$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa File: 4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa (raw, json) Hash identifier: rUUGfCUrKLATcjrrV9mat9G0zjnOamwyXoZzsp5yiBw= Subject key identifier: 9A:1C:D9:BE:CD:57:1A:17:1C:41:94:1E:A6:75:68:F8:32:B9:64:30 Certificate issuer: /CN=cc195d24-8046-44e5-bf80-7bdde011ee7b Certificate serial: 010D0C9F4328584A9A6631CCCD1DD0F07440B200 Authority key identifier: BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 400240 IP address blocks: 23.189.112.0/24 maxlen: 24 2620:9e:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:31:cc:cd:1d:d0:f0:74:40:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc195d24-8046-44e5-bf80-7bdde011ee7b Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=9d253fe4-2158-4f5a-8fa3-b0b60e93b24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:5d:62:34:c2:23:55:4e:56:0f:93:71:c0: 95:07:31:b4:00:1e:59:1d:d4:84:d0:61:f9:e5:50: 23:7d:d7:19:c6:d3:30:3b:35:65:10:22:b3:27:59: ca:61:99:69:e6:43:59:24:fd:77:bf:c4:84:51:1a: 1d:c5:b3:db:7b:85:ba:ed:97:71:c8:d0:3f:b3:b8: 48:9d:cd:ce:0a:c1:92:05:5c:0c:1f:57:1b:12:c4: d3:3f:49:18:a9:dc:35:a7:5a:b0:23:7e:8f:85:8d: 14:de:ae:53:c8:f9:9d:44:3c:c9:a7:f5:ab:2b:10: 0b:74:b9:f8:ba:3e:9d:7b:f8:c2:2c:6e:04:7d:3f: 2f:88:8d:60:18:70:dc:44:70:18:bf:a4:39:0b:44: b8:95:cf:6c:bf:5c:3d:06:1f:8c:87:52:fd:d1:dd: 2e:aa:70:fb:e0:99:26:09:45:30:6c:9b:0a:13:47: 48:dd:85:56:7a:38:23:93:e1:cf:94:4c:48:b6:2e: 8f:f3:b5:fc:c4:9c:4f:89:7c:a5:04:24:70:18:cc: 92:c1:a7:00:fc:c4:f9:55:a3:f1:cf:28:4f:b6:7b: d8:03:f8:90:00:81:c1:f7:fc:73:46:cd:ef:28:92: 4b:eb:da:1b:40:d6:f5:d0:82:70:f3:8d:54:65:ba: 64:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1C:D9:BE:CD:57:1A:17:1C:41:94:1E:A6:75:68:F8:32:B9:64:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl X509v3 Authority Key Identifier: keyid:BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer sbgp-ipAddrBlock: critical IPv4: 23.189.112.0/24 IPv6: 2620:9e:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:42:ce:2d:8c:ed:5e:4b:98:82:78:09:b9:ac:5a:3f:33:95: 04:a7:ea:b1:08:dc:01:5d:8e:43:c7:77:ab:46:6b:0f:9d:7a: 1d:e5:cf:d5:5c:d1:8e:6d:e7:b7:b1:86:63:78:30:04:12:e7: 5e:3d:98:29:29:7a:6b:7f:8a:b0:c6:d7:26:de:5f:fe:be:d2: df:67:18:c1:91:f9:ba:58:03:63:67:f1:cc:81:16:29:e2:7a: 04:3d:f3:b8:1e:18:6e:79:9f:2d:71:a8:f0:9b:7a:3f:22:b6: 3d:9b:23:b3:38:c0:44:15:32:21:f9:61:f4:51:7c:b6:93:57: ad:17:1a:e0:67:c8:1e:b7:e7:3d:00:9e:e7:db:0d:e5:0d:23: 0f:ad:88:a1:ff:b5:ae:20:9a:a6:44:22:da:83:e0:42:2f:f9: 92:50:70:0f:fc:59:1d:19:6a:a3:5c:a3:be:7f:fe:a6:74:e0: 30:5d:42:89:ad:6c:80:94:62:5c:68:d4:7e:94:01:b3:2e:68: 7a:ab:41:1c:79:a0:5e:53:fc:b6:3b:21:bd:fa:43:3c:fe:3e: d9:ca:60:fa:c1:f7:e8:fd:58:ce:a5:e7:25:7d:0e:66:b9:f3: 6e:34:5e:f3:5b:0f:32:3a:5f:d8:ed:3a:65:53:bc:cc:5b:87: a8:e2:11:c3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqaZjHMzR3Q8HRAsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MxOTVkMjQtODA0Ni00NGU1LWJmODAtN2JkZGUwMTFl ZTdiMB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk OWQyNTNmZTQtMjE1OC00ZjVhLThmYTMtYjBiNjBlOTNiMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrxdYjTCI1VOVg+TccCVBzG0AB5ZHdSE0GH5 5VAjfdcZxtMwOzVlECKzJ1nKYZlp5kNZJP13v8SEURodxbPbe4W67ZdxyNA/s7hI nc3OCsGSBVwMH1cbEsTTP0kYqdw1p1qwI36PhY0U3q5TyPmdRDzJp/WrKxALdLn4 uj6de/jCLG4EfT8viI1gGHDcRHAYv6Q5C0S4lc9sv1w9Bh+Mh1L90d0uqnD74Jkm CUUwbJsKE0dI3YVWejgjk+HPlExIti6P87X8xJxPiXylBCRwGMySwacA/MT5VaPx zyhPtnvYA/iQAIHB9/xzRs3vKJJL69obQNb10IJw841UZbpkWQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJoc2b7NVxoXHEGUHqZ1aPgyuWQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYzE5 NWQyNC04MDQ2LTQ0ZTUtYmY4MC03YmRkZTAxMWVlN2IvNGYyYzI3MWUtOTk4NS0z ODA0LTk2ZjktYzM3YzliN2IxYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2MxOTVkMjQtODA0Ni00NGU1LWJm ODAtN2JkZGUwMTFlZTdiL2NjMTk1ZDI0LTgwNDYtNDRlNS1iZjgwLTdiZGRlMDEx ZWU3Yi5jcmwwHwYDVR0jBBgwFoAUu4j5t9zYwGVScVc28mAMR+WM8U4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jYzE5NWQyNC04MDQ2LTQ0ZTUtYmY4MC03YmRk ZTAxMWVlN2IuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF71wMA8E AgACMAkDBwAmIACe4AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXkLOLYztXkuYgngJuaxaPzOVBKfqsQjc AV2OQ8d3q0ZrD516HeXP1VzRjm3nt7GGY3gwBBLnXj2YKSl6a3+KsMbXJt5f/r7S 32cYwZH5ulgDY2fxzIEWKeJ6BD3zuB4YbnmfLXGo8Jt6PyK2PZsjszjARBUyIflh 9FF8tpNXrRca4GfIHrfnPQCe59sN5Q0jD62Iof+1riCapkQi2oPgQi/5klBwD/xZ HRlqo1yjvn/+pnTgMF1Cia1sgJRiXGjUfpQBsy5oeqtBHHmgXlP8tjshvfpDPP4+ 2cpg+sH36P1YzqXnJX0OZrnzbjRe81sPMjpf2O06ZVO8zFuHqOIRww== -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:26 2025 by rpki-client