$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa File: 24ba4a3b-6997-383d-8894-c07b096200c9.roa (raw, json) Hash identifier: rhXXUFK8/NUj88Cik666dQPk9QPKAmLK3wU0UN5x0co= Subject key identifier: 6D:5A:F8:0B:8C:F2:75:8C:90:7D:5D:FF:AB:71:66:AE:F2:42:36:18 Certificate issuer: /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d Certificate serial: 010D0C9F4328584AE9F66C7E80DF207B74355560 Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 400932 IP address blocks: 23.171.184.0/24 maxlen: 24 2602:f97b::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:7e:80:df:20:7b:74:35:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=5217aa53-17ff-44b3-80e1-75627f585224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:d5:cf:84:b9:40:21:23:00:a5:b6:da:0c: c8:46:ea:e0:7a:e0:33:5a:4e:bc:6a:6f:10:60:90: bd:b0:86:6f:72:40:b6:55:81:ba:6d:a3:7d:73:ca: b2:1b:60:8f:16:aa:f7:25:ed:5a:46:2d:c7:7c:f6: e4:34:29:ba:5f:ca:cf:77:37:8b:b1:4e:16:22:60: 7e:cc:17:5c:73:99:aa:35:c9:c8:80:06:b0:1d:85: 35:d1:3e:76:13:f1:8a:f6:dc:91:7b:01:32:e7:89: 1f:be:e0:0d:ab:5b:c9:ce:e1:1d:f1:79:7a:23:c6: 73:56:28:83:83:2e:72:5a:56:22:37:46:1d:94:ce: f0:86:6b:ab:68:c2:f3:96:f2:12:10:16:85:58:6f: dd:c0:e8:eb:71:2c:59:e2:43:e1:ff:35:a6:f3:cc: 53:1a:d9:71:88:ed:cc:93:e9:f9:37:f1:1c:62:bf: 68:62:e3:34:fe:1e:47:93:a9:1e:37:d9:4f:33:1f: fb:c6:1f:c1:e3:19:ea:cd:58:b8:31:20:a7:22:f6: 50:56:08:13:b4:bd:f6:c6:24:ef:77:af:2f:fc:29: 7d:ff:df:0a:e9:07:52:35:77:3e:01:e2:0d:bc:22: 81:30:22:9c:be:3c:f7:71:79:d8:ef:8c:8a:fd:4d: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:F8:0B:8C:F2:75:8C:90:7D:5D:FF:AB:71:66:AE:F2:42:36:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl X509v3 Authority Key Identifier: keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer sbgp-ipAddrBlock: critical IPv4: 23.171.184.0/24 IPv6: 2602:f97b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:18:9f:9b:8e:36:3b:27:eb:3b:93:fc:09:65:81:29:d7:47: d1:c6:64:e4:cb:53:3f:bb:69:16:c6:25:31:8d:96:41:3b:c4: df:5d:15:25:a0:52:4a:8f:c5:fe:15:fe:f8:9e:20:9e:f7:a8: 6a:6d:0e:99:a7:ed:59:57:91:e9:7a:4d:28:6d:42:17:b8:5f: ed:53:db:04:ac:93:72:21:f2:46:0e:2b:2f:24:b2:98:dc:98: 78:0b:ca:f5:13:1e:91:71:17:db:fa:3e:85:d5:fe:b4:f6:ea: b1:bc:fb:67:b4:c9:cf:ac:17:e3:5c:a0:fc:3f:97:0f:08:1f: 70:45:c7:17:73:2e:62:b7:39:90:96:2b:db:25:cb:15:02:65: 0c:ae:5d:89:7a:8b:18:c1:22:cd:3c:a0:e6:01:7e:b1:c5:76: 5c:75:2f:d3:d7:f4:58:02:bf:aa:75:9b:21:a2:a6:e7:e3:d9: ee:0f:9c:61:3b:40:f2:06:78:6e:0e:8a:d5:e7:e3:86:d4:c0: 40:31:6d:f0:5b:53:eb:df:b0:e1:9a:2c:23:81:dd:35:67:cb: 25:fe:de:f4:8f:b5:31:55:65:46:65:da:a0:8b:3a:8c:77:3c: 8d:75:81:31:eb:77:f1:8a:ab:9f:41:b8:18:ca:67:5d:9c:6b: ad:e5:96:e6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErp9mx+gN8ge3Q1VWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxZmFkNzQtZjEzNS00Mjc5LTkzZDUtZmU5YWE4MThm YzZkMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NTIxN2FhNTMtMTdmZi00NGIzLTgwZTEtNzU2MjdmNTg1MjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylbVz4S5QCEjAKW22gzIRurgeuAzWk68am8Q YJC9sIZvckC2VYG6baN9c8qyG2CPFqr3Je1aRi3HfPbkNCm6X8rPdzeLsU4WImB+ zBdcc5mqNcnIgAawHYU10T52E/GK9tyRewEy54kfvuANq1vJzuEd8Xl6I8ZzViiD gy5yWlYiN0YdlM7whmuraMLzlvISEBaFWG/dwOjrcSxZ4kPh/zWm88xTGtlxiO3M k+n5N/EcYr9oYuM0/h5Hk6keN9lPMx/7xh/B4xnqzVi4MSCnIvZQVggTtL32xiTv d68v/Cl9/98K6QdSNXc+AeINvCKBMCKcvjz3cXnY74yK/U2uKQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFG1a+AuM8nWMkH1d/6txZq7yQjYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YjFm YWQ3NC1mMTM1LTQyNzktOTNkNS1mZTlhYTgxOGZjNmQvMjRiYTRhM2ItNjk5Ny0z ODNkLTg4OTQtYzA3YjA5NjIwMGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2IxZmFkNzQtZjEzNS00Mjc5LTkz ZDUtZmU5YWE4MThmYzZkLzdiMWZhZDc0LWYxMzUtNDI3OS05M2Q1LWZlOWFhODE4 ZmM2ZC5jcmwwHwYDVR0jBBgwFoAUygU1ggjVDdFz8jbJojYNaPAtzDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YjFmYWQ3NC1mMTM1LTQyNzktOTNkNS1mZTlh YTgxOGZjNmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6u4MA4E AgACMAgDBgAmAvl7ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaGJ+bjjY7J+s7k/wJZYEp10fRxmTky1M/ u2kWxiUxjZZBO8TfXRUloFJKj8X+Ff74niCe96hqbQ6Zp+1ZV5Hpek0obUIXuF/t U9sErJNyIfJGDisvJLKY3Jh4C8r1Ex6RcRfb+j6F1f609uqxvPtntMnPrBfjXKD8 P5cPCB9wRccXcy5itzmQlivbJcsVAmUMrl2JeosYwSLNPKDmAX6xxXZcdS/T1/RY Ar+qdZshoqbn49nuD5xhO0DyBnhuDorV5+OG1MBAMW3wW1Pr37Dhmiwjgd01Z8sl /t70j7UxVWVGZdqgizqMdzyNdYEx63fxiqufQbgYymddnGut5Zbm -----END CERTIFICATE-----Generated at Sun Aug 24 05:43:04 2025 by rpki-client