$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa File: acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa (raw, json) Hash identifier: JJZDBLAWVsMGGPydi3q45XT0h7ANWCUQkp8cX+8jV6k= Subject key identifier: 11:C0:BB:F7:4C:04:B3:BB:3D:79:F9:98:45:AF:88:89:C7:6B:C7:1A Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584AA6F62566FCAC14A8FEFD2FE0 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 19814 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:800::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:a00::/48 maxlen: 48 2602:f805:b00::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 2602:f805:d00::/48 maxlen: 48 2602:f805:e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:25:66:fc:ac:14:a8:fe:fd:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=e2588a07-0096-4508-a9d2-1521dfcf9c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:a6:a9:e2:6f:69:5f:f4:37:b2:e6:8c:f3: 8b:3d:c2:01:cb:3d:de:a8:57:74:73:d5:c1:e2:25: 83:b4:e7:ab:91:d0:89:bb:b5:92:19:10:2b:4c:1e: d9:41:e2:07:87:63:28:9d:c0:66:cb:ae:2b:d0:c3: 5d:b9:67:ab:84:58:a4:8d:d2:d4:5e:e8:6b:f5:d9: e9:0a:6f:b9:62:b0:2d:07:6e:65:67:e2:3b:6d:46: 0c:57:f5:09:07:23:9a:6d:b7:b3:dd:2a:da:78:3a: f0:85:5b:38:8d:9f:5f:f0:f8:cf:6d:64:f2:60:27: 17:eb:95:1a:d4:c8:93:d1:1c:b9:74:22:ba:f6:e4: 75:2b:e2:33:0a:9e:9d:50:c6:31:62:28:14:8a:d8: e2:dc:f1:75:34:e6:0a:6e:8e:f0:db:0a:0f:4d:32: 37:92:75:3f:c6:58:06:26:7a:48:9d:ca:1a:db:ae: 25:ac:85:b2:e7:14:57:3b:60:18:2b:00:28:04:46: ac:d5:94:7c:78:ad:78:35:92:46:22:c0:50:69:e2: 9e:ee:a6:9d:ce:40:05:77:3d:fa:98:7c:da:22:53: 15:b3:fd:b6:25:48:58:3f:ba:bc:68:7e:e7:ee:13: 7d:98:1c:d4:af:7b:29:87:dc:de:40:16:20:f4:6b: 27:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:BB:F7:4C:04:B3:BB:3D:79:F9:98:45:AF:88:89:C7:6B:C7:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:800::/48 2602:f805:900::/48 2602:f805:a00::/48 2602:f805:b00::/48 2602:f805:c00::/48 2602:f805:d00::/48 2602:f805:e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:85:92:2e:71:46:8f:ff:97:27:5d:c7:41:12:85:91:b7:cb: a3:83:85:25:b0:6a:ec:a1:03:72:9d:05:ee:c4:05:aa:75:75: 8a:bf:17:df:3a:a1:06:c2:09:93:35:80:13:4e:d2:d4:b9:37: dc:00:58:74:ac:d7:5c:66:83:8f:53:8c:04:98:a2:1d:21:49: 1f:e8:f0:83:cd:e9:26:d6:ec:41:d1:73:26:92:c4:62:96:19: 53:1e:d7:96:b6:6f:a9:f6:df:b8:f0:ef:8f:8d:4c:bb:24:24: 82:14:aa:8b:15:11:dd:c6:65:99:0a:9d:51:3d:52:74:93:b3: 41:5f:e0:94:1d:19:01:da:b3:d1:8a:f6:62:cf:ca:57:18:ad: eb:09:c1:c7:18:03:6e:34:5f:35:cc:62:e0:39:b4:55:f2:ac: 42:1d:c3:20:39:b5:1e:91:d2:b7:8e:ed:e0:9f:8d:35:1e:3f: 06:dc:0e:6e:b9:fa:4c:8a:77:79:94:ab:4c:7f:7d:80:45:fe: d9:b9:54:48:98:05:27:bd:0a:5f:20:27:ce:7a:9b:f6:ec:49: fd:18:7b:33:ff:83:7a:da:11:3e:15:f9:d7:a7:2a:34:c7:54: 9d:af:fa:a2:bd:ae:03:20:54:cc:34:ee:2e:f2:bc:67:e2:17: 91:16:2b:74 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEqm9iVm/KwUqP79L+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk ZTI1ODhhMDctMDA5Ni00NTA4LWE5ZDItMTUyMWRmY2Y5YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixemqeJvaV/0N7LmjPOLPcIByz3eqFd0c9XB 4iWDtOerkdCJu7WSGRArTB7ZQeIHh2MoncBmy64r0MNduWerhFikjdLUXuhr9dnp Cm+5YrAtB25lZ+I7bUYMV/UJByOabbez3SraeDrwhVs4jZ9f8PjPbWTyYCcX65Ua 1MiT0Ry5dCK69uR1K+IzCp6dUMYxYigUitji3PF1NOYKbo7w2woPTTI3knU/xlgG JnpIncoa264lrIWy5xRXO2AYKwAoBEas1ZR8eK14NZJGIsBQaeKe7qadzkAFdz36 mHzaIlMVs/22JUhYP7q8aH7n7hN9mBzUr3sph9zeQBYg9Gsn+QIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFBHAu/dMBLO7PXn5mEWviInHa8caMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYWNiMWNmYTYtYmE3Mi0z ZjljLWExMGQtNDMwYzU5MjA5YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAMBAIAATAGAwQAF714ME4E AgACMEgDBwAmAvgFAAADBwAmAvgFCAADBwAmAvgFCQADBwAmAvgFCgADBwAmAvgF CwADBwAmAvgFDAADBwAmAvgFDQADBwAmAvgFDgAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhIWSLnFGj/+X J13HQRKFkbfLo4OFJbBq7KEDcp0F7sQFqnV1ir8X3zqhBsIJkzWAE07S1Lk33ABY dKzXXGaDj1OMBJiiHSFJH+jwg83pJtbsQdFzJpLEYpYZUx7XlrZvqfbfuPDvj41M uyQkghSqixUR3cZlmQqdUT1SdJOzQV/glB0ZAdqz0Yr2Ys/KVxit6wnBxxgDbjRf Ncxi4Dm0VfKsQh3DIDm1HpHSt47t4J+NNR4/BtwObrn6TIp3eZSrTH99gEX+2blU SJgFJ70KXyAnznqb9uxJ/Rh7M/+DetoRPhX516cqNMdUna/6or2uAyBUzDTuLvK8 Z+IXkRYrdA== -----END CERTIFICATE-----Generated at Mon Aug 4 19:01:48 2025 by rpki-client