$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa File: 3eb42a5a-0fa5-3564-a10d-1674d389315c.roa (raw, json) Hash identifier: zXGKLoW5EsDoYK1Ywk5t5tLRj3B/MLfU8Dfhm6X51NQ= Subject key identifier: B4:D5:65:E9:82:AB:DA:85:42:AB:A5:46:9A:C7:5A:CD:37:4B:B5:DD Certificate issuer: /CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Certificate serial: 010D0C9F4328584AB650F05A795F996F626D3B00 Authority key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 40343 IP address blocks: 23.168.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f0:5a:79:5f:99:6f:62:6d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=5412e395-36f7-44ee-90ae-84c629f7b3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:00:db:85:63:90:a7:71:18:87:53:55:fa: 31:af:20:a8:64:16:a1:0f:ba:82:72:49:8d:08:8a: 26:f9:c5:90:fd:6a:de:db:05:5f:dc:aa:14:c0:9b: b3:93:06:f8:d3:09:24:6c:c8:ae:c1:22:64:8f:4d: ec:24:65:f4:37:41:69:60:ea:2f:b5:48:28:10:41: e1:1d:47:59:88:4f:32:e1:ce:75:18:9c:17:a7:13: c8:b4:c3:f8:40:aa:85:06:72:2f:12:1e:b4:61:74: cd:e1:90:2e:b8:e9:46:31:86:92:8d:4b:89:de:3a: 23:c0:88:c2:f6:d7:7b:dc:ae:64:ca:4a:0d:66:86: 99:a7:4e:63:cd:c9:b2:33:20:a4:08:7a:b3:84:2a: e5:42:0f:c3:c5:3a:81:28:43:fd:a1:31:97:f9:1c: 65:3f:ef:59:e8:17:57:14:f1:4f:fc:cb:a9:45:da: 50:d6:d2:5f:a9:ad:29:d5:bc:0d:d4:10:b5:1e:06: 48:c0:e2:38:93:31:7c:46:9e:16:b8:fa:60:82:dd: 3b:3f:4e:f1:89:61:c5:c3:f4:13:06:c3:b2:99:78: 9d:1e:9d:74:7f:31:f2:b9:dc:21:89:6c:6e:7e:01: ef:2b:2c:87:b3:90:ff:a9:70:7a:61:a6:93:be:64: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D5:65:E9:82:AB:DA:85:42:AB:A5:46:9A:C7:5A:CD:37:4B:B5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl X509v3 Authority Key Identifier: keyid:6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer sbgp-ipAddrBlock: critical IPv4: 23.168.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4a:1f:9a:84:bd:29:eb:14:65:87:b9:b8:96:58:c3:db:0b: 8e:01:dc:e6:07:cd:94:90:07:6c:fc:69:56:8b:81:91:92:20: eb:c0:95:71:a8:f2:84:c2:a3:a0:c3:b0:37:ed:fd:f9:74:ac: c6:59:a5:de:3e:63:88:a7:3d:fb:b3:73:29:15:58:9e:7b:6c: fa:79:71:59:25:3c:a8:b1:92:1e:b2:43:c5:35:62:50:60:50: 0b:ad:25:3d:66:a4:6b:ff:72:df:26:5a:d4:12:be:f2:16:82: 6a:0c:ed:d6:78:0f:24:ca:08:d0:a6:e3:50:60:ae:7b:99:19: d6:f7:a2:27:b8:7c:c3:b6:8f:e7:b5:b1:95:fa:44:61:43:eb: 09:67:b4:09:d3:44:73:7d:cf:52:60:8b:9e:69:d0:3b:6f:97: be:53:77:fb:6c:e3:aa:5a:e1:3d:c8:b6:02:56:e8:dd:ca:af: af:4e:de:e4:7d:51:39:ac:ed:de:b0:05:00:00:d3:95:19:76: 4b:8a:36:d9:41:24:17:21:c9:53:a6:aa:df:72:63:56:a1:be: 0d:c1:8e:23:13:74:68:89:f9:74:cb:ad:d6:c1:79:a3:e6:c1: 07:96:7a:0e:a1:a3:64:45:a0:b7:6b:e9:74:16:ba:57:80:29: d0:24:fc:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPBaeV+Zb2JtOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY1NGViNjMtMWJiYi00N2NjLThmYzMtZjQ1YTliMmE2 OWE3MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NTQxMmUzOTUtMzZmNy00NGVlLTkwYWUtODRjNjI5ZjdiM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDkA24VjkKdxGIdTVfoxryCoZBahD7qCckmN CIom+cWQ/Wre2wVf3KoUwJuzkwb40wkkbMiuwSJkj03sJGX0N0FpYOovtUgoEEHh HUdZiE8y4c51GJwXpxPItMP4QKqFBnIvEh60YXTN4ZAuuOlGMYaSjUuJ3jojwIjC 9td73K5kykoNZoaZp05jzcmyMyCkCHqzhCrlQg/DxTqBKEP9oTGX+RxlP+9Z6BdX FPFP/MupRdpQ1tJfqa0p1bwN1BC1HgZIwOI4kzF8Rp4WuPpggt07P07xiWHFw/QT BsOymXidHp10fzHyudwhiWxufgHvKyyHs5D/qXB6YaaTvmTipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTVZemCq9qFQqulRprHWs03S7XdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0 ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIyYTY5YTcvM2ViNDJhNWEtMGZhNS0z NTY0LWExMGQtMTY3NGQzODkzMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjY1NGViNjMtMWJiYi00N2NjLThm YzMtZjQ1YTliMmE2OWE3L2I2NTRlYjYzLTFiYmItNDdjYy04ZmMzLWY0NWE5YjJh NjlhNy5jcmwwHwYDVR0jBBgwFoAUbFnfTx45b4mX0TjBDYuBvFS868MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVh OWIyYTY5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtKH5qEvSnrFGWHubiWWMPbC44B3OYHzZSQB2z8aVaLgZGSIOvAlXGo 8oTCo6DDsDft/fl0rMZZpd4+Y4inPfuzcykVWJ57bPp5cVklPKixkh6yQ8U1YlBg UAutJT1mpGv/ct8mWtQSvvIWgmoM7dZ4DyTKCNCm41BgrnuZGdb3oie4fMO2j+e1 sZX6RGFD6wlntAnTRHN9z1Jgi55p0Dtvl75Td/ts46pa4T3ItgJW6N3Kr69O3uR9 UTms7d6wBQAA05UZdkuKNtlBJBchyVOmqt9yY1ahvg3BjiMTdGiJ+XTLrdbBeaPm wQeWeg6ho2RFoLdr6XQWuleAKdAk/K4= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:38 2025 by rpki-client