$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa File: 01307e7f-cc1e-3508-a44c-557b2e686d06.roa (raw, json) Hash identifier: tCreSyF/tMdvOrSHHRyVSJi/CWIPSjXnwKAJsmBmN74= Subject key identifier: DD:B6:FE:37:1D:C9:22:F0:25:5C:F4:05:15:3F:EA:09:4E:51:CA:6D Certificate issuer: /CN=91a5f71b-bf1d-474c-b568-55393b7da475 Certificate serial: 010D0C9F4328584A98E37BF20886AC09F0889180 Authority key identifier: E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa Signing time: Tue 22 Jul 2025 00:01:59 +0000 ROA not before: Tue 22 Jul 2025 00:01:59 +0000 ROA not after: Mon 20 Oct 2025 00:01:59 +0000 asID: 401345 IP address blocks: 23.134.252.0/24 maxlen: 24 2602:f88e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:e3:7b:f2:08:86:ac:09:f0:88:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a5f71b-bf1d-474c-b568-55393b7da475 Validity Not Before: Jul 22 00:01:59 2025 GMT Not After : Oct 20 00:01:59 2025 GMT Subject: CN=f2c267c9-6da0-40f3-8509-5e1205dd0e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b6:3c:6e:5d:7c:e5:3b:33:db:48:81:af:4c: 47:e3:53:26:de:4f:df:b6:14:15:fd:f4:1d:34:28: 19:0d:bb:8d:83:9a:d7:d5:51:8c:8d:91:c5:e0:19: 04:6e:d3:dd:36:3b:20:ba:34:a8:0f:66:13:2f:c0: f7:a4:fb:09:da:83:9a:e1:06:24:7a:71:3c:5c:2b: 70:f6:f6:c5:31:82:b3:04:68:06:db:ab:f5:87:29: ac:a7:8b:d7:43:74:de:52:34:c4:20:f8:6f:b5:db: 04:dc:a7:d8:10:0b:d7:48:31:bc:3a:4d:8b:c7:09: e1:af:f3:94:11:c7:ef:a8:86:84:93:22:50:aa:1e: ce:41:9c:8c:1d:00:ae:f9:60:e8:8e:c7:af:29:68: cf:1a:4a:64:f4:1f:4e:6a:1c:e6:f8:fa:b3:63:64: b4:93:3e:28:3f:77:8e:de:f0:a0:c1:4f:a9:f4:a0: 66:76:23:0a:bd:de:d3:46:76:56:2d:a2:cd:f9:ac: d7:05:6f:e7:ed:33:87:92:2b:0b:cf:33:aa:72:a1: 9c:ac:35:8a:9d:58:90:d0:79:4b:9d:70:52:2e:93: 75:dc:73:c7:bc:65:ae:5c:5f:41:96:df:7d:2f:0f: b5:f1:9c:b5:60:e2:49:68:c0:5d:16:16:23:bd:46: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B6:FE:37:1D:C9:22:F0:25:5C:F4:05:15:3F:EA:09:4E:51:CA:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl X509v3 Authority Key Identifier: keyid:E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer sbgp-ipAddrBlock: critical IPv4: 23.134.252.0/24 IPv6: 2602:f88e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:04:62:09:2c:3c:32:33:a2:3a:c6:53:ee:cf:b3:a2:b4:09: cc:5f:e3:c4:d7:71:a0:72:91:e7:ee:1c:16:22:9d:c6:d8:8d: 23:3a:31:de:1a:3e:71:bb:e8:95:51:f7:90:3f:00:44:ed:a1: 76:0f:64:bf:39:20:ad:82:2a:28:b7:f6:03:20:8e:7c:b6:6c: cc:75:dd:69:38:dc:0e:75:2a:84:12:74:ac:43:c3:b2:9c:08: f5:ee:7c:59:9c:ef:09:7c:2f:fa:54:d8:91:f1:77:cb:e7:d9: e5:fb:13:36:9b:21:77:a3:73:25:db:29:72:24:1d:cf:b1:52: 23:7a:ae:4e:b7:25:44:aa:5a:1a:3c:84:3a:72:5a:4e:a1:f1: ff:c2:8d:1b:1e:a5:68:1f:b5:43:6e:1e:0b:2b:9a:05:a8:2c: a9:d8:a8:1e:9e:51:96:67:d1:fc:57:4b:38:16:1f:5e:51:20: 23:03:1d:37:e3:33:44:53:61:af:3e:0c:2c:03:d9:32:87:c7: ad:b7:d2:c4:23:90:74:dc:15:af:be:f1:75:b7:24:d7:63:f6: 5f:85:2a:7f:62:fb:86:0c:50:b3:2b:34:95:c1:e5:79:03:59: 4e:b2:b1:90:21:86:9a:6c:90:f5:df:34:6e:7e:c9:52:9c:de: a6:43:09:5f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqY43vyCIasCfCIkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhNWY3MWItYmYxZC00NzRjLWI1NjgtNTUzOTNiN2Rh NDc1MB4XDTI1MDcyMjAwMDE1OVoXDTI1MTAyMDAwMDE1OVowLzEtMCsGA1UEAxMk ZjJjMjY3YzktNmRhMC00MGYzLTg1MDktNWUxMjA1ZGQwZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLY8bl185Tsz20iBr0xH41Mm3k/fthQV/fQd NCgZDbuNg5rX1VGMjZHF4BkEbtPdNjsgujSoD2YTL8D3pPsJ2oOa4QYkenE8XCtw 9vbFMYKzBGgG26v1hymsp4vXQ3TeUjTEIPhvtdsE3KfYEAvXSDG8Ok2Lxwnhr/OU EcfvqIaEkyJQqh7OQZyMHQCu+WDojsevKWjPGkpk9B9Oahzm+PqzY2S0kz4oP3eO 3vCgwU+p9KBmdiMKvd7TRnZWLaLN+azXBW/n7TOHkisLzzOqcqGcrDWKnViQ0HlL nXBSLpN13HPHvGWuXF9Blt99Lw+18Zy1YOJJaMBdFhYjvUZBMQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFN22/jcdySLwJVz0BRU/6glOUcptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1 ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5M2I3ZGE0NzUvMDEzMDdlN2YtY2MxZS0z NTA4LWE0NGMtNTU3YjJlNjg2ZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTFhNWY3MWItYmYxZC00NzRjLWI1 NjgtNTUzOTNiN2RhNDc1LzkxYTVmNzFiLWJmMWQtNDc0Yy1iNTY4LTU1MzkzYjdk YTQ3NS5jcmwwHwYDVR0jBBgwFoAU5FS/Etvzhah6d8Es3YxHr6Tf3YQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5 M2I3ZGE0NzUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b8MA4E AgACMAgDBgAmAviOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQBGIJLDwyM6I6xlPuz7OitAnMX+PE13Gg cpHn7hwWIp3G2I0jOjHeGj5xu+iVUfeQPwBE7aF2D2S/OSCtgioot/YDII58tmzM dd1pONwOdSqEEnSsQ8OynAj17nxZnO8JfC/6VNiR8XfL59nl+xM2myF3o3Ml2yly JB3PsVIjeq5OtyVEqloaPIQ6clpOofH/wo0bHqVoH7VDbh4LK5oFqCyp2KgenlGW Z9H8V0s4Fh9eUSAjAx034zNEU2GvPgwsA9kyh8ett9LEI5B03BWvvvF1tyTXY/Zf hSp/YvuGDFCzKzSVweV5A1lOsrGQIYaabJD13zRufslSnN6mQwlf -----END CERTIFICATE-----Generated at Sun Aug 10 19:47:34 2025 by rpki-client