25:ba:d3:c8:e3:cd:2f:74: 59:ca:dc:ee:6c:5d:72:b3:c5:8d:6a:22:f9:5b:4a: 78:40:45:b1:7d:1e:87:eb:66:a3:02:01:4e:06:13: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:38:0C:5D:D7:52:D1:DF:53:23:F7:62:C0:2D:55:33:C9:9C:DB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl X509v3 Authority Key Identifier: keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer sbgp-ipAddrBlock: critical IPv4: 162.250.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3d:3a:a8:ea:02:97:2f:42:76:7e:cf:1e:eb:2b:62:fe:88: f7:54:f0:f1:80:f1:60:73:7c:e4:e8:93:7e:01:13:21:7a:26: c1:81:e8:d1:a6:bf:f0:db:52:58:42:62:4e:d9:bd:2c:8a:20: fd:37:9a:31:a1:33:81:60:40:aa:20:87:76:0d:3a:62:82:6e: 1f:c6:5b:03:54:9c:6d:9c:97:b8:6c:0c:23:5e:e6:19:d1:a0: 0d:fb:4a:62:46:c4:ad:1b:ab:02:a5:81:fd:4b:e4:2f:db:53: 96:a4:4e:5f:6e:06:0d:bd:56:2c:49:f4:04:a8:71:08:be:cd: 9c:6f:f7:22:2a:95:e2:42:b4:e2:dc:e1:e5:7b:47:26:6e:b0: 21:5c:19:4d:31:85:a4:54:69:8a:4f:87:fa:46:a1:57:ac:a5: e5:3a:b6:58:d7:6d:63:0f:39:cd:76:3f:1a:dc:2a:cb:46:22: 71:3a:2f:39:76:1f:de:c0:0d:95:90:f6:ff:f2:c1:80:35:9b: 8f:82:1b:95:5f:d1:3e:52:ae:5a:17:df:c6:8b:3a:ef:20:b6: af:18:4f:69:6f:8d:d9:39:b9:b3:cb:ed:29:38:af:9f:a7:d4: 20:24:93:b3:ca:9a:d7:28:e9:09:2b:5c:7f:eb:13:ad:c1:88: f5:e0:2b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0H1ESJjqtyD7RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU5ZDZlNjEtODYxMy00Mjg5LWJlMzQtY2IwZmUwYWVl YTZlMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NTY1OWY5NWQtMGJkYy00NGYyLWI3NGQtNmE0ODY1OTVjOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAbPL9dmM5WTYlwyUziLVPQRBXOGEiE3yaT/ OzBPbHWnNh8ZKInui1N7YV3u8lQ+rGkyAwB/uzUgMsYOdxifV5CT/stFhI242b+w irNc04h5Xusgef76ZBjXqiB8MyXajLZfvFk2y1B/v2rLPzzJhh2ZTgN5aBHmGjZu oyOB07AG/NZRu0saqYQAnXZvr6MzV+dx4nUIbbA3COxAzZvbBN4iSVNfqv8ESetS A4kD3DeZ5CZclm43UGn7xY2HkTW4A3sXXPJ8PXtdloRPQsbN7+GYSaUVXPwcJbrT yOPNL3RZytzubF1ys8WNaiL5W0p4QEWxfR6H62ajAgFOBhOHgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFA4DF3XUtHfUyP3YsAtVTPJnNunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlk NmU2MS04NjEzLTQyODktYmUzNC1jYjBmZTBhZWVhNmUvMjNlZmE5Y2EtMjdiMS0z ZGVjLThhYjgtNDM0Mjg4ZmNlNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDU5ZDZlNjEtODYxMy00Mjg5LWJl MzQtY2IwZmUwYWVlYTZlLzQ1OWQ2ZTYxLTg2MTMtNDI4OS1iZTM0LWNiMGZlMGFl ZWE2ZS5jcmwwHwYDVR0jBBgwFoAU4cDQPgBLYWNKRx1bI0QthHr5a8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlkNmU2MS04NjEzLTQyODktYmUzNC1jYjBm ZTBhZWVhNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc9OqjqApcvQnZ+zx7rK2L+iPdU8PGA8WBzfOTok34BEyF6JsGB6NGm v/DbUlhCYk7ZvSyKIP03mjGhM4FgQKogh3YNOmKCbh/GWwNUnG2cl7hsDCNe5hnR oA37SmJGxK0bqwKlgf1L5C/bU5akTl9uBg29VixJ9ASocQi+zZxv9yIqleJCtOLc 4eV7RyZusCFcGU0xhaRUaYpPh/pGoVespeU6tljXbWMPOc12PxrcKstGInE6Lzl2 H97ADZWQ9v/ywYA1m4+CG5Vf0T5SrloX38aLOu8gtq8YT2lvjdk5ubPL7Sk4r5+n 1CAkk7PKmtco6QkrXH/rE63BiPXgK50= -----END CERTIFICATE-----Generated at Thu Aug 7 14:43:45 2025 by rpki-client