$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa File: cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa (raw, json) Hash identifier: lrdAql2iS3cjCzro/2XK8k2xO7ZsqxjSn75qP9PQ2bs= Subject key identifier: 8C:AD:F0:FD:25:C4:43:16:72:66:5E:69:9D:2E:10:7A:21:7E:27:A6 Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Certificate serial: 010D0C9F4328584A7A4B49E342B5DF2543022880 Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 12131 IP address blocks: 23.161.34.0/24 maxlen: 24 23.187.0.0/24 maxlen: 24 23.187.1.0/24 maxlen: 24 2620:1df::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:49:e3:42:b5:df:25:43:02:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=051f98dc-676f-424d-b848-ff4b20fd121e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:8b:d0:07:d6:86:79:ec:07:1c:14:f3:b8: f1:5b:e6:61:14:12:19:7e:04:5b:e3:7d:c3:3d:36: 98:4b:a8:18:5e:6c:5d:89:1e:1a:21:14:04:f7:c2: 61:01:88:cc:57:5e:3f:14:9a:92:81:f1:15:1f:77: d6:ea:50:7f:5e:44:c5:a7:48:3b:9d:a8:f5:4a:8d: d2:30:93:92:fa:92:1c:02:2e:f1:c5:c1:07:50:50: ed:21:3b:70:e9:18:a9:97:61:e9:04:cc:0c:3d:37: bf:d8:f3:b9:df:0b:1d:1a:62:9b:a9:b0:77:24:d6: 1b:f1:9b:aa:b9:e6:17:b6:fb:dd:e5:c9:0f:35:7e: e5:d8:ca:d8:ef:db:69:8c:aa:c5:93:b2:15:c9:ae: 03:c8:e6:a7:23:95:da:06:ae:28:66:ad:f0:70:db: a0:32:6d:17:0a:0e:a0:57:82:dc:0b:46:f2:1e:7b: db:b4:c7:e8:29:21:ac:cc:a8:40:f5:44:15:38:7e: bf:d5:fc:ab:66:43:41:c5:95:17:e9:b1:ac:fd:3c: 26:bd:db:49:6d:fa:f0:e6:a0:68:a6:76:38:ff:2e: 65:93:73:a2:89:8d:82:7c:5e:a2:ce:48:99:44:26: 57:05:97:a1:57:b5:bf:f7:33:0b:b2:aa:c8:14:2c: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:F0:FD:25:C4:43:16:72:66:5E:69:9D:2E:10:7A:21:7E:27:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl X509v3 Authority Key Identifier: keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.34.0/24 23.187.0.0/23 IPv6: 2620:1df::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8d:10:18:51:ff:7c:1f:25:56:97:2b:5c:b0:33:81:81:84: 43:62:f3:51:78:8a:a9:39:80:0c:7e:84:55:e5:82:88:f0:1f: e2:d4:65:41:14:31:0b:7c:34:12:4b:58:30:e8:c4:4f:fa:1d: 65:42:bf:2c:4d:12:dd:a9:d6:e1:37:44:13:29:d1:c3:ef:b0: f3:1b:14:05:a8:02:19:99:13:4b:89:bc:22:05:69:97:81:25: 4b:24:cc:13:2c:98:5e:0f:73:0b:cb:d1:77:06:f6:96:c4:5b: b5:60:25:e8:f0:98:09:6f:61:dc:2f:fc:ab:1d:7b:a0:26:b3: b9:12:38:90:f1:f7:2a:7e:06:e5:c5:cc:8c:89:82:2f:d9:05: f3:fb:75:b1:56:cc:66:4d:21:85:8f:ff:d8:58:d9:96:ed:05: cc:c0:86:b6:e5:9c:be:24:18:b5:37:9e:4c:7b:79:fe:7b:ed: 7f:a2:21:9b:37:dc:ce:dd:58:cd:2d:9e:39:6d:18:50:1d:90: 76:b7:ae:a1:fe:d3:e8:55:c7:cf:ae:da:d5:0d:a2:b4:37:d1: 2e:9c:e7:7d:12:c3:4b:64:55:77:be:55:d7:a6:b9:95:31:14: 83:07:60:8c:e2:cb:75:47:a9:4f:33:f5:e0:d1:07:78:b4:2f: 2f:d4:af:25 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEp6S0njQrXfJUMCKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy YTYyMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MDUxZjk4ZGMtNjc2Zi00MjRkLWI4NDgtZmY0YjIwZmQxMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy2L0AfWhnnsBxwU87jxW+ZhFBIZfgRb433D PTaYS6gYXmxdiR4aIRQE98JhAYjMV14/FJqSgfEVH3fW6lB/XkTFp0g7naj1So3S MJOS+pIcAi7xxcEHUFDtITtw6Ripl2HpBMwMPTe/2PO53wsdGmKbqbB3JNYb8Zuq ueYXtvvd5ckPNX7l2MrY79tpjKrFk7IVya4DyOanI5XaBq4oZq3wcNugMm0XCg6g V4LcC0byHnvbtMfoKSGszKhA9UQVOH6/1fyrZkNBxZUX6bGs/TwmvdtJbfrw5qBo pnY4/y5lk3OiiY2CfF6izkiZRCZXBZehV7W/9zMLsqrIFCw0WwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFIyt8P0lxEMWcmZeaZ0uEHohfiemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5 MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2YxZjU1NDItMzgzMi0z ZGQ3LWEyYTItMmM2ODU3MWRkMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3 MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl YWE5NzJhNjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6EiAwQB F7sAMA0EAgACMAcDBQAmIAHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFqNEBhR/3wfJVaXK1ywM4GBhENi 81F4iqk5gAx+hFXlgojwH+LUZUEUMQt8NBJLWDDoxE/6HWVCvyxNEt2p1uE3RBMp 0cPvsPMbFAWoAhmZE0uJvCIFaZeBJUskzBMsmF4PcwvL0XcG9pbEW7VgJejwmAlv Ydwv/Ksde6Ams7kSOJDx9yp+BuXFzIyJgi/ZBfP7dbFWzGZNIYWP/9hY2ZbtBczA hrblnL4kGLU3nkx7ef577X+iIZs33M7dWM0tnjltGFAdkHa3rqH+0+hVx8+u2tUN orQ30S6c530Sw0tkVXe+VdemuZUxFIMHYIziy3VHqU8z9eDRB3i0Ly/UryU= -----END CERTIFICATE-----Generated at Fri Aug 8 13:06:06 2025 by rpki-client