$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/b4308c18-56ba-3fd8-8da0-e532a9f1fc06.roa File: b4308c18-56ba-3fd8-8da0-e532a9f1fc06.roa (raw, json) Hash identifier: do8doMpqi29gwDX+1+RF1uXTi4w+I8oKaaF1uGGU4AA= Subject key identifier: 64:E7:9C:5C:F3:65:28:F1:87:3C:66:AF:1E:FD:E4:3A:9B:F7:D4:84 Certificate issuer: /CN=1716e48f-a64c-4227-b984-34b75b5f7e97 Certificate serial: 010D0C9F4328584AAC8B7C94F01DFD491362B2D8 Authority key identifier: 3D:CF:76:F3:2D:14:4F:11:86:F1:48:0A:2D:25:47:D1:06:2C:88:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/b4308c18-56ba-3fd8-8da0-e532a9f1fc06.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 396480 IP address blocks: 23.131.64.0/24 maxlen: 24 23.131.65.0/24 maxlen: 24 139.60.72.0/22 maxlen: 22 2604:4ec0::/36 maxlen: 36 2604:4ec0:1000::/36 maxlen: 36 2604:4ec0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:8b:7c:94:f0:1d:fd:49:13:62:b2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1716e48f-a64c-4227-b984-34b75b5f7e97 Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=ee37ab94-0bf5-49a5-845f-b0570841da6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1c:04:cb:7b:98:c5:6e:05:28:e5:8d:8e:ea: ab:57:58:7f:0f:d4:2c:11:a6:61:0c:2e:6a:28:c8: 9d:07:35:f4:6a:ef:2b:96:f0:83:83:11:bc:7d:a6: 44:6b:07:ac:bf:b2:4c:d3:ea:30:98:80:58:d4:28: 58:cb:3d:42:2a:85:12:e2:46:8a:62:23:1a:b4:11: f5:66:cf:42:3f:50:ed:84:fd:c0:02:80:eb:4c:9e: 0a:19:d5:a1:5b:ae:f2:60:20:be:5e:3a:5b:a8:12: 6d:b1:c2:43:be:d9:95:e4:23:f7:72:09:87:91:2f: a8:3f:b3:48:f1:fb:bc:78:96:16:f5:1a:2b:28:7f: a0:78:5d:15:bf:fe:b5:b0:26:78:e7:0e:53:80:3c: 9d:13:08:67:eb:85:2f:02:c3:ce:c8:24:5d:0a:86: c4:aa:ff:99:53:1e:27:25:19:eb:e9:10:21:8f:fd: 3b:6e:21:1f:79:ff:ea:cf:e0:cb:7d:5b:af:89:c6: 00:a6:fa:7b:e1:46:81:83:0d:13:54:cc:e2:26:59: 93:ad:14:42:c9:52:21:85:a4:0f:b3:5a:6c:b0:68: 7c:05:a4:da:16:2a:88:27:b8:36:ad:21:fb:a4:e9: a1:5f:27:ca:12:bc:0c:e6:36:ad:20:60:a4:31:d2: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E7:9C:5C:F3:65:28:F1:87:3C:66:AF:1E:FD:E4:3A:9B:F7:D4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/b4308c18-56ba-3fd8-8da0-e532a9f1fc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.crl X509v3 Authority Key Identifier: keyid:3D:CF:76:F3:2D:14:4F:11:86:F1:48:0A:2D:25:47:D1:06:2C:88:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer sbgp-ipAddrBlock: critical IPv4: 23.131.64.0/23 139.60.72.0/22 IPv6: 2604:4ec0::-2604:4ec0:2fff:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:02:6e:27:eb:50:bd:a0:1e:43:37:44:10:dd:5f:78:89:6a: 68:cc:b1:d4:0e:0e:5c:8b:48:a0:3b:6c:87:91:26:5e:4e:5a: 30:1a:47:1d:5d:2b:14:91:5d:5e:51:df:be:3e:80:ae:2c:d9: 63:99:31:03:c1:bc:53:96:80:6f:98:df:93:36:96:72:cf:44: fd:5f:86:6d:ab:ef:40:4b:1e:8f:bf:7e:68:65:cc:90:18:0c: 30:7b:7a:97:17:83:f8:21:8f:59:59:8b:51:54:e3:4c:88:f9: e5:31:d3:83:43:31:ff:2d:0a:c7:39:6c:5f:25:64:17:65:7f: 07:d0:7d:f6:37:a1:d4:42:1e:cf:18:71:f8:43:63:95:cc:04: 2b:c8:71:82:7f:5c:82:77:ae:e5:83:3f:d2:22:88:50:3f:1e: 76:fd:f1:54:a6:c5:ea:61:50:09:9e:36:59:7b:e4:62:51:dd: 13:02:16:83:f9:30:f9:0f:bd:1d:bd:1e:30:bd:84:fc:3b:74: 7e:32:78:b0:dd:c9:e8:c3:de:51:c7:1c:f6:0a:5a:03:99:0c: eb:8f:9e:86:86:a1:96:b9:2f:16:3f:4e:64:2f:23:cb:f6:ee: b5:25:aa:2f:99:5a:c8:62:d0:c1:24:39:ac:b6:98:b8:b8:88: fe:a3:46:42 -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEqsi3yU8B39SRNistgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxNmU0OGYtYTY0Yy00MjI3LWI5ODQtMzRiNzViNWY3 ZTk3MB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZWUzN2FiOTQtMGJmNS00OWE1LTg0NWYtYjA1NzA4NDFkYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRwEy3uYxW4FKOWNjuqrV1h/D9QsEaZhDC5q KMidBzX0au8rlvCDgxG8faZEawesv7JM0+owmIBY1ChYyz1CKoUS4kaKYiMatBH1 Zs9CP1DthP3AAoDrTJ4KGdWhW67yYCC+XjpbqBJtscJDvtmV5CP3cgmHkS+oP7NI 8fu8eJYW9RorKH+geF0Vv/61sCZ45w5TgDydEwhn64UvAsPOyCRdCobEqv+ZUx4n JRnr6RAhj/07biEfef/qz+DLfVuvicYApvp74UaBgw0TVMziJlmTrRRCyVIhhaQP s1pssGh8BaTaFiqIJ7g2rSH7pOmhXyfKErwM5jatIGCkMdLeXQIDAQABo4IDdDCC A3AwHQYDVR0OBBYEFGTnnFzzZSjxhzxmrx795Dqb99SEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzE2 ZTQ4Zi1hNjRjLTQyMjctYjk4NC0zNGI3NWI1ZjdlOTcvYjQzMDhjMTgtNTZiYS0z ZmQ4LThkYTAtZTUzMmE5ZjFmYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxNmU0OGYtYTY0Yy00MjI3LWI5 ODQtMzRiNzViNWY3ZTk3LzE3MTZlNDhmLWE2NGMtNDIyNy1iOTg0LTM0Yjc1YjVm N2U5Ny5jcmwwHwYDVR0jBBgwFoAUPc928y0UTxGG8UgKLSVH0QYsiP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzE2ZTQ4Zi1hNjRjLTQyMjctYjk4NC0zNGI3 NWI1ZjdlOTcuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQBF4NAAwQC izxIMBcEAgACMBEwDwMFBiYETsADBgQmBE7AIDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlAm4n61C9oB5D N0QQ3V94iWpozLHUDg5ci0igO2yHkSZeTlowGkcdXSsUkV1eUd++PoCuLNljmTED wbxTloBvmN+TNpZyz0T9X4Ztq+9ASx6Pv35oZcyQGAwwe3qXF4P4IY9ZWYtRVONM iPnlMdODQzH/LQrHOWxfJWQXZX8H0H32N6HUQh7PGHH4Q2OVzAQryHGCf1yCd67l gz/SIohQPx52/fFUpsXqYVAJnjZZe+RiUd0TAhaD+TD5D70dvR4wvYT8O3R+Mniw 3cnow95Rxxz2CloDmQzrj56GhqGWuS8WP05kLyPL9u61JaovmVrIYtDBJDmstpi4 uIj+o0ZC -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:34 2025 by rpki-client