$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa File: 0bd8ae8c-926a-3326-b752-65b165f04694.roa (raw, json) Hash identifier: Q2rqVCke9d3oFmQ1pMq0lRBcUnV49UGAcgMVDnwsdrE= Subject key identifier: 18:AC:35:16:42:5F:93:99:EC:7D:E4:1C:85:7B:D2:C5:50:5F:99:FB Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Certificate serial: 010D0C9F4328584A7D15F0E700C05974829C9F48 Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 46365 IP address blocks: 23.152.56.0/24 maxlen: 24 198.135.179.0/24 maxlen: 24 2602:2cd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f0:e7:00:c0:59:74:82:9c:9f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=1e2ec066-dc07-4183-80ba-95801835c434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f6:a0:b4:2e:a3:c8:6e:ad:bc:3a:88:66:42: d5:6c:53:ba:9b:01:e9:b4:a2:6b:1d:c1:c6:02:6b: 6b:0b:9e:b4:69:47:76:43:87:fc:23:0e:94:6e:1d: 35:1e:8c:da:89:34:3a:72:68:0c:1e:22:6b:76:8d: 4a:ff:ee:3e:b5:7b:7b:34:d1:0a:51:dc:e9:cf:5d: bf:ab:17:1f:a0:55:86:8f:cb:3d:ea:e0:4b:73:9f: da:56:5a:6b:8d:e6:f6:56:ca:cc:27:9a:53:cd:33: 4c:22:1e:da:97:94:09:ad:76:da:22:d9:80:05:78: 20:5e:8e:6b:28:f1:3c:52:4b:76:43:f6:7f:f0:eb: e2:b9:a8:31:e2:01:ec:b7:de:0d:c7:75:c1:fb:39: 6b:d9:99:ac:78:c2:d4:52:30:61:01:55:d8:6c:9e: 1a:d0:0e:76:4a:f3:52:4e:aa:98:b0:87:c6:fb:e8: fc:22:c1:8d:76:59:c0:d7:85:17:5e:b9:7b:96:ad: 00:53:e2:6a:79:6a:3a:8d:4b:a9:fe:d9:36:c6:f3: 4e:c1:fe:c6:55:7b:b8:e0:87:6a:67:5c:85:88:b4: c2:2c:39:4d:c0:be:4b:7a:cb:3c:01:78:2e:b2:ca: 93:e5:d4:e6:7a:69:ed:e9:ae:ca:67:27:db:bb:48: 2e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AC:35:16:42:5F:93:99:EC:7D:E4:1C:85:7B:D2:C5:50:5F:99:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl X509v3 Authority Key Identifier: keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer sbgp-ipAddrBlock: critical IPv4: 23.152.56.0/24 198.135.179.0/24 IPv6: 2602:2cd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e3:70:3e:7e:df:34:49:17:33:a7:40:7d:71:c2:15:c2:78: 52:19:94:5c:41:d9:47:62:c6:d5:78:aa:13:25:83:5e:c9:11: 63:75:23:34:ea:16:cc:0c:ff:77:9c:06:9b:6d:8d:91:b5:0e: cf:58:94:16:a0:26:31:ea:41:c8:c7:bb:7e:70:f6:c3:53:04: f1:ae:0d:0f:d2:53:a9:2d:44:c4:d3:a8:c2:b0:b5:10:33:14: 22:cb:fe:80:48:96:6a:ba:20:54:2f:08:98:14:a2:93:ee:5a: 2c:76:52:95:ef:c6:6d:f6:9f:f6:c5:b5:c2:ad:7a:b2:57:bd: e9:2b:77:c3:78:1f:42:d6:61:e9:5f:6d:b8:9c:98:02:d8:32: 7f:a0:ca:41:2f:dc:a3:4b:0a:e5:9f:98:86:80:51:c9:10:bd: f3:1f:73:86:df:f0:b0:13:83:1b:54:39:85:2c:83:c1:3f:93: 9f:5e:41:de:2c:55:9b:72:da:07:56:c9:1a:b5:c2:49:e5:75: 12:71:8b:8d:60:7b:5f:ee:e3:90:a1:1b:3d:22:48:cb:bd:5b: 82:77:d6:55:b9:74:ac:03:1a:55:69:8c:f0:3f:9e:e5:5a:0a: e9:21:5a:7d:0b:eb:ff:b2:cf:92:b8:3a:f4:44:e4:55:b0:be: 08:6c:e7:b2 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEp9FfDnAMBZdIKcn0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAy M2I0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MWUyZWMwNjYtZGMwNy00MTgzLTgwYmEtOTU4MDE4MzVjNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vagtC6jyG6tvDqIZkLVbFO6mwHptKJrHcHG AmtrC560aUd2Q4f8Iw6Ubh01HozaiTQ6cmgMHiJrdo1K/+4+tXt7NNEKUdzpz12/ qxcfoFWGj8s96uBLc5/aVlprjeb2VsrMJ5pTzTNMIh7al5QJrXbaItmABXggXo5r KPE8Ukt2Q/Z/8Oviuagx4gHst94Nx3XB+zlr2ZmseMLUUjBhAVXYbJ4a0A52SvNS TqqYsIfG++j8IsGNdlnA14UXXrl7lq0AU+JqeWo6jUup/tk2xvNOwf7GVXu44Idq Z1yFiLTCLDlNwL5Less8AXgussqT5dTmemnt6a7KZyfbu0guGwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFBisNRZCX5OZ7H3kHIV70sVQX5n7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3 YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvMGJkOGFlOGMtOTI2YS0z MzI2LWI3NTItNjViMTY1ZjA0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWJlN2JjZjUtMDUzOC00YTkyLTlh ZWYtYzQ2MGYxNTAyM2I0LzFiZTdiY2Y1LTA1MzgtNGE5Mi05YWVmLWM0NjBmMTUw MjNiNC5jcmwwHwYDVR0jBBgwFoAURZQqtWqdfjaPSQmspYB7dN4Nt2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYw ZjE1MDIzYjQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5g4AwQA xoezMA4EAgACMAgDBgQmAgLNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCB43A+ft80SRczp0B9ccIVwnhS GZRcQdlHYsbVeKoTJYNeyRFjdSM06hbMDP93nAabbY2RtQ7PWJQWoCYx6kHIx7t+ cPbDUwTxrg0P0lOpLUTE06jCsLUQMxQiy/6ASJZquiBULwiYFKKT7losdlKV78Zt 9p/2xbXCrXqyV73pK3fDeB9C1mHpX224nJgC2DJ/oMpBL9yjSwrln5iGgFHJEL3z H3OG3/CwE4MbVDmFLIPBP5OfXkHeLFWbctoHVskatcJJ5XUScYuNYHtf7uOQoRs9 IkjLvVuCd9ZVuXSsAxpVaYzwP57lWgrpIVp9C+v/ss+SuDr0RORVsL4IbOey -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:05 2025 by rpki-client