$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa File: 5094b170-7783-383b-add6-8db0ea7f91ad.roa (raw, json) Hash identifier: 7XbC4F3KRIfnufEzRoOlGL2SxzsdlwGAbOEswGVAE9s= Subject key identifier: EC:0A:92:D8:F3:1C:06:22:0B:A6:48:F0:23:73:E4:D6:50:1F:1B:A3 Certificate issuer: /CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Certificate serial: 010D0C9F4328584AC2E0FA8322825B7087DA4740 Authority key identifier: C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 2914 IP address blocks: 23.134.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fa:83:22:82:5b:70:87:da:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=3f5b3972-0b36-497c-bf0f-58b93f17d608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:2a:1e:db:f7:46:7a:b8:36:ee:49:d8:99: 9b:b9:c6:8b:34:f2:b5:95:bc:47:d9:b4:93:a1:7f: 88:bf:fc:35:91:dc:9b:66:aa:fa:30:33:40:66:5b: 9f:22:ec:e9:35:b4:86:75:db:52:5f:30:f3:01:25: 29:a4:5d:ef:f2:26:9a:41:4b:c7:52:f3:57:a6:31: 19:0b:02:5c:9d:26:20:fd:26:b0:4f:e6:8a:73:d5: c1:40:ea:4c:ef:5d:ca:7c:2a:54:e6:1f:2f:e9:3b: 51:f6:13:17:54:97:ce:0a:4d:1d:6c:c0:b5:ae:5c: b2:d7:39:82:2d:20:6b:9e:1f:b5:d1:62:5a:f2:d9: 88:75:fb:76:85:17:74:02:0c:0f:f5:d1:2a:80:69: 71:a9:c2:d3:00:fa:c2:fd:b3:32:76:16:7b:e7:37: 31:4c:eb:6f:ed:ee:a2:6e:bd:55:03:9a:06:b7:6c: 74:8c:23:7f:76:f8:a5:b4:ef:42:86:53:db:4b:8f: cf:35:c6:6a:fe:df:9e:92:51:e2:f1:9b:0e:89:60: f0:02:53:54:94:34:43:6a:fd:12:2a:fb:76:71:5b: aa:38:70:e8:b5:8b:a4:bc:c3:33:00:2a:7e:d5:78: 87:3a:0c:90:c3:52:f2:93:fc:1d:fd:c2:f5:28:3e: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0A:92:D8:F3:1C:06:22:0B:A6:48:F0:23:73:E4:D6:50:1F:1B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl X509v3 Authority Key Identifier: keyid:C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer sbgp-ipAddrBlock: critical IPv4: 23.134.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ab:2a:f2:d6:6f:a9:44:96:04:3e:68:18:d0:94:11:54:29: 10:3e:fe:ed:81:8d:5a:8e:48:3d:a9:c1:ef:a0:46:23:db:75: e7:1a:04:73:a4:c5:8a:8c:c8:95:a1:0b:20:19:ae:fb:65:8a: 7d:c4:a3:da:55:5b:44:c7:6f:49:f3:4d:bf:40:d2:b2:37:2f: cf:9a:04:e1:be:32:cd:43:b3:41:7f:df:d8:a3:c4:55:6c:1d: 0d:35:70:2c:59:ec:be:ed:e2:b7:25:7b:31:a3:38:85:9d:ac: 52:31:15:fb:18:76:41:5f:78:15:e2:65:96:50:0e:a5:77:c4: 51:d7:50:be:65:cc:69:a9:3e:08:2d:46:f0:12:c8:4f:2e:f2: 98:f6:15:a7:16:ba:56:79:70:7a:ef:cd:1d:9d:54:30:6d:22: cc:68:60:1e:72:90:b2:17:a6:0a:a3:90:1e:01:70:e2:e0:9a: 11:4b:8d:60:5c:06:bc:12:eb:69:f9:ca:c5:a4:4a:4b:00:39: 62:0b:7a:94:ff:b0:2b:b9:5f:44:d8:a2:71:48:f3:fe:f5:f4: a9:f7:f9:ab:c7:55:0a:c8:a6:5d:d5:53:00:82:4e:b1:57:7d: 15:95:08:d5:ad:bb:3d:0b:06:0e:dd:75:01:2f:f1:57:87:05: e3:bb:5b:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PqDIoJbcIfaR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyZDViODYtY2NhMC00ZjJhLTg3YTQtODc0ZjVlOTZl ZWQ4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2Y1YjM5NzItMGIzNi00OTdjLWJmMGYtNThiOTNmMTdkNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0IqHtv3Rnq4Nu5J2JmbucaLNPK1lbxH2bST oX+Iv/w1kdybZqr6MDNAZlufIuzpNbSGddtSXzDzASUppF3v8iaaQUvHUvNXpjEZ CwJcnSYg/SawT+aKc9XBQOpM713KfCpU5h8v6TtR9hMXVJfOCk0dbMC1rlyy1zmC LSBrnh+10WJa8tmIdft2hRd0AgwP9dEqgGlxqcLTAPrC/bMydhZ75zcxTOtv7e6i br1VA5oGt2x0jCN/dviltO9ChlPbS4/PNcZq/t+eklHi8ZsOiWDwAlNUlDRDav0S Kvt2cVuqOHDotYukvMMzACp+1XiHOgyQw1Lyk/wd/cL1KD7HmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwKktjzHAYiC6ZI8CNz5NZQHxujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTJk NWI4Ni1jY2EwLTRmMmEtODdhNC04NzRmNWU5NmVlZDgvNTA5NGIxNzAtNzc4My0z ODNiLWFkZDYtOGRiMGVhN2Y5MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmEyZDViODYtY2NhMC00ZjJhLTg3 YTQtODc0ZjVlOTZlZWQ4L2JhMmQ1Yjg2LWNjYTAtNGYyYS04N2E0LTg3NGY1ZTk2 ZWVkOC5jcmwwHwYDVR0jBBgwFoAUx3nB3TW8aFEyWWvPV4E7fcTjJM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTJkNWI4Ni1jY2EwLTRmMmEtODdhNC04NzRm NWU5NmVlZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJarKvLWb6lElgQ+aBjQlBFUKRA+/u2BjVqOSD2pwe+gRiPbdecaBHOk xYqMyJWhCyAZrvtlin3Eo9pVW0THb0nzTb9A0rI3L8+aBOG+Ms1Ds0F/39ijxFVs HQ01cCxZ7L7t4rclezGjOIWdrFIxFfsYdkFfeBXiZZZQDqV3xFHXUL5lzGmpPggt RvASyE8u8pj2FacWulZ5cHrvzR2dVDBtIsxoYB5ykLIXpgqjkB4BcOLgmhFLjWBc BrwS62n5ysWkSksAOWILepT/sCu5X0TYonFI8/719Kn3+avHVQrIpl3VUwCCTrFX fRWVCNWtuz0LBg7ddQEv8VeHBeO7WyA= -----END CERTIFICATE-----Generated at Wed Aug 6 06:01:22 2025 by rpki-client