$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa File: bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa (raw, json) Hash identifier: 2AtiI+gw2BWdBetErV/kQ92bsWRecWUPHlSlMFn5K6M= Subject key identifier: 45:7B:4C:D8:27:57:F4:12:DB:FC:FD:86:36:8A:EE:3B:82:E1:F9:36 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584A9D30D7B8D144B6626F7C7440 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 393336 IP address blocks: 162.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:d7:b8:d1:44:b6:62:6f:7c:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=a23b7836-c49d-4a50-859c-7fb7a9b363b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:e0:d0:8e:d8:a7:ce:2d:6b:50:93:5e:2f: fe:2f:ec:1e:08:a1:22:d7:92:46:64:91:ee:68:e7: 2c:bb:e9:9a:7b:c9:eb:ba:5e:91:ef:82:9c:2d:d9: 5c:05:c9:c0:07:ca:b2:56:c3:f8:02:a2:ee:a2:bf: 41:7f:1f:79:c2:6a:f3:c9:80:2c:94:2d:cb:45:c1: 21:44:ab:44:42:ec:7c:56:f2:50:23:a7:33:db:49: 0d:14:63:e1:c7:2a:71:95:d5:a6:27:0d:dc:fe:8d: 52:d3:92:46:39:72:52:a7:0b:23:3a:ad:05:a8:62: ed:93:70:25:ab:df:87:6a:1b:00:c5:80:91:73:4a: eb:e4:fd:d2:07:ba:d5:a8:aa:61:0a:3d:c4:ea:e6: 08:d1:aa:9e:20:93:bd:a9:89:5d:c6:3f:ce:24:ec: 65:99:4b:73:f4:4a:5c:d7:8b:12:7c:e7:45:e1:4c: 0e:e0:b8:6c:36:54:d7:14:4e:fa:09:77:13:dd:9b: fb:27:c5:b7:82:f3:a1:9b:e7:3b:7c:2e:74:0f:4c: 4b:4b:6e:ee:fe:18:0c:34:75:ce:63:56:ba:4e:b2: 36:88:7a:b2:30:b2:4a:bf:27:82:89:b0:4f:db:63: a5:1b:fa:ec:f8:97:58:0c:ac:fe:0c:d8:92:90:0a: 71:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:4C:D8:27:57:F4:12:DB:FC:FD:86:36:8A:EE:3B:82:E1:F9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 162.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:f5:05:aa:97:1f:24:a7:ff:f0:63:9d:e1:7e:2f:64:0f:5e: 20:2a:db:0d:d7:23:1e:55:9c:3d:ba:fd:32:70:e5:43:fc:56: 29:b8:77:d9:25:1a:16:0c:42:06:85:0e:4e:f5:b4:6d:96:95: 65:21:c4:58:72:3c:58:a3:4d:7f:ca:dd:41:e5:1a:79:77:69: 1d:d2:45:19:82:0d:47:0f:38:7c:0e:5c:01:4a:07:14:71:14: 5d:c9:cd:9b:b3:14:02:7e:0a:b2:40:25:4b:3a:54:72:4b:18: 72:e4:3d:09:b4:e4:e0:5d:9c:dc:f4:cd:8a:5b:f9:11:6f:4f: 36:63:51:86:b8:09:73:ba:f7:6c:fc:ba:65:57:3c:20:ec:ef: 9f:9c:10:83:65:31:ff:1b:7b:73:a7:e8:73:27:03:1a:d8:d0: cf:93:fd:d0:53:74:c0:9c:59:02:ca:60:65:00:4f:35:6f:80: 40:a4:37:38:ec:79:57:e6:f0:c8:28:d3:5a:9f:45:c4:94:aa: 1b:ef:bb:6a:d7:f0:cb:70:d7:91:f6:57:67:59:dc:3e:2e:f9: 57:dd:a1:6d:f2:3c:7e:0d:c6:8e:1a:11:68:d5:9b:0e:64:cd: 9a:03:c5:ff:06:4d:fc:94:09:db:f3:f3:c5:c0:3f:52:5e:a1: cf:19:6c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMNe40US2Ym98dEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk YTIzYjc4MzYtYzQ5ZC00YTUwLTg1OWMtN2ZiN2E5YjM2M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjETg0I7Yp84ta1CTXi/+L+weCKEi15JGZJHu aOcsu+mae8nrul6R74KcLdlcBcnAB8qyVsP4AqLuor9Bfx95wmrzyYAslC3LRcEh RKtEQux8VvJQI6cz20kNFGPhxypxldWmJw3c/o1S05JGOXJSpwsjOq0FqGLtk3Al q9+HahsAxYCRc0rr5P3SB7rVqKphCj3E6uYI0aqeIJO9qYldxj/OJOxlmUtz9Epc 14sSfOdF4UwO4LhsNlTXFE76CXcT3Zv7J8W3gvOhm+c7fC50D0xLS27u/hgMNHXO Y1a6TrI2iHqyMLJKvyeCibBP22OlG/rs+JdYDKz+DNiSkApx+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV7TNgnV/QS2/z9hjaK7juC4fk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmZhY2YxNmUtNmMyYS0z MDY4LWI3NzUtOWI0YjcyZjc2N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAML1BaqXHySn//BjneF+L2QPXiAq2w3XIx5VnD26/TJw5UP8Vim4d9kl GhYMQgaFDk71tG2WlWUhxFhyPFijTX/K3UHlGnl3aR3SRRmCDUcPOHwOXAFKBxRx FF3JzZuzFAJ+CrJAJUs6VHJLGHLkPQm05OBdnNz0zYpb+RFvTzZjUYa4CXO692z8 umVXPCDs75+cEINlMf8be3On6HMnAxrY0M+T/dBTdMCcWQLKYGUATzVvgECkNzjs eVfm8Mgo01qfRcSUqhvvu2rX8Mtw15H2V2dZ3D4u+VfdoW3yPH4Nxo4aEWjVmw5k zZoDxf8GTfyUCdvz88XAP1Jeoc8ZbK0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:20 2025 by rpki-client