$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa File: a917fca9-ce27-3640-9fa5-0743e75ecab6.roa (raw, json) Hash identifier: Ka6zU5Rmv9E+ZfsuSDbGC5bZ5leUUHXSJOpLggRTjGs= Subject key identifier: 06:FC:B6:D0:BE:CA:E1:5D:46:42:AE:89:68:A0:7B:12:DB:B1:83:96 Certificate issuer: /CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Certificate serial: 010D0C9F4328584A612B223686CAF19EB13C5400 Authority key identifier: AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 395163 IP address blocks: 23.150.192.0/24 maxlen: 24 2604:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:22:36:86:ca:f1:9e:b1:3c:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=d9da138e-7e19-429a-88ce-c57c52f4c761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:ea:08:be:48:34:51:dc:27:ee:18:97:a0: d7:02:d7:94:8c:ca:d9:33:31:8d:0e:4d:2f:71:f4: b9:03:a6:40:a0:dd:2a:01:09:e9:42:46:1b:58:58: 52:43:60:41:dd:83:7e:08:5e:34:2f:2d:aa:61:d5: 3d:08:b1:35:3c:c4:b8:5b:dd:ab:11:65:b8:85:0a: 24:65:f0:1c:05:60:6f:2f:c5:3b:e2:8b:76:97:49: a1:b9:53:5f:be:dd:62:f0:92:5b:5a:1d:a7:be:03: 4d:72:9c:0a:56:9e:2b:6c:fb:81:f8:f4:7b:a2:d9: 76:b7:0c:6c:2e:ba:3e:46:eb:16:19:92:e1:75:38: 1a:da:19:19:5e:dd:91:b5:22:a9:2d:92:dc:96:11: ff:8d:e6:aa:da:58:24:9e:64:0f:c5:ff:c8:fe:ea: 9c:5e:b4:58:bc:88:3b:95:52:0e:26:17:42:9c:a0: b0:18:80:00:75:33:8f:22:fd:1c:80:23:52:37:bc: 7a:6b:62:58:18:f2:5c:5a:8c:6e:fe:54:2c:a7:9b: d1:1e:62:c5:c8:2c:55:5c:e0:11:07:2d:7b:e6:3a: 3f:08:ee:15:d1:23:43:75:70:03:6d:6a:c5:f0:ce: 7b:9d:89:8d:21:95:2b:ad:3e:f8:c2:c5:54:e7:8c: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FC:B6:D0:BE:CA:E1:5D:46:42:AE:89:68:A0:7B:12:DB:B1:83:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl X509v3 Authority Key Identifier: keyid:AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer sbgp-ipAddrBlock: critical IPv4: 23.150.192.0/24 IPv6: 2604:70c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3f:68:ca:81:c6:6c:0e:5e:b3:97:7a:ae:5a:60:89:ca:60: 71:8f:dd:c6:b5:16:7a:30:73:c5:d9:53:8d:17:3a:82:06:76: ab:c6:83:5a:ec:2a:9d:7f:05:66:82:19:7a:1b:8c:b5:5b:25: fa:43:2f:f6:c8:5b:96:78:77:ea:50:df:7f:66:0a:0e:11:49: ed:40:a7:d5:74:e3:5c:c4:ae:49:91:20:1e:d8:9a:35:27:c5: bb:18:f3:cb:e1:37:69:ec:53:aa:e0:e2:6e:31:26:a0:d6:82: 87:56:d3:f8:7c:e0:79:31:e4:67:47:b6:6c:85:1b:b6:b5:55: d8:37:60:0c:48:0f:f9:81:cf:6b:98:58:a9:f2:7c:51:ee:39: a8:08:17:f3:5b:f2:2a:0e:65:7f:f2:3a:c2:66:37:86:bf:84: d1:07:27:44:ff:64:70:21:6d:45:83:a9:22:02:29:90:2c:f0: 11:b5:50:61:a9:70:c7:22:61:80:48:bf:32:77:d3:52:ea:05: 0f:38:0a:3c:8c:a1:96:c6:eb:0b:18:e5:37:a4:f4:55:fe:a4: ed:d9:9f:de:5e:d6:d8:93:0b:48:df:af:9e:6c:06:4e:bb:6a: f5:82:7c:8c:43:30:e3:86:b7:14:b2:56:29:2a:e3:63:08:8c: 69:ff:23:34 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEphKyI2hsrxnrE8VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjZWM3N2ItM2Q1YS00ODk2LWI5ZWQtYjViNDdiMWJi YWRiMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk ZDlkYTEzOGUtN2UxOS00MjlhLTg4Y2UtYzU3YzUyZjRjNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlLqCL5INFHcJ+4Yl6DXAteUjMrZMzGNDk0v cfS5A6ZAoN0qAQnpQkYbWFhSQ2BB3YN+CF40Ly2qYdU9CLE1PMS4W92rEWW4hQok ZfAcBWBvL8U74ot2l0mhuVNfvt1i8JJbWh2nvgNNcpwKVp4rbPuB+PR7otl2twxs Lro+RusWGZLhdTga2hkZXt2RtSKpLZLclhH/jeaq2lgknmQPxf/I/uqcXrRYvIg7 lVIOJhdCnKCwGIAAdTOPIv0cgCNSN7x6a2JYGPJcWoxu/lQsp5vRHmLFyCxVXOAR By175jo/CO4V0SNDdXADbWrF8M57nYmNIZUrrT74wsVU54zctwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAb8ttC+yuFdRkKuiWigexLbsYOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmNl Yzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0N2IxYmJhZGIvYTkxN2ZjYTktY2UyNy0z NjQwLTlmYTUtMDc0M2U3NWVjYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjZWM3N2ItM2Q1YS00ODk2LWI5 ZWQtYjViNDdiMWJiYWRiL2FmY2VjNzdiLTNkNWEtNDg5Ni1iOWVkLWI1YjQ3YjFi YmFkYi5jcmwwHwYDVR0jBBgwFoAUr1xSMdWXONfwyewybIHwh/P+XfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmNlYzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0 N2IxYmJhZGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5bAMA0E AgACMAcDBQAmBHDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABg/aMqBxmwOXrOXeq5aYInKYHGP3ca1Fnow c8XZU40XOoIGdqvGg1rsKp1/BWaCGXobjLVbJfpDL/bIW5Z4d+pQ339mCg4RSe1A p9V041zErkmRIB7YmjUnxbsY88vhN2nsU6rg4m4xJqDWgodW0/h84Hkx5GdHtmyF G7a1Vdg3YAxID/mBz2uYWKnyfFHuOagIF/Nb8ioOZX/yOsJmN4a/hNEHJ0T/ZHAh bUWDqSICKZAs8BG1UGGpcMciYYBIvzJ301LqBQ84CjyMoZbG6wsY5Tek9FX+pO3Z n95e1tiTC0jfr55sBk67avWCfIxDMOOGtxSyVikq42MIjGn/IzQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:08 2025 by rpki-client