$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa File: 65b4ebf4-2826-3053-8d95-46485d6fea90.roa (raw, json) Hash identifier: qnbu7DWDR6J+kog+PiVc/2ilMfuVjZfv7P9ZoP/bZtI= Subject key identifier: ED:7D:A5:DC:8A:FF:D2:46:6C:A1:DB:0A:4C:8F:A6:64:D1:EF:4C:38 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F4328584A9E9615B32AA9A17B2617E080 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 19468 IP address blocks: 23.134.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:15:b3:2a:a9:a1:7b:26:17:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=743b741a-4406-47c4-8d56-b93df4d46b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f1:6d:53:95:19:e8:e5:e0:b5:65:97:fc:1e: 6e:73:d7:e4:75:ff:1a:61:d3:a5:b4:73:df:f3:df: e6:a7:90:31:d9:6f:9c:15:60:a2:d1:05:15:2e:9c: 0b:c6:44:7d:ee:0f:a6:ad:2e:92:73:9c:da:19:43: e4:57:48:ff:d8:a2:2d:6b:c2:39:ab:c3:fc:3f:d7: cd:89:03:f7:94:05:21:80:7c:f5:f2:2f:bc:38:aa: c2:25:16:b0:c8:cb:e6:06:8d:9a:27:d5:37:9d:6f: 72:3d:b1:29:78:f4:e1:34:d5:4b:02:d4:14:9e:37: 58:f8:c7:d0:c6:ee:31:79:f1:16:26:cc:5f:3c:dd: b6:94:cd:fa:41:cb:5b:5b:b6:56:a7:03:4f:56:8f: 93:03:53:6a:65:14:08:12:f1:a1:04:c6:19:82:6c: 5c:da:68:f7:16:b8:6a:67:67:d6:93:7f:5b:d5:60: 80:73:54:fa:e9:7f:c5:6a:94:70:b6:16:33:0a:51: 6d:af:70:2e:22:43:9b:60:07:b5:6e:66:c0:b3:cb: 6b:63:2b:69:48:1d:5f:7c:a5:f6:42:1b:c2:65:b4: 54:78:b9:dd:9e:6b:c4:da:6f:08:c7:e1:ec:52:82: 39:bd:1d:d6:b0:ac:ba:03:9d:ef:71:80:37:a3:08: 41:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7D:A5:DC:8A:FF:D2:46:6C:A1:DB:0A:4C:8F:A6:64:D1:EF:4C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:69:d0:8e:ca:43:eb:b2:9a:1c:3b:6d:a9:b7:a3:94:0e:b1: 12:c7:5b:73:56:99:09:e7:a7:38:8c:ce:32:5b:8e:d7:75:48: 46:b6:a7:de:47:cb:57:ce:1d:42:78:8a:29:df:bd:46:a1:01: fd:0b:64:98:a6:f1:ae:ac:76:e1:87:88:82:46:c6:4e:41:83: 0d:54:83:26:13:1e:7f:c0:e2:7d:78:d6:1b:e4:ce:bd:0e:71: 89:88:73:10:df:f3:20:5b:26:4b:d0:cf:e5:2f:a1:39:70:96: 9d:06:c9:74:a7:05:5e:98:18:83:b4:85:d4:76:78:7c:ba:1e: 2e:bd:01:ea:31:fc:f9:73:b1:9a:e7:de:51:79:e3:2d:4a:7f: 91:f3:c1:16:b5:3e:e4:53:09:0f:bc:89:15:d0:bd:ad:18:4c: 84:4e:56:7f:4c:ce:c2:33:79:03:98:56:ca:65:0d:ac:47:90: 3c:8b:17:74:9e:90:cb:01:cc:2d:64:be:d1:51:c2:db:d0:11: d2:c4:1c:9a:78:8b:42:83:5a:a3:80:d3:34:17:c9:56:7b:d7: db:b3:0b:dc:c7:bc:5e:1e:69:d8:9f:00:34:d3:c7:dc:20:fa: fb:d0:92:70:ea:5c:c4:c5:a8:47:66:6c:1a:ae:16:79:6a:94: 37:ee:2c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhWzKqmheyYX4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NzQzYjc0MWEtNDQwNi00N2M0LThkNTYtYjkzZGY0ZDQ2Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvFtU5UZ6OXgtWWX/B5uc9fkdf8aYdOltHPf 89/mp5Ax2W+cFWCi0QUVLpwLxkR97g+mrS6Sc5zaGUPkV0j/2KIta8I5q8P8P9fN iQP3lAUhgHz18i+8OKrCJRawyMvmBo2aJ9U3nW9yPbEpePThNNVLAtQUnjdY+MfQ xu4xefEWJsxfPN22lM36QctbW7ZWpwNPVo+TA1NqZRQIEvGhBMYZgmxc2mj3Frhq Z2fWk39b1WCAc1T66X/FapRwthYzClFtr3AuIkObYAe1bmbAs8trYytpSB1ffKX2 QhvCZbRUeLndnmvE2m8Ix+HsUoI5vR3WsKy6A53vcYA3owhBMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO19pdyK/9JGbKHbCkyPpmTR70w4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvNjViNGViZjQtMjgyNi0z MDUzLThkOTUtNDY0ODVkNmZlYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtp0I7KQ+uymhw7bam3o5QOsRLHW3NWmQnnpziMzjJbjtd1SEa2p95H y1fOHUJ4iinfvUahAf0LZJim8a6sduGHiIJGxk5Bgw1UgyYTHn/A4n141hvkzr0O cYmIcxDf8yBbJkvQz+UvoTlwlp0GyXSnBV6YGIO0hdR2eHy6Hi69Aeox/PlzsZrn 3lF54y1Kf5HzwRa1PuRTCQ+8iRXQva0YTIROVn9MzsIzeQOYVsplDaxHkDyLF3Se kMsBzC1kvtFRwtvQEdLEHJp4i0KDWqOA0zQXyVZ719uzC9zHvF4eadifADTTx9wg +vvQknDqXMTFqEdmbBquFnlqlDfuLNg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:10 2025 by rpki-client